Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Lightwitch Subscribe
Filtered by product Metronome
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-2744 2 Lightwitch, Prosody 2 Metronome, Prosody 2014-04-18 7.8 HIGH N/A
plugins/mod_compression.lua in (1) Prosody before 0.9.4 and (2) Lightwitch Metronome through 3.4 negotiates stream compression while a session is unauthenticated, which allows remote attackers to cause a denial of service (resource consumption) via compressed XML elements in an XMPP stream, aka an "xmppbomb" attack.
CVE-2014-2743 1 Lightwitch 1 Metronome 2014-04-11 7.8 HIGH N/A
plugins/mod_compression.lua in Lightwitch Metronome through 3.4 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XMPP stream, aka an "xmppbomb" attack.