Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Simon Mcvittie Subscribe
Filtered by product Telepathy Gabble
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2013-1431 1 Simon Mcvittie 1 Telepathy Gabble 2016-11-08 6.8 MEDIUM N/A
The Wocky module in Telepathy Gabble before 0.16.6 and 0.17.x before 0.17.4, when connecting to a "legacy Jabber server," does not properly enforce the WockyConnector:tls-required flag, which allows remote attackers to bypass TLS verification and perform a man-in-the-middle attacks.
CVE-2013-1769 1 Simon Mcvittie 1 Telepathy Gabble 2014-01-22 5.0 MEDIUM N/A
A certain hashing algorithm in Telepathy Gabble 0.16.x before 0.16.5 and 0.17.x before 0.17.3 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted message.