Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
igniterealtime openfire 3.6.2 vulnerabilities and exploits
(subscribe to this query)
505
VMScore
CVE-2009-0497
Directory traversal vulnerability in log.jsp in Ignite Realtime Openfire 3.6.2 allows remote malicious users to read arbitrary files via a ..\ (dot dot backslash) in the log parameter.
Igniterealtime Openfire 3.6.2
1 EDB exploit
405
VMScore
CVE-2009-1595
The jabber:iq:auth implementation in IQAuthHandler.java in Ignite Realtime Openfire prior to 3.6.4 allows remote authenticated users to change the passwords of arbitrary accounts via a modified username element in a passwd_change action.
Igniterealtime Openfire 3.0.1
Igniterealtime Openfire 3.1.0
Igniterealtime Openfire 3.3.0
Igniterealtime Openfire 3.3.2
Igniterealtime Openfire 3.5.1
Igniterealtime Openfire 3.5.2
Igniterealtime Openfire 2.6.2
Igniterealtime Openfire 3.0.0
Igniterealtime Openfire 3.2.3
Igniterealtime Openfire 3.2.4
Igniterealtime Openfire 3.4.4
Igniterealtime Openfire 3.4.5
Igniterealtime Openfire 3.5.0
Igniterealtime Openfire 3.4.2
Igniterealtime Openfire
Igniterealtime Openfire 2.6.0
Igniterealtime Openfire 2.6.1
Igniterealtime Openfire 3.2.1
Igniterealtime Openfire 3.2.2
Igniterealtime Openfire 3.4.1
Igniterealtime Openfire 3.4.3
Igniterealtime Openfire 3.6.2
1 EDB exploit
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
denial of service
CVE-2024-27371
CVE-2024-20405
CVE-2024-31627
CVE-2024-31625
race condition
CVE-2024-4358
cross-site scripting
CVE-2023-20938
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started