Vendor/product archive

lightwitch / metronome CVEs

Beta · best-effort

2 CVEs tagged to lightwitch / metronome — 0 Critical, 2 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to lightwitch vendor archive

CVE-2014-2744

Published Apr 11, 2014

plugins/mod_compression.lua in (1) Prosody before 0.9.4 and (2) Lightwitch Metronome through 3.4 negotiates stream compression while a session is unauthenticated, which allows rem…

CVSS 7.8 · High

Vendor/product tagsBeta · best-effort

CVE-2014-2743

Published Apr 11, 2014

plugins/mod_compression.lua in Lightwitch Metronome through 3.4 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a deni…

CVSS 7.8 · High

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1