Vulnerabilities > Origin Validation Error

DATE CVE VULNERABILITY TITLE RISK
2017-02-09 CVE-2017-5605 Origin Validation Error vulnerability in Movim
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display.
network
high complexity
movim CWE-346
5.9
2017-02-09 CVE-2017-5604 Origin Validation Error vulnerability in Mcabber
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display.
network
high complexity
mcabber CWE-346
5.9
2017-02-09 CVE-2017-5603 Origin Validation Error vulnerability in Jitsi 2.5.5061/2.9.5544
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display.
network
high complexity
jitsi CWE-346
5.9
2017-02-09 CVE-2017-5602 Origin Validation Error vulnerability in Jappix Project Jappix
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display.
network
high complexity
jappix-project CWE-346
5.9
2017-02-09 CVE-2017-5593 Origin Validation Error vulnerability in Psi-Plus Psi+ 0.16.563.580/0.16.571.627
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display.
network
high complexity
psi-plus CWE-346
5.9
2017-02-09 CVE-2017-5592 Origin Validation Error vulnerability in Profanity Project Profanity 0.4.7/0.5.0
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display.
network
high complexity
profanity-project CWE-346
5.9
2017-02-09 CVE-2017-5591 Origin Validation Error vulnerability in multiple products
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display.
5.9
2017-02-09 CVE-2017-5590 Origin Validation Error vulnerability in multiple products
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display.
network
high complexity
chatsecure zom CWE-346
5.9
2017-02-09 CVE-2017-5589 Origin Validation Error vulnerability in Yaxim Bruno and Yaxim
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display.
network
high complexity
yaxim CWE-346
5.9
2014-02-06 CVE-2014-1487 Origin Validation Error vulnerability in multiple products
The Web workers implementation in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allows remote attackers to bypass the Same Origin Policy and obtain sensitive authentication information via vectors involving error messages.
7.5