https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2019-10288.htmlhttps://patchthecve.com/cve/CVE-2019-10288.htmlWed, 17 Jun 2026 02:10:38 +0000HIGH 8.8: Jenkins Jabber Server Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.https://patchthecve.com/cve/CVE-2004-0953.htmlhttps://patchthecve.com/cve/CVE-2004-0953.htmlTue, 16 Jun 2026 22:06:44 +0000HIGH 10.0: Buffer overflow in the C2S module in the open source Jabber 2.x server (Jabberd) allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long username.https://patchthecve.com/cve/CVE-2004-0013.htmlhttps://patchthecve.com/cve/CVE-2004-0013.htmlTue, 16 Jun 2026 22:04:46 +0000MEDIUM 5.0: jabber 1.4.2, 1.4.2a, and possibly earlier versions, does not properly handle SSL connections, which allows remote attackers to cause a denial of service (crash).