https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2006-1329.htmlhttps://patchthecve.com/cve/CVE-2006-1329.htmlTue, 16 Jun 2026 22:22:26 +0000MEDIUM 5.0: The SASL negotiation in Jabber Studio jabberd before 2.0s11 allows remote attackers to cause a denial of service ("c2s segfault") by sending a "response stanza before an auth stanza".https://patchthecve.com/cve/CVE-2004-2391.htmlhttps://patchthecve.com/cve/CVE-2004-2391.htmlTue, 16 Jun 2026 22:09:34 +0000MEDIUM 5.0: Jabber Gadu-Gadu Transport (a.k.a. jabber-gg-transport) 2.0.x before 2.0.8 allows remote attackers to cause a denial of service a message with an empty <priority/> tag.https://patchthecve.com/cve/CVE-2004-2390.htmlhttps://patchthecve.com/cve/CVE-2004-2390.htmlTue, 16 Jun 2026 22:09:33 +0000MEDIUM 5.0: The roster import functionality in Jabber Gadu-Gadu Transport (a.k.a. jabber-gg-transport) 2.0.x before 2.0.8, when using libgadu 1.0 and later, allows attackers to cause a denial of service via unknown vectors.https://patchthecve.com/cve/CVE-2004-2389.htmlhttps://patchthecve.com/cve/CVE-2004-2389.htmlTue, 16 Jun 2026 22:09:33 +0000MEDIUM 5.0: Unknown vulnerability in Jabber Gadu-Gadu Transport (a.k.a. jabber-gg-transport) 2.0.x before 2.0.8 allows remote attackers to cause a denial of service (infinite loop) via user re-registration.https://patchthecve.com/cve/CVE-2004-1378.htmlhttps://patchthecve.com/cve/CVE-2004-1378.htmlTue, 16 Jun 2026 22:07:35 +0000MEDIUM 5.0: The expat XML parser code, as used in the open source Jabber (jabberd) 1.4.3 and earlier, jadc2s 0.9.0 and earlier, and possibly other packages, allows remote attackers to cause a denial of service (application crash) via a malformed packet to a socket that accepts XML connections.