kadu records
4 published records for vendor kadu.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 25%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Records by year
Bar: total · dark part: CISA KEV.
Recurring classes
- CWE-189 Numeric Errors1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
32Monitor | CVE-2005-3960No exploit | Kadu 0.4.2 and 0.5.0pre allows remote attackers to cause a denial of service (crash or generated traffic) via a malformed message, possibly kadu · kadu | High7.8 | 2.0%Dec 1, 2005 |
31Monitor | CVE-2005-1852No exploit | Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, CenterICQ, Kadu, and other packekg · ekg · CWE-189 | High7.5 | 4.7%Jul 26, 2005 |
21Monitor | CVE-2006-0768No exploit | Kadu 0.4.3 allows remote attackers to cause a denial of service (application crash) via a large number of image send requests.kadu · kadu | Medium5.0 | 1.8%Feb 18, 2006 |
18Monitor | CVE-2012-1410No exploit | Multiple cross-site scripting (XSS) vulnerabilities in the History Window implementation in Kadu 0.9.0 through 0.11.0 allow remote attackerskadu · kadu · CWE-79 | Medium4.3 | 2.4%Feb 29, 2012 |
- CVE-2005-396032Monitor
Kadu 0.4.2 and 0.5.0pre allows remote attackers to cause a denial of service (crash or generated traffic) via a malformed message, possibly
HighCVSS 7.8No exploitEPSS 2%kadu · kaduDec 1, 2005
- CVE-2005-185231Monitor
Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, CenterICQ, Kadu, and other pack
HighCVSS 7.5No exploitEPSS 4%ekg · ekgJul 26, 2005
- CVE-2006-076821Monitor
Kadu 0.4.3 allows remote attackers to cause a denial of service (application crash) via a large number of image send requests.
MediumCVSS 5.0No exploitEPSS 1%kadu · kaduFeb 18, 2006
- CVE-2012-141018Monitor
Multiple cross-site scripting (XSS) vulnerabilities in the History Window implementation in Kadu 0.9.0 through 0.11.0 allow remote attackers
MediumCVSS 4.3No exploitEPSS 2%kadu · kaduFeb 29, 2012