irssi kayıtları
irssi üreticisine ait 43 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 5
- Düzeltme kaydı olan
- %86
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-416 Use After Free10
- CWE-476 NULL Pointer Dereference8
- CWE-125 Out-of-bounds Read6
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer4
- CWE-134 Use of Externally-Controlled Format String2
- CWE-20 Improper Input Validation1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
43 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2002-1840İstismar yok | irssi IRC client 0.8.4, when downloaded after 14-March-2002, could contain a backdoor in the configuration file, which allows remote attackeirssi · irssi | Kritik10,0 | — | %2,7 | 31 Ara 2002 |
40Planlayın | CVE-2017-10965İstismar yok | An issue was discovered in Irssi before 1.0.4.irssi · irssi · CWE-476 | Kritik9,8 | — | %3,4 | 7 Tem 2017 |
40Planlayın | CVE-2017-7191İstismar yok | The netjoin processing in Irssi 1.x before 1.0.2 allows attackers to cause a denial of service (use-after-free) and possibly execute arbitrairssi · irssi · CWE-416 | Kritik9,8 | — | %3,3 | 27 Mar 2017 |
40Planlayın | CVE-2017-10966İstismar yok | An issue was discovered in Irssi before 1.0.4.irssi · irssi · CWE-416 | Kritik9,8 | — | %2,9 | 7 Tem 2017 |
40Planlayın | CVE-2019-5882İstismar yok | Irssi 1.1.x before 1.1.2 has a use after free when hidden lines are expired from the scroll buffer.irssi · irssi · CWE-416 | Kritik9,8 | — | %2,5 | 9 Oca 2019 |
40Planlayın | CVE-2019-15717İstismar yok | Irssi 1.2.x before 1.2.2 has a use-after-free if the IRC server sends a double CAP.irssi · irssi · CWE-416 | Kritik9,8 | — | %2,4 | 29 Ağu 2019 |
40Planlayın | CVE-2018-7053İstismar yok | An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1.irssi · irssi · CWE-416 | Kritik9,8 | — | %2,4 | 15 Şub 2018 |
40Planlayın | CVE-2018-7054İstismar yok | An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1.irssi · irssi · CWE-416 | Kritik9,8 | — | %2,3 | 15 Şub 2018 |
40Planlayın | CVE-2018-5208İstismar yok | In Irssi before 1.0.6, a calculation error in the completion code could cause a heap buffer overflow when completing certain strings.irssi · irssi · CWE-119 | Kritik9,8 | — | %2,3 | 6 Oca 2018 |
40Planlayın | CVE-2020-29602İstismar yok | The official irssi docker images before 1.1-alpine (Alpine specific) contain a blank password for a root user.irssi · docker image | Kritik9,8 | — | %2,1 | 8 Ara 2020 |
40Planlayın | CVE-2018-5206İstismar yok | When the channel topic is set without specifying a sender, Irssi before 1.0.6 may dereference a NULL pointer.irssi · irssi · CWE-476 | Kritik9,8 | — | %2,1 | 6 Oca 2018 |
38İzleyin | CVE-2007-4396İstismar yok | Multiple CRLF injection vulnerabilities in (1) ixmmsa.pl 0.3, (2) l33tmusic.pl 2.00, (3) mpg123.pl 0.01, (4) ogg123.pl 0.01, (5) xmms.pl 2.0irssi · irssi | Kritik9,3 | — | %2,2 | 18 Ağu 2007 |
33İzleyin | CVE-2019-13045İstismar yok | Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the seirssi · irssi · CWE-416 | Yüksek8,1 | — | %3,3 | 29 Haz 2019 |
32İzleyin | CVE-2017-9469İstismar yok | In Irssi before 1.0.3, when receiving certain incorrectly quoted DCC files, it tries to find the terminating quote one byte before the allocirssi · irssi · CWE-119 | Yüksek7,5 | — | %6,0 | 6 Haz 2017 |
32İzleyin | CVE-2017-5193İstismar yok | The nickcmp function in Irssi before 0.8.21 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a irssi · irssi · CWE-476 | Yüksek7,5 | — | %5,5 | 3 Mar 2017 |
32İzleyin | CVE-2017-5195İstismar yok | Irssi 0.8.17 before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted ANSI x8 color cirssi · irssi · CWE-125 | Yüksek7,5 | — | %5,4 | 3 Mar 2017 |
32İzleyin | CVE-2017-5196İstismar yok | Irssi 0.8.18 before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via vectors involving stringsirssi · irssi · CWE-125 | Yüksek7,5 | — | %5,0 | 3 Mar 2017 |
31İzleyin | CVE-2017-5194İstismar yok | Use-after-free vulnerability in Irssi before 0.8.21 allows remote attackers to cause a denial of service (crash) via an invalid nick messageirssi · irssi · CWE-416 | Yüksek7,5 | — | %4,9 | 3 Mar 2017 |
31İzleyin | CVE-2017-5356İstismar yok | Irssi before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a string containing a formattingirssi · irssi · CWE-125 | Yüksek7,5 | — | %4,7 | 3 Mar 2017 |
31İzleyin | CVE-2016-7044İstismar yok | The unformat_24bit_color function in the format parsing code in Irssi before 0.8.20, when compiled with true-color enabled, allows remote atirssi · irssi · CWE-119 | Yüksek7,5 | — | %4,7 | 27 Eyl 2016 |
31İzleyin | CVE-2016-7045İstismar yok | The format_send_to_gui function in the format parsing code in Irssi before 0.8.20 allows remote attackers to cause a denial of service (heapirssi · irssi · CWE-119 | Yüksek7,5 | — | %4,7 | 27 Eyl 2016 |
31İzleyin | CVE-2017-9468İstismar yok | In Irssi before 1.0.3, when receiving a DCC message without source nick/host, it attempts to dereference a NULL pointer.irssi · irssi · CWE-476 | Yüksek7,5 | — | %3,6 | 6 Haz 2017 |
31İzleyin | CVE-2018-7051İstismar yok | An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1.irssi · irssi · CWE-125 | Yüksek7,5 | — | %2,4 | 15 Şub 2018 |
31İzleyin | CVE-2018-5205İstismar yok | When using incomplete escape codes, Irssi before 1.0.6 may access data beyond the end of the string.irssi · irssi · CWE-134 | Yüksek7,5 | — | %2,4 | 6 Oca 2018 |
31İzleyin | CVE-2017-15721İstismar yok | In Irssi before 1.0.5, certain incorrectly formatted DCC CTCP messages could cause a NULL pointer dereference.irssi · irssi · CWE-476 | Yüksek7,5 | — | %2,3 | 22 Eki 2017 |
- CVE-2002-184041Planlayın
irssi IRC client 0.8.4, when downloaded after 14-March-2002, could contain a backdoor in the configuration file, which allows remote attacke
KritikCVSS 10,0İstismar yokEPSS %2irssi · irssi31 Ara 2002
- CVE-2017-1096540Planlayın
An issue was discovered in Irssi before 1.0.4.
KritikCVSS 9,8İstismar yokEPSS %3irssi · irssi7 Tem 2017
- CVE-2017-719140Planlayın
The netjoin processing in Irssi 1.x before 1.0.2 allows attackers to cause a denial of service (use-after-free) and possibly execute arbitra
KritikCVSS 9,8İstismar yokEPSS %3irssi · irssi27 Mar 2017
- CVE-2017-1096640Planlayın
An issue was discovered in Irssi before 1.0.4.
KritikCVSS 9,8İstismar yokEPSS %2irssi · irssi7 Tem 2017
- CVE-2019-588240Planlayın
Irssi 1.1.x before 1.1.2 has a use after free when hidden lines are expired from the scroll buffer.
KritikCVSS 9,8İstismar yokEPSS %2irssi · irssi9 Oca 2019
- CVE-2019-1571740Planlayın
Irssi 1.2.x before 1.2.2 has a use-after-free if the IRC server sends a double CAP.
KritikCVSS 9,8İstismar yokEPSS %2irssi · irssi29 Ağu 2019
- CVE-2018-705340Planlayın
An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1.
KritikCVSS 9,8İstismar yokEPSS %2irssi · irssi15 Şub 2018
- CVE-2018-705440Planlayın
An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1.
KritikCVSS 9,8İstismar yokEPSS %2irssi · irssi15 Şub 2018
- CVE-2018-520840Planlayın
In Irssi before 1.0.6, a calculation error in the completion code could cause a heap buffer overflow when completing certain strings.
KritikCVSS 9,8İstismar yokEPSS %2irssi · irssi6 Oca 2018
- CVE-2020-2960240Planlayın
The official irssi docker images before 1.1-alpine (Alpine specific) contain a blank password for a root user.
KritikCVSS 9,8İstismar yokEPSS %2irssi · docker image8 Ara 2020
- CVE-2018-520640Planlayın
When the channel topic is set without specifying a sender, Irssi before 1.0.6 may dereference a NULL pointer.
KritikCVSS 9,8İstismar yokEPSS %2irssi · irssi6 Oca 2018
- CVE-2007-439638İzleyin
Multiple CRLF injection vulnerabilities in (1) ixmmsa.pl 0.3, (2) l33tmusic.pl 2.00, (3) mpg123.pl 0.01, (4) ogg123.pl 0.01, (5) xmms.pl 2.0
KritikCVSS 9,3İstismar yokEPSS %2irssi · irssi18 Ağu 2007
- CVE-2019-1304533İzleyin
Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the se
YüksekCVSS 8,1İstismar yokEPSS %3irssi · irssi29 Haz 2019
- CVE-2017-946932İzleyin
In Irssi before 1.0.3, when receiving certain incorrectly quoted DCC files, it tries to find the terminating quote one byte before the alloc
YüksekCVSS 7,5İstismar yokEPSS %6irssi · irssi6 Haz 2017
- CVE-2017-519332İzleyin
The nickcmp function in Irssi before 0.8.21 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a
YüksekCVSS 7,5İstismar yokEPSS %5irssi · irssi3 Mar 2017
- CVE-2017-519532İzleyin
Irssi 0.8.17 before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted ANSI x8 color c
YüksekCVSS 7,5İstismar yokEPSS %5irssi · irssi3 Mar 2017
- CVE-2017-519632İzleyin
Irssi 0.8.18 before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via vectors involving strings
YüksekCVSS 7,5İstismar yokEPSS %5irssi · irssi3 Mar 2017
- CVE-2017-519431İzleyin
Use-after-free vulnerability in Irssi before 0.8.21 allows remote attackers to cause a denial of service (crash) via an invalid nick message
YüksekCVSS 7,5İstismar yokEPSS %4irssi · irssi3 Mar 2017
- CVE-2017-535631İzleyin
Irssi before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a string containing a formatting
YüksekCVSS 7,5İstismar yokEPSS %4irssi · irssi3 Mar 2017
- CVE-2016-704431İzleyin
The unformat_24bit_color function in the format parsing code in Irssi before 0.8.20, when compiled with true-color enabled, allows remote at
YüksekCVSS 7,5İstismar yokEPSS %4irssi · irssi27 Eyl 2016
- CVE-2016-704531İzleyin
The format_send_to_gui function in the format parsing code in Irssi before 0.8.20 allows remote attackers to cause a denial of service (heap
YüksekCVSS 7,5İstismar yokEPSS %4irssi · irssi27 Eyl 2016
- CVE-2017-946831İzleyin
In Irssi before 1.0.3, when receiving a DCC message without source nick/host, it attempts to dereference a NULL pointer.
YüksekCVSS 7,5İstismar yokEPSS %3irssi · irssi6 Haz 2017
- CVE-2018-705131İzleyin
An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1.
YüksekCVSS 7,5İstismar yokEPSS %2irssi · irssi15 Şub 2018
- CVE-2018-520531İzleyin
When using incomplete escape codes, Irssi before 1.0.6 may access data beyond the end of the string.
YüksekCVSS 7,5İstismar yokEPSS %2irssi · irssi6 Oca 2018
- CVE-2017-1572131İzleyin
In Irssi before 1.0.5, certain incorrectly formatted DCC CTCP messages could cause a NULL pointer dereference.
YüksekCVSS 7,5İstismar yokEPSS %2irssi · irssi22 Eki 2017