İçeriğe atla
Noroxi

quassel-irc kayıtları

quassel-irc üreticisine ait 13 yayımlanmış kayıt.

Ürüne göre süzün ↓

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%100
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.

Yıllara göre kayıt

  1. 18
  2. 21

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

13 kayıt
  • CVE-2018-1000178
    40Planlayın

    A heap corruption of type CWE-120 exists in quassel version 0.12.4 in quasselcore in void DataStreamPeer::processMessage(const QByteArray &m

    KritikCVSS 9,8İstismar yokEPSS %4

    quassel-irc · quassel8 May 2018

  • CVE-2016-4414
    31İzleyin

    The onReadyRead function in core/coreauthhandler.cpp in Quassel before 0.12.4 allows remote attackers to cause a denial of service (NULL poi

    YüksekCVSS 7,5İstismar yokEPSS %2

    opensuse · leap13 Haz 2016

  • CVE-2015-8547
    31İzleyin

    The CoreUserInputHandler::doMode function in core/coreuserinputhandler.cpp in Quassel 0.10.0 allows remote attackers to cause a denial of se

    YüksekCVSS 7,5İstismar yokEPSS %2

    quassel-irc · quassel8 Oca 2016

  • CVE-2018-1000179
    31İzleyin

    A NULL Pointer Dereference of CWE-476 exists in quassel version 0.12.4 in the quasselcore void CoreAuthHandler::handle(const Login &msg) cor

    YüksekCVSS 7,5İstismar yokEPSS %2

    quassel-irc · quassel8 May 2018

  • CVE-2015-3427
    31İzleyin

    Quassel before 0.12.2 does not properly re-initialize the database session when the PostgreSQL database is restarted, which allows remote at

    YüksekCVSS 7,5İstismar yokEPSS %1

    quassel-irc · quassel14 May 2015

  • CVE-2021-34825
    30İzleyin

    Quassel through 0.13.1, when --require-ssl is enabled, launches without SSL or TLS support if a usable X.509 certificate is not found on the

    YüksekCVSS 7,5İstismar yokEPSS %0

    quassel-irc · quassel17 Haz 2021

  • CVE-2013-4422
    28İzleyin

    SQL injection vulnerability in Quassel IRC before 0.9.1, when Qt 4.8.5 or later and PostgreSQL 8.2 or later are used, allows remote attacker

    OrtaCVSS 6,8İstismar yokEPSS %2

    postgresql · postgresql23 Eki 2013

  • CVE-2014-8483
    21İzleyin

    The blowfishECB function in core/cipher.cpp in Quassel IRC 0.10.0 allows remote attackers to cause a denial of service (out-of-bounds read)

    OrtaCVSS 5,0İstismar yokEPSS %3

    canonical · ubuntu linux6 Kas 2014

  • CVE-2015-2779
    21İzleyin

    Stack consumption vulnerability in the message splitting functionality in Quassel before 0.12-rc1 allows remote attackers to cause a denial

    OrtaCVSS 5,0İstismar yokEPSS %2

    quassel-irc · quassel10 Nis 2015

  • CVE-2015-2778
    21İzleyin

    Quassel before 0.12-rc1 uses an incorrect data-type size when splitting a message, which allows remote attackers to cause a denial of servic

    OrtaCVSS 5,0İstismar yokEPSS %2

    quassel-irc · quassel10 Nis 2015

  • CVE-2011-3354
    21İzleyin

    The CtcpParser::packedReply method in core/ctcpparser.cpp in Quassel before 0.7.3 allows remote attackers to cause a denial of service (cras

    OrtaCVSS 5,0İstismar yokEPSS %2

    quassel-irc · quassel4 Eki 2011

  • CVE-2010-3443
    21İzleyin

    ctcphandler.cpp in Quassel before 0.6.3 and 0.7.x before 0.7.1 allows remote attackers to cause a denial of service (unresponsive IRC) via m

    OrtaCVSS 5,0İstismar yokEPSS %1

    quassel-irc · quassel irc23 Kas 2013

  • CVE-2013-6404
    17İzleyin

    Quassel core (server daemon) in Quassel IRC before 0.9.2 does not properly verify the user ID when accessing user backlogs, which allows rem

    OrtaCVSS 4,0İstismar yokEPSS %2

    quassel-irc · quassel irc9 Ara 2013