QU
Vendor
Quassel-irc
13
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2021-34825 | QU Quassel Quassel-irc | 7.5 | Jun 17 | Quassel through 0.13.1, when --require-ssl is enabled, launches without SSL or TLS support if a usable X.509 certificate is not found on the local system |
| CVE-2018-1000179 | QU Quassel Quassel-irc | 7.5 | May 8 | A NULL Pointer Dereference of CWE-476 exists in quassel version 0.12.4 in the quasselcore void CoreAuthHandler::handle(const Login &msg) coreauthhandler.cpp line 235 that allows… |
| CVE-2018-1000178 | QU Quassel Quassel-irc | 9.8 | May 8 | A heap corruption of type CWE-120 exists in quassel version 0.12.4 in quasselcore in void DataStreamPeer::processMessage(const QByteArray &msg) datastreampeer.cpp line 62 that… |
| CVE-2016-4414 | QU Quassel Quassel-irc | 7.5 | Jun 13 | The onReadyRead function in core/coreauthhandler.cpp in Quassel before 0.12.4 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via invalid… |
| CVE-2015-8547 | QU Quassel Quassel-irc | 7.5 | Jan 8 | The CoreUserInputHandler::doMode function in core/coreuserinputhandler.cpp in Quassel 0.10.0 allows remote attackers to cause a denial of service (application crash) via the "/op… |
| CVE-2015-3427 | QU Quassel Quassel-irc | – | May 14 | Quassel before 0.12.2 does not properly re-initialize the database session when the PostgreSQL database is restarted, which allows remote attackers to conduct SQL injection… |
| CVE-2015-2779 | QU Quassel Quassel-irc | – | Apr 10 | Stack consumption vulnerability in the message splitting functionality in Quassel before 0.12-rc1 allows remote attackers to cause a denial of service (uncontrolled recursion) via… |
| CVE-2015-2778 | QU Quassel Quassel-irc | – | Apr 10 | Quassel before 0.12-rc1 uses an incorrect data-type size when splitting a message, which allows remote attackers to cause a denial of service (crash) via a long CTCP query… |
| CVE-2014-8483 | QI Quassel Irc Quassel-irc | – | Nov 6 | The blowfishECB function in core/cipher.cpp in Quassel IRC 0.10.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a malformed string |
| CVE-2013-6404 | QI Quassel Irc Quassel-irc | – | Dec 9 | Quassel core (server daemon) in Quassel IRC before 0.9.2 does not properly verify the user ID when accessing user backlogs, which allows remote authenticated users to read other… |
| CVE-2010-3443 | QI Quassel Irc Quassel-irc | – | Nov 23 | ctcphandler.cpp in Quassel before 0.6.3 and 0.7.x before 0.7.1 allows remote attackers to cause a denial of service (unresponsive IRC) via multiple Client-To-Client Protocol… |
| CVE-2013-4422 | QI Quassel Irc Quassel-irc | – | Oct 23 | SQL injection vulnerability in Quassel IRC before 0.9.1, when Qt 4.8.5 or later and PostgreSQL 8.2 or later are used, allows remote attackers to execute arbitrary SQL commands via… |
| CVE-2011-3354 | QU Quassel Quassel-irc | – | Oct 4 | The CtcpParser::packedReply method in core/ctcpparser.cpp in Quassel before 0.7.3 allows remote attackers to cause a denial of service (crash) via a crafted Client-To-Client… |