Priority MEDIUM 64
Pidgin 2.13.0 contains a denial of service vulnerability that allows local attackers to crash the application by providing an excessively long username string during account creation.
CVSS 4.0MEDIUM 6.9· Local · No auth · No interaction · EPSS 0.00199 · Published 2026-03-21 · Fix deferred CWE-807
Priority LOW 31
An issue was discovered in Pidgin before 2.14.9.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.02565 · Published 2022-05-31 · Will not fix CWE-295
Priority LOW 26
Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00739 · Published 2019-11-20 · Will not fix CWE-319
Priority MEDIUM 46
Pidgin version <2.11.0 contains a vulnerability in X.509 Certificates imports specifically due to improper check of return values from gnutls_x509_crt_init() and gnutls_x509_crt_import() that can result in code execution…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01844 · Published 2018-09-05 · No fix listed CWE-295
Priority MEDIUM 51
An out-of-bounds write flaw was found in the way Pidgin before 2.12.0 processed XML content.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06179 · Published 2018-07-27 · Partial fix CWE-787
Priority LOW 22
A directory traversal exists in the handling of the MXIT protocol in Pidgin.
CVSS 3.0LOW 3.7· Network · No auth · No interaction · EPSS 0.02296 · Published 2017-01-06 · Will not fix CWE-22
Priority LOW 19
An information leak exists in the handling of the MXIT protocol in Pidgin.
CVSS 3.0LOW 3.1· Network · No auth · User interaction · EPSS 0.01749 · Published 2017-01-06 · Will not fix CWE-125
Priority MEDIUM 40
A buffer overflow vulnerability exists in the handling of the MXIT protocol Pidgin.
CVSS 3.0HIGH 8.1· Network · No auth · No interaction · EPSS 0.02501 · Published 2017-01-06 · Will not fix CWE-119
Priority MEDIUM 40
A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin.
CVSS 3.0HIGH 8.1· Network · No auth · No interaction · EPSS 0.02612 · Published 2017-01-06 · Will not fix CWE-119
Priority MEDIUM 42
A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin.
CVSS 3.0HIGH 8.1· Network · No auth · No interaction · EPSS 0.03718 · Published 2017-01-06 · Will not fix CWE-119
Priority LOW 29
An exploitable out-of-bounds read exists in the handling of the MXIT protocol in Pidgin.
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02689 · Published 2017-01-06 · Will not fix CWE-125
Priority MEDIUM 41
An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin.
CVSS 3.0HIGH 8.1· Network · No auth · No interaction · EPSS 0.03216 · Published 2017-01-06 · Will not fix CWE-125
Priority LOW 31
A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin.
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.02291 · Published 2017-01-06 · Will not fix CWE-125
Priority LOW 30
An information leak exists in the handling of the MXIT protocol in Pidgin.
CVSS 3.0MEDIUM 5.9· Network · Low privileges · No interaction · EPSS 0.01758 · Published 2017-01-06 · Will not fix CWE-125
Priority MEDIUM 41
An out-of-bounds write vulnerability exists in the handling of the MXIT protocol in Pidgin.
CVSS 3.0HIGH 8.1· Network · No auth · No interaction · EPSS 0.03162 · Published 2017-01-06 · Will not fix CWE-787
Priority LOW 31
A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin.
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.02115 · Published 2017-01-06 · Will not fix CWE-125
Priority LOW 31
A NULL pointer dereference vulnerability exists in the handling of the MXIT protocol in Pidgin.
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.02233 · Published 2017-01-06 · Will not fix CWE-476
Priority MEDIUM 43
Multiple memory corruption vulnerabilities exist in the handling of the MXIT protocol in Pidgin.
CVSS 3.0HIGH 8.1· Network · No auth · No interaction · EPSS 0.04642 · Published 2017-01-06 · Will not fix CWE-119
Priority LOW 30
An information leak exists in the handling of the MXIT protocol in Pidgin.
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01931 · Published 2017-01-06 · Will not fix CWE-125
Priority LOW 31
A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin.
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.02474 · Published 2017-01-06 · Will not fix CWE-125
Priority LOW 31
A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin.
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.02411 · Published 2017-01-06 · Will not fix CWE-476
Priority LOW 29
The jabber_idn_validate function in jutil.c in the Jabber protocol plugin in libpurple in Pidgin before 2.10.10 allows remote attackers to obtain sensitive information from process memory via a crafted XMPP message.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03776 · Published 2014-10-29 · Partial fix CWE-200
Priority LOW 35
Absolute path traversal vulnerability in the untar_block function in win32/untar.c in Pidgin before 2.10.10 on Windows allows remote attackers to write to arbitrary files via a drive name in a tar archive of a smiley the…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.03838 · Published 2014-10-29 · No fix listed CWE-22
Priority LOW 28
nmevent.c in the Novell GroupWise protocol plugin in libpurple in Pidgin before 2.10.10 allows remote servers to cause a denial of service (application crash) via a crafted server message that triggers a large memory all…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02871 · Published 2014-10-29 · Partial fix CWE-119
Priority LOW 28
markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.10 allows remote servers to cause a denial of service (application crash) via a large length value in an emoticon response.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02871 · Published 2014-10-29 · Partial fix CWE-119
Load more
THREATIST.IORead the docs