Priority MEDIUM 64
Pidgin 2.13.0 contains a denial of service vulnerability that allows local attackers to crash the application by providing an excessively long username string during account creation.
CVSS 4.0MEDIUM 6.9· Local · No auth · No interaction · EPSS 0.00199 · Published 2026-03-21 · Fix deferred CWE-807
Priority LOW 31
An issue was discovered in Pidgin before 2.14.9.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.02565 · Published 2022-05-31 · Will not fix CWE-295
Priority LOW 26
Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00739 · Published 2019-11-20 · Will not fix CWE-319
Priority MEDIUM 46
Pidgin version <2.11.0 contains a vulnerability in X.509 Certificates imports specifically due to improper check of return values from gnutls_x509_crt_init() and gnutls_x509_crt_import() that can result in code execution…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01844 · Published 2018-09-05 · No fix listed CWE-295
Priority MEDIUM 51
An out-of-bounds write flaw was found in the way Pidgin before 2.12.0 processed XML content.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06179 · Published 2018-07-27 · Partial fix CWE-787
Priority LOW 38
The Mxit protocol uses weak encryption when encrypting user passwords, which might allow attackers to (1) decrypt hashed passwords by leveraging knowledge of client registration codes or (2) gain login access by eavesdro…
CVSS 3.0HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.004 · Published 2017-03-29 · Will not fix CWE-326
Priority LOW 22
A directory traversal exists in the handling of the MXIT protocol in Pidgin.
CVSS 3.0LOW 3.7· Network · No auth · No interaction · EPSS 0.02296 · Published 2017-01-06 · Will not fix CWE-22
Priority LOW 19
An information leak exists in the handling of the MXIT protocol in Pidgin.
CVSS 3.0LOW 3.1· Network · No auth · User interaction · EPSS 0.01749 · Published 2017-01-06 · Will not fix CWE-125
Priority MEDIUM 40
A buffer overflow vulnerability exists in the handling of the MXIT protocol Pidgin.
CVSS 3.0HIGH 8.1· Network · No auth · No interaction · EPSS 0.02501 · Published 2017-01-06 · Will not fix CWE-119
Priority MEDIUM 40
A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin.
CVSS 3.0HIGH 8.1· Network · No auth · No interaction · EPSS 0.02612 · Published 2017-01-06 · Will not fix CWE-119
Priority MEDIUM 42
A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin.
CVSS 3.0HIGH 8.1· Network · No auth · No interaction · EPSS 0.03718 · Published 2017-01-06 · Will not fix CWE-119
Priority LOW 29
An exploitable out-of-bounds read exists in the handling of the MXIT protocol in Pidgin.
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02689 · Published 2017-01-06 · Will not fix CWE-125
Priority MEDIUM 41
An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin.
CVSS 3.0HIGH 8.1· Network · No auth · No interaction · EPSS 0.03216 · Published 2017-01-06 · Will not fix CWE-125
Priority LOW 31
A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin.
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.02291 · Published 2017-01-06 · Will not fix CWE-125
Priority LOW 30
An information leak exists in the handling of the MXIT protocol in Pidgin.
CVSS 3.0MEDIUM 5.9· Network · Low privileges · No interaction · EPSS 0.01758 · Published 2017-01-06 · Will not fix CWE-125
Priority MEDIUM 41
An out-of-bounds write vulnerability exists in the handling of the MXIT protocol in Pidgin.
CVSS 3.0HIGH 8.1· Network · No auth · No interaction · EPSS 0.03162 · Published 2017-01-06 · Will not fix CWE-787
Priority LOW 31
A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin.
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.02115 · Published 2017-01-06 · Will not fix CWE-125
Priority LOW 31
A NULL pointer dereference vulnerability exists in the handling of the MXIT protocol in Pidgin.
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.02233 · Published 2017-01-06 · Will not fix CWE-476
Priority MEDIUM 43
Multiple memory corruption vulnerabilities exist in the handling of the MXIT protocol in Pidgin.
CVSS 3.0HIGH 8.1· Network · No auth · No interaction · EPSS 0.04642 · Published 2017-01-06 · Will not fix CWE-119
Priority LOW 30
An information leak exists in the handling of the MXIT protocol in Pidgin.
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01931 · Published 2017-01-06 · Will not fix CWE-125
Priority LOW 31
A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin.
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.02474 · Published 2017-01-06 · Will not fix CWE-125
Priority LOW 31
A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin.
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.02411 · Published 2017-01-06 · Will not fix CWE-476
Priority LOW 29
The jabber_idn_validate function in jutil.c in the Jabber protocol plugin in libpurple in Pidgin before 2.10.10 allows remote attackers to obtain sensitive information from process memory via a crafted XMPP message.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03776 · Published 2014-10-29 · Partial fix CWE-200
Priority LOW 35
Absolute path traversal vulnerability in the untar_block function in win32/untar.c in Pidgin before 2.10.10 on Windows allows remote attackers to write to arbitrary files via a drive name in a tar archive of a smiley the…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.03838 · Published 2014-10-29 · No fix listed CWE-22
Priority LOW 28
nmevent.c in the Novell GroupWise protocol plugin in libpurple in Pidgin before 2.10.10 allows remote servers to cause a denial of service (application crash) via a crafted server message that triggers a large memory all…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02871 · Published 2014-10-29 · Partial fix CWE-119
Load more
THREATIST.IORead the docs