Lucene search
+L

2781 matches found

OpenVAS
OpenVAS
•added 2022/06/01 12:00 a.m.•11 views

Fedora: Security Advisory for weechat (FEDORA-2022-d165104234)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/06/01 12:00 a.m.•18 views

Fedora: Security Advisory for weechat (FEDORA-2022-6e226a21ed)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
osv_ghsa
osv_ghsa
•added 2022/05/23 8:17 p.m.•122 views

GHSA-37HR-348P-RMF4 Improper handling of multiline messages in node-irc affects matrix-appservice-irc

matrix-appservice-irc provides an IRC bridge for Matrix. The vulnerability in node-irc allows an attacker to manipulate a Matrix user into executing IRC commands by having them reply to a maliciously crafted message. The vulnerability has been patched in matrix-appservice-irc 0.33.2. In terms of ...

8CVSS8.2AI score0.01005EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2022/05/23 8:17 p.m.•66 views

Improper handling of multiline messages in node-irc affects matrix-appservice-irc

matrix-appservice-irc provides an IRC bridge for Matrix. The vulnerability in node-irc allows an attacker to manipulate a Matrix user into executing IRC commands by having them reply to a maliciously crafted message. The vulnerability has been patched in matrix-appservice-irc 0.33.2. In terms of ...

8.8CVSS8.3AI score0.01005EPSS
SaveExploits0References5Affected Software1
OpenVAS
OpenVAS
•added 2022/05/20 12:00 a.m.•24 views

Fedora: Security Advisory for pidgin (FEDORA-2022-4490dce823)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.9CVSS5.8AI score0.02565EPSS
SaveExploits0References2
Fedora
Fedora
•added 2022/05/19 1:23 a.m.•65 views

[SECURITY] Fedora 35 Update: pidgin-2.14.6-3.fc35

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just add an...

5.9CVSS0.5AI score0.02565EPSS
SaveExploits0
Fedora
Fedora
•added 2022/05/19 1:17 a.m.•37 views

[SECURITY] Fedora 36 Update: pidgin-2.14.8-3.fc36

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just add an...

5.9CVSS0.5AI score0.02565EPSS
SaveExploits0
osv_ghsa
osv_ghsa
•added 2022/05/13 1:17 a.m.•66 views

GHSA-VRV9-CCJ3-G284 Jenkins IRC Plugin stores credentials in plain text

Jenkins IRC Plugin stores credentials unencrypted in its global configuration file hudson.plugins.ircbot.IrcPublisher.xml on the Jenkins controller. These credentials can be viewed by users with access to the Jenkins controller file system...

3.3CVSS8.7AI score0.01385EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2022/05/13 1:17 a.m.•30 views

Jenkins IRC Plugin stores credentials in plain text

Jenkins IRC Plugin stores credentials unencrypted in its global configuration file hudson.plugins.ircbot.IrcPublisher.xml on the Jenkins controller. These credentials can be viewed by users with access to the Jenkins controller file system...

8.8CVSS6.8AI score0.01385EPSS
SaveExploits0References4Affected Software1
Fedora
Fedora
•added 2022/05/12 1:13 a.m.•23 views

[SECURITY] Fedora 36 Update: seamonkey-2.53.12-1.fc36

SeaMonkey is an all-in-one Internet application suite previously made popular by Netscape and Mozilla. It includes an Internet browser, advanced e-mail, newsgroup and feed client, a calendar, IRC client, HTML editor and a tool to inspect the DOM for web pages. It is derived from the application...

0.4AI score
SaveExploits0
Fedora
Fedora
•added 2022/05/09 1:36 a.m.•28 views

[SECURITY] Fedora 35 Update: seamonkey-2.53.12-1.fc35

SeaMonkey is an all-in-one Internet application suite previously made popular by Netscape and Mozilla. It includes an Internet browser, advanced e-mail, newsgroup and feed client, a calendar, IRC client, HTML editor and a tool to inspect the DOM for web pages. It is derived from the application...

0.4AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2022/05/08 12:00 a.m.•15 views

Fedora: Security Advisory for unrealircd (FEDORA-2022-c51b3a7f19)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
•added 2022/05/07 4:47 a.m.•29 views

[SECURITY] Fedora 36 Update: unrealircd-6.0.3-1.fc36

UnrealIRCd is an Open Source IRC server based on the branch of IRCu called Dreamforge, formerly used by the DALnet IRC network. Since the beginning of development on UnrealIRCd in May of 1999, it has become a highly advanced IRCd with a strong focus on modularity, an advanced and highly...

0.7AI score
SaveExploits0
Veracode
Veracode
•added 2022/05/06 6:38 a.m.•34 views

Remote Code Execution (RCE)

matrix-appservice-irc is vulnerable to remote code execution. An attacker is able to manipulate a Matrix user into executing IRC commands by having them reply to a maliciously crafted message...

8.8CVSS3.1AI score0.01005EPSS
SaveExploits0References3Affected Software2
NVD
NVD
•added 2022/05/05 11:15 p.m.•55 views

CVE-2022-29166

matrix-appservice-irc is a Node.js IRC bridge for Matrix. The vulnerability in node-irc allows an attacker to manipulate a Matrix user into executing IRC commands by having them reply to a maliciously crafted message. The vulnerability has been patched in matrix-appservice-irc 0.33.2. Refrain fro...

8.8CVSS0.01005EPSS
SaveExploits0References2
Prion
Prion
•added 2022/05/05 11:15 p.m.•25 views

Design/Logic Flaw

matrix-appservice-irc is a Node.js IRC bridge for Matrix. The vulnerability in node-irc allows an attacker to manipulate a Matrix user into executing IRC commands by having them reply to a maliciously crafted message. The vulnerability has been patched in matrix-appservice-irc 0.33.2. Refrain fro...

6.8CVSS8.6AI score0.01005EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2022/05/05 11:05 p.m.•10 views

CVE-2022-29166

matrix-appservice-irc is a Node.js IRC bridge for Matrix. The vulnerability in node-irc allows an attacker to manipulate a Matrix user into executing IRC commands by having them reply to a maliciously crafted message. The vulnerability has been patched in matrix-appservice-irc 0.33.2. Refrain fro...

8.8CVSS0.01005EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2022/05/05 11:05 p.m.•9 views

CVE-2022-29166 Improper handling of multiline messages in matrix-appservice-irc

matrix-appservice-irc is a Node.js IRC bridge for Matrix. The vulnerability in node-irc allows an attacker to manipulate a Matrix user into executing IRC commands by having them reply to a maliciously crafted message. The vulnerability has been patched in matrix-appservice-irc 0.33.2. Refrain fro...

8CVSS8.7AI score0.01005EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/05/05 11:05 p.m.•52 views

CVE-2022-29166 Improper handling of multiline messages in matrix-appservice-irc

matrix-appservice-irc is a Node.js IRC bridge for Matrix. The vulnerability in node-irc allows an attacker to manipulate a Matrix user into executing IRC commands by having them reply to a maliciously crafted message. The vulnerability has been patched in matrix-appservice-irc 0.33.2. Refrain fro...

8CVSS8.9AI score0.01005EPSS
SaveExploits0References2
CVE
CVE
•added 2022/05/05 11:05 p.m.•119 views

CVE-2022-29166

CVE-2022-29166 affects matrix-appservice-irc (Node.js IRC bridge). The underlying issue in node-irc allows an attacker to make a Matrix user execute IRC commands by replying to a maliciously crafted message. A patch is available in matrix-appservice-irc 0.33.2. Guidance in disclosures urges not t...

8.8CVSS8.3AI score0.01005EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder