WE
Vendor
weechat
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-53525 | WE weechat weechat | 7.4 | Aug 21 | WeeChat has Non-Constant-Time Password Hash Comparison in Relay Authentication |
| CVE-2026-53524 | WE weechat weechat | 6.5 | Aug 21 | WeeChat has a Decompression Bomb in Relay WebSocket (DoS) |
| CVE-2024-46613 | WE Weechat Weechat | 9.8 | Nov 10 | WeeChat before 4.4.2 has an integer overflow and resultant buffer overflow at core/core-string.c when there are more than two billion items in a list |
| CVE-2022-28352 | WE Weechat Weechat | 4.8 | Apr 2 | WeeChat (aka Wee Enhanced Environment for Chat) 3.2 to 3.4 before 3.4.1 does not properly verify the TLS certificate of the server, after certain GnuTLS options are changed, which… |
| CVE-2021-40516 | WE Weechat Weechat | 7.5 | Sep 5 | WeeChat before 3.2.1 allows remote attackers to cause a denial of service (crash) via a crafted WebSocket frame that trigger an out-of-bounds read in… |
| CVE-2020-9760 | WE Weechat Weechat | 9.8 | Mar 23 | An issue was discovered in WeeChat before 2.7.1 (0.3.4 to 2.7 are affected) |
| CVE-2020-8955 | WE Weechat Weechat | 9.8 | Feb 12 | irc_mode_channel_update in plugins/irc/irc-mode.c in WeeChat through 2.7 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly… |
| CVE-2017-14727 | LO Logger Weechat | 7.5 | Sep 23 | logger.c in the logger plugin in WeeChat before 1.9.1 allows a crash via strftime date/time specifiers, because a buffer is not initialized |
| CVE-2017-8073 | WE Weechat Weechat | 7.5 | Apr 23 | WeeChat before 1.7.1 allows a remote crash by sending a filename via DCC to the IRC plugin |