CVSS: 7.5EPSS: 3%CPEs: 6EXPL: 0CVE-2014-8483 – Debian Security Advisory 3063-1
https://notcve.org/view.php?id=CVE-2014-8483
03 Nov 2014 — The blowfishECB function in core/cipher.cpp in Quassel IRC 0.10.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a malformed string. La función blowfishECB en core/cipher.cpp en Quassel IRC 0.10.0 permite a atacantes remotos causar una denegación de servicio (lectura fuera de rango) a través de una cadena malformada. An out-of-bounds read vulnerability was discovered in Quassel-core, one of the components of the distributed IRC client Quassel. An attacker can send a crafted me... • http://bugs.quassel-irc.org/issues/1314 • CWE-125: Out-of-bounds Read •
CVSS: 8.1EPSS: 0%CPEs: 2EXPL: 1CVE-2013-6404
https://notcve.org/view.php?id=CVE-2013-6404
09 Dec 2013 — Quassel core (server daemon) in Quassel IRC before 0.9.2 does not properly verify the user ID when accessing user backlogs, which allows remote authenticated users to read other users' backlogs via the bufferid in (1) 16/select_buffer_by_id.sql, (2) 16/select_buffer_by_id.sql, and (3) 16/select_buffer_by_id.sql in core/SQL/PostgreSQL/. Quassel core (server daemon) en Quassel IRC anteriores a 0.9.2 no verifica correctamente el ID del usuario cuando accede a backlogs de usuario, lo cual permite a usuarios aut... • http://lists.opensuse.org/opensuse-updates/2013-12/msg00092.html • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.5EPSS: 3%CPEs: 17EXPL: 0CVE-2010-3443 – Gentoo Linux Security Advisory 201311-03
https://notcve.org/view.php?id=CVE-2010-3443
07 Nov 2013 — ctcphandler.cpp in Quassel before 0.6.3 and 0.7.x before 0.7.1 allows remote attackers to cause a denial of service (unresponsive IRC) via multiple Client-To-Client Protocol (CTCP) requests in a PRIVMSG message. ctcphandler.cpp en Quassel anterior a la versión 0.6.3 y 0.7.x anterior a 0.7.1 permite a atacantes remotos provocar una denegación de servicio (IRC sin respuesta) a través de múltiples peticiones Client-To-Client Protocol (CTCP) en un mensaje PRIVMSG. Two vulnerabilities in Quassel may result in De... • http://bugs.quassel-irc.org/issues/1023 • CWE-399: Resource Management Errors •
CVSS: 9.8EPSS: 0%CPEs: 130EXPL: 0CVE-2013-4422 – Gentoo Linux Security Advisory 201311-03
https://notcve.org/view.php?id=CVE-2013-4422
23 Oct 2013 — SQL injection vulnerability in Quassel IRC before 0.9.1, when Qt 4.8.5 or later and PostgreSQL 8.2 or later are used, allows remote attackers to execute arbitrary SQL commands via a \ (backslash) in a message. Vulnerabilidad de inyección SQL en Quassel IRC anterior a la versión 0.9.1, cuando Qt 4.8.5 o posteriores y PostgreSQL 8.2 o posteriores son usados, permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de una \ (barra invertida) en un mensaje. Two vulnerabilities in Quassel may resul... • http://bugs.quassel-irc.org/issues/1244 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •