Search vulnerabilities

Results 2

Export CSV
CVE-2013-4488

libgadu: missing ssl certificate validation

libgadu before 1.12.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers.

CVSS 2.0 · 4.3 Medium EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2014-3775

libgadu: server response memory corruption issue

libgadu before 1.11.4 and 1.12.0 before 1.12.0-rc3, as used in Pidgin and other products, allows remote Gadu-Gadu file relay servers to cause a denial of service (memory overwrite) or possibly execute arbitrary code via a crafted message.

CVSS 2.0 · 7.5 High EPSS 3.8% KEV · Not listed
Vendors
Products