Known vulnerabilities in Pidgin

Vendor: pidgin.im
Software: Pidgin
Software CPE: cpe:2.3:a:pidgin_im:pidgin:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 35
Public exploits: 1
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Pidgin Pidgin is affected by 35 known vulnerabilities: 2 high, 28 medium, 5 low Critical High Medium Low

Vulnerabilities (35)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU62728 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2022-26491
CWE-300 Medium
No
No
2.14.9 02.05.2022 SB2022050217
SB2022050218
SB2022051616
and 5 more
#VU42055 - Memory corruption
CVE-2013-6490
CWE-119 High
No
No
- 06.02.2014 SB2014020605
SB2014051802
SB2014020311
and 1 more
#VU42056 - Out-of-bounds read
CVE-2013-6481
CWE-125 Medium
No
No
2.10.8 06.02.2014 SB2014020605
SB2014051802
SB2014020311
and 1 more
#VU42057 - NULL Pointer Dereference
CVE-2013-6482
CWE-476 Medium
No
No
- 06.02.2014 SB2014020605
SB2014051802
SB2014020311
and 1 more
#VU42058 - Improper input validation
CVE-2013-6487
CWE-20 Medium
No
No
- 06.02.2014 SB2014020605
SB2014051802
SB2014020311
and 2 more
#VU42059 - Improper input validation
CVE-2013-6489
CWE-20 Medium
No
No
- 06.02.2014 SB2014020605
SB2014051802
SB2014020311
and 1 more
#VU42062 - Improper input validation
CVE-2014-0020
CWE-20 Medium
No
No
- 06.02.2014 SB2014020605
SB2014051802
SB2014020311
and 1 more
#VU42063 - Improper input validation
CVE-2012-6152
CWE-20 Medium
No
No
- 06.02.2014 SB2014020605
SB2014051802
SB2014020311
and 1 more
#VU42064 - Improper input validation
CVE-2013-6477
CWE-20 Medium
No
No
- 06.02.2014 SB2014020605
SB2014051802
SB2014020311
and 1 more
#VU42065 - Improper input validation
CVE-2013-6478
CWE-20 Medium
No
No
- 06.02.2014 SB2014020605
SB2014051802
SB2014020311
and 1 more
#VU42066 - Resource Management Errors
CVE-2013-6479
CWE-399 Medium
No
No
- 06.02.2014 SB2014020605
SB2014051802
SB2014020311
and 1 more
#VU42067 - NULL Pointer Dereference
CVE-2013-6483
CWE-476 Medium
No
No
- 06.02.2014 SB2014020605
SB2014051802
SB2014020311
and 1 more
#VU42068 - Improper input validation
CVE-2013-6484
CWE-20 Medium
No
No
- 06.02.2014 SB2014020605
SB2014051802
SB2014020311
and 1 more
#VU42069 - Memory corruption
CVE-2013-6485
CWE-119 Medium
No
No
- 06.02.2014 SB2014020605
SB2014051802
SB2014020311
and 1 more
#VU42070 - Improper input validation
CVE-2013-6486
CWE-20 High
No
No
- 06.02.2014 SB2014020605
SB2014020311
#VU43757 - Exposure of sensitive information to an unauthorized actor
CVE-2011-4922
CWE-200 Low
No
No
- 08.08.2012 SB2012080804
SB2015070916
#VU44427 - Improper input validation
CVE-2011-4601
CWE-20 Medium
No
No
- 25.12.2011 SB2011121701
SB2015070916
#VU44441 - Improper input validation
CVE-2011-4603
CWE-20 Medium
No
No
- 17.12.2011 SB2011121701
SB2015070916
#VU44442 - Improper input validation
CVE-2011-4602
CWE-20 Medium
No
No
- 17.12.2011 SB2011121701
SB2015070916
#VU44767 - Resource Management Errors
CVE-2011-3184
CWE-399 Medium
No
No
- 29.08.2011 SB2011082905
SB2015112102


Showing elements 1 - 20 out of 35