Known vulnerabilities in Pidgin

Vendor: pidgin.im
Software: Pidgin
Software CPE: cpe:2.3:a:pidgin_im:pidgin:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 35
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Pidgin Pidgin is affected by 35 known vulnerabilities: 2 high, 28 medium, 5 low Critical High Medium Low

Vulnerabilities (35)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU62728 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2022-26491
CWE-300 Medium
No
No
2.14.9 02.05.2022 SB2022050217
SB2022050218
SB2022051616
and 5 more
#VU35053 - Cleartext Transmission of Sensitive Information
CVE-2012-1257
CWE-319 Low
Available
No
- 20.11.2019 -
#VU41183 - Memory corruption
CVE-2014-3695
CWE-119 Medium
No
No
- 29.10.2014 -
#VU41184 - Memory corruption
CVE-2014-3696
CWE-119 Medium
No
No
- 29.10.2014 -
#VU41185 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2014-3697
CWE-22 Medium
No
No
- 29.10.2014 -
#VU41186 - Exposure of sensitive information to an unauthorized actor
CVE-2014-3698
CWE-200 Medium
No
No
- 29.10.2014 -
#VU42055 - Memory corruption
CVE-2013-6490
CWE-119 High
No
No
- 06.02.2014 -
#VU42056 - Out-of-bounds read
CVE-2013-6481
CWE-125 Medium
No
No
2.10.8 06.02.2014 SB2014020605
SB2014051802
SB2014020311
#VU42057 - NULL Pointer Dereference
CVE-2013-6482
CWE-476 Medium
No
No
- 06.02.2014 -
#VU42058 - Improper input validation
CVE-2013-6487
CWE-20 Medium
No
No
- 06.02.2014 -
#VU42059 - Improper input validation
CVE-2013-6489
CWE-20 Medium
No
No
- 06.02.2014 -
#VU42062 - Improper input validation
CVE-2014-0020
CWE-20 Medium
No
No
- 06.02.2014 -
#VU42063 - Improper input validation
CVE-2012-6152
CWE-20 Medium
No
No
- 06.02.2014 -
#VU42064 - Improper input validation
CVE-2013-6477
CWE-20 Medium
No
No
- 06.02.2014 -
#VU42065 - Improper input validation
CVE-2013-6478
CWE-20 Medium
No
No
- 06.02.2014 -
#VU42066 - Resource Management Errors
CVE-2013-6479
CWE-399 Medium
No
No
- 06.02.2014 -
#VU42067 - NULL Pointer Dereference
CVE-2013-6483
CWE-476 Medium
No
No
- 06.02.2014 -
#VU42068 - Improper input validation
CVE-2013-6484
CWE-20 Medium
No
No
- 06.02.2014 -
#VU42069 - Memory corruption
CVE-2013-6485
CWE-119 Medium
No
No
- 06.02.2014 -
#VU42070 - Improper input validation
CVE-2013-6486
CWE-20 High
No
No
- 06.02.2014 -


Showing elements 1 - 20 out of 35