Approved changes feed: RSS · Atom

cpe:2.3:a:flashtux:weechat:0.2.6:*:*:*:*:*:*:*

part: a version: 0.2.6 update: *

VendorFlashtux (13a288ed-a164-594b-a4f6-a579f1cefd41)
ProductWeechat (2408931f-9717-5d96-a1bd-c70fd7fc43e3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/weechat purl2cpe 2026-06-01 10:16:06.102965
pkg:deb/ubuntu/weechat purl2cpe 2026-06-01 10:16:06.102967
pkg:github/weechat/weechat purl2cpe 2026-06-01 10:16:06.102969
pkg:gnu/weechat purl2cpe 2026-06-01 10:16:06.102970
pkg:rpm/fedora/weechat purl2cpe 2026-06-01 10:16:06.102972
pkg:rpm/opensuse/weechat purl2cpe 2026-06-01 10:16:06.102973

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-1428 vulnerable 2026-06-08 04:57:59.192624 Details available
Wee Enhanced Environment for Chat (aka WeeChat) 0.3.4 and earlier does not properly verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL chat server via an arbitrary certificate, related to incorrect use of the GnuTLS API.
Published: 2011-03-16T22:00:00.000Z
Updated: 2024-09-17T02:16:44.046Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0661 vulnerable 2026-06-08 04:51:10.725649 Details available
Wee Enhanced Environment for Chat (WeeChat) 0.2.6 allows remote attackers to cause a denial of service (crash) via an IRC PRIVMSG command containing crafted color codes that trigger an out-of-bounds read.
Published: 2009-03-19T10:00:00.000Z
Updated: 2024-08-07T04:40:05.127Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.