Approved changes feed: RSS · Atom

cpe:2.3:a:flashtux:weechat:0.3.4:*:*:*:*:*:*:*

part: a version: 0.3.4 update: *

VendorFlashtux (13a288ed-a164-594b-a4f6-a579f1cefd41)
ProductWeechat (2408931f-9717-5d96-a1bd-c70fd7fc43e3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/weechat purl2cpe 2026-06-01 10:16:06.121655
pkg:deb/ubuntu/weechat purl2cpe 2026-06-01 10:16:06.121657
pkg:github/weechat/weechat purl2cpe 2026-06-01 10:16:06.121659
pkg:gnu/weechat purl2cpe 2026-06-01 10:16:06.121660
pkg:rpm/fedora/weechat purl2cpe 2026-06-01 10:16:06.121662
pkg:rpm/opensuse/weechat purl2cpe 2026-06-01 10:16:06.121664

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-5534 vulnerable 2026-06-08 05:02:57.101694 Details available
The hook_process function in the plugin API for WeeChat 0.3.0 through 0.3.9.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a command from a plugin, related to "shell expansion."
Published: 2012-12-03T21:00:00.000Z
Updated: 2024-08-06T21:05:47.409Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.