[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fFoQkOaheJ7bFcLQcEv9P0VT8kY61AuPMiGwwRWm-uOQ":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":24,"kevVulnerabilities":83,"topProductsByCves":84,"seoMetadata":87,"meta":96},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":23},35928,"xchat",2,12,0,53,"2020-02-21","x",[16,18],{"id":17,"product_name":8,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},173178,{"id":19,"product_name":20,"version_count":11,"cve_count":21,"kev_count":11,"last_cve_update":22},173179,"xchat_gnome",1,"2016-04-21","Xchat is a technology vendor with 2 tracked products and 12 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[25,34,41,46,51,57,62,69,74,79],{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":32,"epssScore":33},"CVE-2008-2841","Argument injection vulnerability in XChat 2.8.7b and earlier on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary commands via the --command parameter in an ircs:\u002F\u002F URI.","2008-06-24",6.8,"v2","Medium",false,0.15379,{"cveId":35,"description":36,"publishedDate":37,"cvssScore":38,"cvssVersion":30,"severity":39,"isKev":32,"epssScore":40},"CVE-2000-0787","IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a URL which XChat uses to launch a web browser.","2000-10-20",7.5,"High",0.09211,{"cveId":42,"description":43,"publishedDate":44,"cvssScore":38,"cvssVersion":30,"severity":39,"isKev":32,"epssScore":45},"CVE-2004-0409","Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5 traversal enabled, allows remote attackers to execute arbitrary code.","2004-06-01",0.08961,{"cveId":47,"description":48,"publishedDate":49,"cvssScore":38,"cvssVersion":30,"severity":39,"isKev":32,"epssScore":50},"CVE-2002-0006","XChat 1.8.7 and earlier, including default configurations of 1.4.2 and 1.4.3, allows remote attackers to execute arbitrary IRC commands as other clients via encoded characters in a PRIVMSG command that calls CTCP PING, which expands the characters in the client response when the percascii variable is set.","2002-06-25",0.08087,{"cveId":52,"description":53,"publishedDate":54,"cvssScore":55,"cvssVersion":30,"severity":31,"isKev":32,"epssScore":56},"CVE-2011-5129","Heap-based buffer overflow in XChat 2.8.9 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long response string.","2012-08-30",5,0.07696,{"cveId":58,"description":59,"publishedDate":60,"cvssScore":55,"cvssVersion":30,"severity":31,"isKev":32,"epssScore":61},"CVE-2006-4455","Unspecified vulnerability in Xchat 2.6.7 and earlier allows remote attackers to cause a denial of service (crash) via unspecified vectors involving the PRIVMSG command.  NOTE: the vendor has disputed this vulnerability, stating that it does not affect 2.6.7 \"or any recent version\"","2006-08-30",0.05097,{"cveId":63,"description":64,"publishedDate":13,"cvssScore":65,"cvssVersion":66,"severity":67,"isKev":32,"epssScore":68},"CVE-2012-0828","Heap-based buffer overflow in Xchat-WDK before 1499-4 (2012-01-18) xchat 2.8.6 on Maemo architecture could allow remote attackers to cause a denial of service (xchat client crash) or execute arbitrary code via a UTF-8 line from server containing characters outside of the Basic Multilingual Plane (BMP).",9.8,"v3.1","Critical",0.04284,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":38,"cvssVersion":30,"severity":39,"isKev":32,"epssScore":73},"CVE-2001-0792","Format string vulnerability in XChat 1.2.x allows remote attackers to execute arbitrary code via a malformed nickname.","2001-10-18",0.02818,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":38,"cvssVersion":66,"severity":39,"isKev":32,"epssScore":78},"CVE-2003-1000","xchat 2.0.6 allows remote attackers to cause a denial of service (crash) via a passive DCC request with an invalid ID number, which causes a null dereference.","2004-01-05",0.02552,{"cveId":80,"description":81,"publishedDate":49,"cvssScore":38,"cvssVersion":30,"severity":39,"isKev":32,"epssScore":82},"CVE-2002-0382","XChat IRC client allows remote attackers to execute arbitrary commands via a \u002Fdns command on a host whose DNS reverse lookup contains shell metacharacters.",0.02391,[],[85,86],{"id":17,"product_name":8,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},{"id":19,"product_name":20,"version_count":11,"cve_count":21,"kev_count":11,"last_cve_update":22},{"title":88,"metaDescription":89,"keywords":90,"structuredData":91},"Xchat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Xchat covering 2 products with 12 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Xchat vulnerabilities, Xchat security, Xchat CVE, Xchat threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":92,"@type":93,"name":94,"description":89,"url":95},"https:\u002F\u002Fschema.org","Organization","Xchat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fxchat",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":97,"apiVersion":98},"2026-10-19T01:09:52.990Z","3.0"]