[{"CVE":"CVE-2013-7449","severity":"moderate","public_date":"2014-11-19T00:00:00Z","advisories":[],"bugzilla":"1081839","bugzilla_description":"CVE-2013-7449 xchat/hexchat: does not verify the server hostname matches the domain name in the subject's Common Name (CN) or subjectAltName field in X.509 certificates","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-297","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7449.json"},{"CVE":"CVE-2011-5129","severity":null,"public_date":"2012-08-31T00:00:00Z","advisories":[],"bugzilla":"853321","bugzilla_description":"CVE-2011-5129 xchat: Heap-based buffer overflow (crash, ACE) via long response string","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5129.json"},{"CVE":"CVE-2012-0828","severity":"moderate","public_date":"2012-01-17T00:00:00Z","advisories":[],"bugzilla":"786391","bugzilla_description":"CVE-2012-0828 xchat: Heap-based buffer overflow by processing UTF-8 line from server containing characters outside BMP","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-172->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0828.json"},{"CVE":"CVE-2009-0315","severity":"low","public_date":"2008-08-06T00:00:00Z","advisories":[],"bugzilla":"481560","bugzilla_description":"CVE-2009-0315 xchat: untrusted python modules search path","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0315.json"},{"CVE":"CVE-2004-0409","severity":null,"public_date":"2004-04-05T00:00:00Z","advisories":["RHSA-2004:177","RHSA-2004:585"],"bugzilla":"1617195","bugzilla_description":"CVE-2004-0409 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["xchat-1:2.0.4-4.EL"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0409.json"}]