Epic
Products
2- 4 CVEs
- 1 CVE
Recent CVEs
5| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2016-6272 | Hig | 0.53 | 7.5 | 0.21 | Feb 20, 2018 | XPath injection vulnerability in Epic MyChart allows remote attackers to access contents of an XML document containing static display strings, such as field labels, via the topic parameter to help.asp. NOTE: this was originally reported as a SQL injection vulnerability, but this… | ||
| CVE-2003-0328 | 0.04 | — | 0.09 | Jun 9, 2003 | EPIC IRC Client (EPIC4) pre2.002, pre2.003, and possibly later versions, allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via a CTCP request from a large nickname, which causes an incorrect length calculation. | |||
| CVE-2003-0324 | 0.00 | — | 0.03 | Jun 9, 2003 | Buffer overflows in EPIC IRC Client (EPIC4) 1.0.1 allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via long replies that are not properly handled by the (1) userhost_cmd_returned function, or (2) Statusbar capability. | |||
| CVE-2002-0984 | 0.00 | — | 0.04 | Sep 24, 2002 | The IRC script included in Light 2.7.x before 2.7.30p5, and 2.8.x before 2.8pre10, running EPIC allows remote attackers to execute arbitrary code if the user joins a channel whose topic includes EPIC4 code. | |||
| CVE-1999-0939 | 0.00 | — | 0.01 | Aug 26, 1999 | Denial of service in Debian IRC Epic/epic4 client via a long string. |
- risk 0.53cvss 7.5epss 0.21
XPath injection vulnerability in Epic MyChart allows remote attackers to access contents of an XML document containing static display strings, such as field labels, via the topic parameter to help.asp. NOTE: this was originally reported as a SQL injection vulnerability, but this…
- CVE-2003-0328Jun 9, 2003risk 0.04cvss —epss 0.09
EPIC IRC Client (EPIC4) pre2.002, pre2.003, and possibly later versions, allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via a CTCP request from a large nickname, which causes an incorrect length calculation.
- CVE-2003-0324Jun 9, 2003risk 0.00cvss —epss 0.03
Buffer overflows in EPIC IRC Client (EPIC4) 1.0.1 allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via long replies that are not properly handled by the (1) userhost_cmd_returned function, or (2) Statusbar capability.
- CVE-2002-0984Sep 24, 2002risk 0.00cvss —epss 0.04
The IRC script included in Light 2.7.x before 2.7.30p5, and 2.8.x before 2.8pre10, running EPIC allows remote attackers to execute arbitrary code if the user joins a channel whose topic includes EPIC4 code.
- CVE-1999-0939Aug 26, 1999risk 0.00cvss —epss 0.01
Denial of service in Debian IRC Epic/epic4 client via a long string.