Znc vulnerabilities

Products

• Znc 14
• Znc-msvc 2

Newest

• znc In ZNC before 1.9.1, remote code execution can occur in modtcl via a KICK. CVE-2024-39844 Public exploitFix available 9.8 CriticalJuly 3, 2024
• znc docker image The official znc docker images before 1.7.1-slim contain a blank password for a root user.... CVE-2020-29577 9.8 CriticalDecember 8, 2020
• znc, fedoraproject fedora +1 more ZNC 1.8.0 up to 1.8.1-rc1 allows attackers to trigger an application crash (with a NULL pointer... CVE-2020-13775 Fix available 6.5 MediumJune 2, 2020
• znc Modules.cpp in ZNC before 1.7.4-rc1 allows remote authenticated non-admin users to escalate... CVE-2019-12816 Fix available 8.8 HighJune 14, 2019
• znc, canonical ubuntu linux, fedoraproject fedora +2 more ZNC before 1.7.3-rc1 allows an existing remote user to cause a Denial of Service (crash) via... CVE-2019-9917 Fix available 6.5 MediumMarch 27, 2019
• znc, debian linux +1 more ZNC before 1.7.1-rc1 is prone to a path traversal flaw via ../ in a web skin name to access files... CVE-2018-14056 Fix available 5.3 MediumJuly 15, 2018
• znc, debian linux +1 more ZNC before 1.7.1-rc1 does not properly validate untrusted lines coming from the network, allowing... CVE-2018-14055 Fix available 6.5 MediumJuly 15, 2018
• znc The CWebAdminMod::ChanPage function in modules/webadmin.cpp in ZNC before 1.4 allows remote... CVE-2014-9403 Fix available 4.0 MediumDecember 19, 2014
• znc znc-msvc The CBounceDCCMod::OnPrivCTCP function in bouncedcc.cpp in the bouncedcc module in ZNC 0.200 and... CVE-2012-0033 Fix available 5.0 MediumApril 8, 2014
• znc znc-msvc Stack-based buffer overflow in fish.cpp in the Fish plugin for ZNC, as used in ZNC for Windows ... CVE-2013-7049 4.3 MediumDecember 23, 2013
• znc ZNC 1.0 allows remote authenticated users to cause a denial of service (NULL pointer reference... CVE-2013-2130 Fix available 4.0 MediumAugust 22, 2013
• znc Multiple unspecified vulnerabilities in ZNC 0.092 allow remote attackers to cause a denial of... CVE-2010-2934 Fix available 5.0 MediumAugust 17, 2010
• znc Client.cpp in ZNC 0.092 allows remote attackers to cause a denial of service (exception and... CVE-2010-2812 Fix available 5.0 MediumAugust 17, 2010
• znc znc.cpp in ZNC before 0.092 allows remote authenticated users to cause a denial of service (crash... CVE-2010-2448 3.5 LowJuly 12, 2010
• znc NULL pointer dereference vulnerability in ZNC before 0.092 caused by traffic stats when there are... CVE-2010-2488 Fix available 7.5 HighJuly 11, 2010
• znc Directory traversal vulnerability in ZNC before 0.072 allows remote attackers to overwrite... CVE-2009-2658 Fix available 7.5 HighAugust 2, 2009
• znc Multiple CRLF injection vulnerabilities in webadmin in ZNC before 0.066 allow remote... CVE-2009-0759 Fix available 6.5 MediumMarch 3, 2009