Skip to content
Noroxi

znc records

17 published records for vendor znc.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
82.4%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 20
  4. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

17 records
  • CVE-2024-39844
    40Plan

    In ZNC before 1.9.1, remote code execution can occur in modtcl via a KICK.

    CriticalCVSS 9.8Proof of conceptEPSS 3%

    Jul 3, 2024

  • CVE-2020-29577
    40Plan

    The official znc docker images before 1.7.1-slim contain a blank password for a root user.

    CriticalCVSS 9.8No exploitEPSS 2%

    znc · znc docker imageDec 8, 2020

  • CVE-2019-12816
    36Monitor

    Modules.cpp in ZNC before 1.7.4-rc1 allows remote authenticated non-admin users to escalate privileges and execute arbitrary code by loading

    HighCVSS 8.8No exploitEPSS 4%

    znc · zncJun 15, 2019

  • CVE-2009-2658
    31Monitor

    Directory traversal vulnerability in ZNC before 0.072 allows remote attackers to overwrite arbitrary files via a crafted DCC SEND request.

    HighCVSS 7.5No exploitEPSS 2%

    znc · zncAug 4, 2009

  • CVE-2010-2488
    31Monitor

    NULL pointer dereference vulnerability in ZNC before 0.092 caused by traffic stats when there are unauthenticated connections.

    HighCVSS 7.5No exploitEPSS 2%

    znc · zncNov 12, 2019

  • CVE-2019-9917
    27Monitor

    ZNC before 1.7.3-rc1 allows an existing remote user to cause a Denial of Service (crash) via invalid encoding.

    MediumCVSS 6.5No exploitEPSS 3%

    znc · zncMar 27, 2019

  • CVE-2009-0759
    27Monitor

    Multiple CRLF injection vulnerabilities in webadmin in ZNC before 0.066 allow remote authenticated users to modify the znc.conf configuratio

    MediumCVSS 6.5No exploitEPSS 2%

    znc · zncMar 3, 2009

  • CVE-2020-13775
    27Monitor

    ZNC 1.8.0 up to 1.8.1-rc1 allows authenticated users to trigger an application crash (with a NULL pointer dereference) if echo-message is no

    MediumCVSS 6.5No exploitEPSS 1%

    znc · zncJun 2, 2020

  • CVE-2018-14055
    26Monitor

    ZNC before 1.7.1-rc1 does not properly validate untrusted lines coming from the network, allowing a non-admin user to escalate his privilege

    MediumCVSS 6.5No exploitEPSS 1%

    znc · zncJul 14, 2018

  • CVE-2018-14056
    22Monitor

    ZNC before 1.7.1-rc1 is prone to a path traversal flaw via ../ in a web skin name to access files outside of the intended skins directories.

    MediumCVSS 5.3No exploitEPSS 2%

    znc · zncJul 14, 2018

  • CVE-2010-2812
    21Monitor

    Client.cpp in ZNC 0.092 allows remote attackers to cause a denial of service (exception and daemon crash) via a PING command that lacks an a

    MediumCVSS 5.0No exploitEPSS 3%

    znc · zncAug 17, 2010

  • CVE-2010-2934
    21Monitor

    Multiple unspecified vulnerabilities in ZNC 0.092 allow remote attackers to cause a denial of service (exception and daemon crash) via unkno

    MediumCVSS 5.0No exploitEPSS 3%

    znc · zncAug 17, 2010

  • CVE-2012-0033
    21Monitor

    The CBounceDCCMod::OnPrivCTCP function in bouncedcc.cpp in the bouncedcc module in ZNC 0.200 and 0.202 allows remote attackers to cause a de

    MediumCVSS 5.0No exploitEPSS 2%

    znc · znc-msvcApr 8, 2014

  • CVE-2013-2130
    17Monitor

    ZNC 1.0 allows remote authenticated users to cause a denial of service (NULL pointer reference and crash) via a crafted request to the (1) e

    MediumCVSS 4.0No exploitEPSS 2%

    znc · zncJun 5, 2014

  • CVE-2014-9403
    17Monitor

    The CWebAdminMod::ChanPage function in modules/webadmin.cpp in ZNC before 1.4 allows remote authenticated users to cause a denial of service

    MediumCVSS 4.0No exploitEPSS 2%

    znc · zncDec 19, 2014

  • CVE-2013-7049
    17Monitor

    Stack-based buffer overflow in fish.cpp in the Fish plugin for ZNC, as used in ZNC for Windows (znc-msvc) 0.206 and earlier, allows remote a

    MediumCVSS 4.3No exploitEPSS 1%

    znc · znc-msvcDec 23, 2013

  • CVE-2010-2448
    15Monitor

    znc.cpp in ZNC before 0.092 allows remote authenticated users to cause a denial of service (crash) by requesting traffic statistics when the

    LowCVSS 3.5No exploitEPSS 2%

    znc · zncJul 12, 2010