Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: znc'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2020-13775 3.5 ZNC 1.8.0 up to 1.8.1-rc1 allows authenticated users to trigger an application crash (with a NULL pointer dereference) if echo-message is not enabled and there is no network. 2023-11-07 03:16:00
CVE-2019-9917 4.0 ZNC before 1.7.3-rc1 allows an existing remote user to cause a Denial of Service (crash) via invalid encoding. 2023-11-07 03:13:00
CVE-2019-12816 6.5 Modules.cpp in ZNC before 1.7.4-rc1 allows remote authenticated non-admin users to escalate privileges and execute arbitrary code by loading a module with a crafted name. 2023-11-07 03:03:00
CVE-2020-29577 10.0 The official znc docker images before 1.7.1-slim contain a blank password for a root user. Systems using the znc docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access with a blank passw 2020-12-22 14:34:00
CVE-2010-2488 5.0 NULL pointer dereference vulnerability in ZNC before 0.092 caused by traffic stats when there are unauthenticated connections. 2019-11-14 19:49:00
CVE-2018-14055 4.0 ZNC before 1.7.1-rc1 does not properly validate untrusted lines coming from the network, allowing a non-admin user to escalate his privilege and inject rogue values into znc.conf. 2019-10-03 00:03:00
CVE-2018-14056 5.0 ZNC before 1.7.1-rc1 is prone to a path traversal flaw via ../ in a web skin name to access files outside of the intended skins directories. 2019-03-08 17:04:00
CVE-2013-7049 4.3 Stack-based buffer overflow in fish.cpp in the Fish plugin for ZNC, as used in ZNC for Windows (znc-msvc) 0.206 and earlier, allows remote attackers to cause a denial of service (crash) via a long string in a DH1080_INIT message. 2017-08-29 01:34:00
CVE-2012-0033 5.0 The CBounceDCCMod::OnPrivCTCP function in bouncedcc.cpp in the bouncedcc module in ZNC 0.200 and 0.202 allows remote attackers to cause a denial of service (crash) via a crafted DCC RESUME request. 2016-12-08 03:02:00
CVE-2014-9403 4.0 The CWebAdminMod::ChanPage function in modules/webadmin.cpp in ZNC before 1.4 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) by adding a channel with the same name as an existing channel but withou 2015-09-29 00:31:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/2
Zapisa po stranici: