Vulnerabilities > ZNC > Medium

DATE CVE VULNERABILITY TITLE RISK
2010-08-17 CVE-2010-2812 Improper Input Validation vulnerability in ZNC 0.092
Client.cpp in ZNC 0.092 allows remote attackers to cause a denial of service (exception and daemon crash) via a PING command that lacks an argument.
network
low complexity
znc CWE-20
5.0
2009-03-03 CVE-2009-0759 Code Injection vulnerability in ZNC
Multiple CRLF injection vulnerabilities in webadmin in ZNC before 0.066 allow remote authenticated users to modify the znc.conf configuration file and gain privileges via CRLF sequences in the quit message and other vectors.
network
low complexity
znc CWE-94
6.5