CVE-2021-23922

An issue was discovered in Devolutions Remote Desktop Manager before 2020.2.12. There is a cross-site scripting XSS vulnerability in webviews...

CVE-2021-23922

CVE-2021-23922 refers to a cross-site scripting (XSS) vulnerability in Devolutions Remote Desktop Manager (webviews) affecting versions prior to 2020.2.12 . The issue is documented across multiple sources (NVD/CNVD/CVE listings) with CVSS metrics indicating a network-exposed vulnerability, mitiga...

CVE-2021-23922

An issue was discovered in Devolutions Remote Desktop Manager before 2020.2.12. There is a cross-site scripting XSS vulnerability in webviews...

CVE-2021-28047

Cross-Site Scripting XSS in Administrative Reports in Devolutions Remote Desktop Manager before 2021.1 allows remote authenticated users to inject arbitrary web script or HTML via multiple input fields...

CVE-2021-28047

Cross-Site Scripting XSS in Administrative Reports in Devolutions Remote Desktop Manager before 2021.1 allows remote authenticated users to inject arbitrary web script or HTML via multiple input fields...

CVE-2021-28047

Cross-Site Scripting XSS in Administrative Reports in Devolutions Remote Desktop Manager before 2021.1 allows remote authenticated users to inject arbitrary web script or HTML via multiple input fields...

Cross site scripting

Cross-Site Scripting XSS in Administrative Reports in Devolutions Remote Desktop Manager before 2021.1 allows remote authenticated users to inject arbitrary web script or HTML via multiple input fields...

CVE-2021-28047

Cross-Site Scripting XSS in Administrative Reports in Devolutions Remote Desktop Manager before 2021.1 allows remote authenticated users to inject arbitrary web script or HTML via multiple input fields...

CVE-2021-28047

CVE-2021-28047 affects Devolutions Remote Desktop Manager. The vulnerability is a Cross-Site Scripting (XSS) in Administration Reports present in versions prior to 2021.1, exploitable by a remote authenticated user who can inject arbitrary web script or HTML via multiple input fields. The connect...

Automating threat actor tracking: Understanding attacker behavior for intelligence and contextual alerting

As seen in recent sophisticated cyberattacks, especially human-operated campaigns, it’s critical to not only detect an attack as early as possible but also to rapidly determine the scope of the compromise and predict how it will progress. How an attack proceeds depends on the attacker’s goals and...

Devolutions Remote Desktop Manager 跨站脚本漏洞

Devolutions Remote Desktop Manager is a remote desktop management tool that centralizes all remote connections on a platform that is securely shared between users and across teams. A cross-site scripting vulnerability exists in webviews in Devolutions Remote Desktop Manager versions prior to...

The vulnerability of the rdpegfx channel in the implementation of the remote desktop protocol FreeRDP, related to the lack of a mechanism for checking input data, allows a intruder to trigger a service failure.

The vulnerability of the rdpegfx channel in the implementation of the remote desktop protocol FreeRDP is related to the lack of a mechanism for checking input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ZRLEDecoder software, which is part of VNC TigerVNC, allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the ZRLEDecoder software, developed for VNC and TigerVNC protocols, relates to operations involving resources after their expiration. Exploiting this vulnerability can allow unauthorized individuals to gain access to confidential data, compromise its integrity, and cause...

[SECURITY] Fedora 34 Update: gnome-remote-desktop-40.0~rc-1.fc34

GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment...

Fedora: Security Advisory for gnome-remote-desktop (FEDORA-2021-303f6623fa)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Cyberattacks See Fundamental Changes, A Year into COVID-19

COVID-19-related phishing emails, brute-force attacks on remote workers, and a focus on exploiting or abusing collaboration platforms are the hallmarks of cybercriminal enterprise as the coronavirus marks its first anniversary of going global. A year after the COVID-19 crisis was officially...

The vulnerability of TightVNC’s remote access components to a computer’s desktop allows a intruder to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of TightVNC’s remote desktop access system components is related to the lack of a mechanism for checking the size of copied data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the PRIMARY_DRAWING_ORDER_FIELD_BYTES function in the FreeRDP remote desktop protocol implementation involves reading data beyond the allowed buffer limit. This allows attackers to access confidential data and cause service interruptions.

The vulnerability of the PRIMARYDRAWINGORDERFIELDBYTES function in the FreeRDP remote desktop protocol implementation is related to reading data beyond the allowable buffer size. Exploiting this vulnerability can allow an attacker to access confidential data and also cause service interruptions...

The vulnerability of the gdi_SelectObject component in the FreeRDP remote desktop protocol allows a hacker to trigger a service failure.

The vulnerability of the gdiSelectObject component in the FreeRDP remote desktop protocol implementation is related to the use of a memory area after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the glyph_cache_put component in the implementation of the remote desktop protocol FreeRDP, related to reading data beyond the buffer’s acceptable limits, allows an intruder to access confidential data and also causes a service failure.

The vulnerability of the glyphcacheput component in the implementation of the remote desktop protocol FreeRDP is related to reading data from a buffer beyond its allowable limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data and also cause service...