GHSA-49RV-G7W5-M8XX Cross-Site Scripting in @novnc/novnc

Versions of @novnc/novnc prior to 0.6.2 are vulnerable to Cross-Site Scripting XSS. The package fails to validate input from the remote VNC server such as the VNC server name. This allows an attacker in control of the remote server to execute arbitrary JavaScript in the noVNC web page. It affects...

Important: libvncserver security update

LibVNCServer is a C library that enables you to implement VNC server functionality into own programs. Security Fixes: libvncserver: websocket decoding buffer overflow CVE-2017-18922 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

Important: Red Hat Security Advisory: libvncserver security update

An update for libvncserver is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

The vulnerability of the component libvncserver/hextile.c in the cross-platform library LibVNCServer allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the libvncserver/hextile.c component of the cross-platform library LibVNCServer arises from an operation that occurs outside the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility...

LibVNCServer Information Disclosure Vulnerability

LibVNCServer is a cross-platform C library that supports the implementation of VNC Virtual Network Computing server or client functionality in programs. A security vulnerability exists in the 'ConnectToRFBRepeater' function in the libvncclient/rfbproto.c file in versions of LibVNCServer prior to...

LibVNCServer Buffer Overflow Vulnerability (CNVD-2020-36780)

LibVNCServer is a cross-platform C library that supports the implementation of VNC Virtual Network Computing server or client functionality in programs. A buffer overflow vulnerability exists in the libvncclient/sockets.c file in versions of LibVNCServer prior to 0.9.13. A remote attacker could...

UBUNTU-CVE-2020-14399

An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint32t pointers in libvncclient/rfbproto.c. NOTE: there is reportedly "no trust boundary crossed...

The vulnerability of the VNC Server component of the remote desktop management software UltraVNC, which is part of the monitoring, control, and remote maintenance module for the commercial cold production equipment of TelevisGo, allows a perpetrator to execute arbitrary code.

The vulnerability of the VNC Server component of the remote desktop management software UltraVNC, which is part of the monitoring, control, and remote maintenance module for the commercial cold production system TelevisGo, is related to a buffer overflow in the request-to-file transfer handler...

Man-in-the-Middle (MitM)

tigervnc is vulnerable to man-in-the-middle MitM. The vulnerability exists as it was discovered that vncviewer could prompt for and send authentication credentials to a remote server without first properly validating the server's X.509 certificate. As vncviewer did not indicate that the certifica...

Information Disclosure

xen is vulnerable to information disclosure. A flaw was found affecting the VNC server code in QEMU. On a fullyvirtualized guest VM, where qemu monitor mode is enabled, a user who had access to the VNC server could gain the ability to read arbitrary files as root in the host filesystem...

Important: Red Hat Security Advisory: libvncserver security update

An update for libvncserver is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

novnc: XSS vulnerability via the messages propagated to the status field

An XSS vulnerability was discovered in noVNC in which arbitrary HTML could be injected into the noVNC web page. An attacker having access to a VNC server could use target host values in a crafted URL to gain access to secure information such as VM tokens...

UltraVNC VNC Server Heap-based Buffer Overflow (CVE-2019-8274)

A buffer overflow vulnerability exists in UltraVNC VNC Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

CVE-2010-5304

A NULL pointer dereference flaw was found in the way LibVNCServer before 0.9.9 handled certain ClientCutText message. A remote attacker could use this flaw to crash the VNC server by sending a specially crafted ClientCutText message from a VNC client...

Null pointer dereference

A NULL pointer dereference flaw was found in the way LibVNCServer before 0.9.9 handled certain ClientCutText message. A remote attacker could use this flaw to crash the VNC server by sending a specially crafted ClientCutText message from a VNC client...

CVE-2010-5304

A NULL pointer dereference flaw was found in the way LibVNCServer before 0.9.9 handled certain ClientCutText message. A remote attacker could use this flaw to crash the VNC server by sending a specially crafted ClientCutText message from a VNC client...

Huawei EulerOS: Security Advisory for qemu-kvm (EulerOS-SA-2018-1247)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

UltraVNC VNC Server Stack-based Buffer Overflow (CVE-2019-8276)

A stack-based buffer overflow vulnerability exists in the VNC Server of UltraVNC. This vulnerability is due to improper handling of file transfer request from a client. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Debian: Security Advisory (DLA-2045-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

LibVNC Memory Disclosure Vulnerability

LibVNC is a cross-platform C library that enables you to easily implement VNC server or client functionality in your security applications. A memory leak vulnerability exists in the VNC server code in versions prior to LibVNC d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a. An attacker could exploit thi...