Lucene search
+L

5 matches found

CNNVD
CNNVD
•added 2026/10/21 12:00 a.m.•11 views

ViewSonic vCast authorization issue vulnerability

ViewSonic vCast v3.2.715 and earlier versions contain an authorization issue vulnerability. This vulnerability arises because the screen capture endpoint lacks authentication. Unauthenticated remote attackers can use GET requests to access the /snapshot or /screen endpoints, thereby obtaining JPE...

7.5CVSS5.9AI score0.00584EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/24 12:00 a.m.•21 views

PT-2026-98306

There exists an arbitrary file download in vCast APK delivery mechanism in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to trigger unprivileged APK installation via serving a malicious APK URL through an unauthenticated download endpoint...

5.9AI score0.00465EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/24 12:00 a.m.•14 views

PT-2026-98305

Name of the Vulnerable Software and Affected Versions ViewSonic ViewBoard vCast media streaming service affected versions not specified Description An issue in the vCast media streaming service allows a remote, unauthenticated attacker to capture and exfiltrate the current screen content. This is...

5.8AI score0.00584EPSS
SaveExploits0References5
CERT
CERT
•added 2026/09/24 12:00 a.m.•63 views

ViewSonic vCast media streaming service allows unauthenticated screen exfiltration and device compromise

Overview ViewSonic vCast software, which is included in ViewBoard smartboard devices, contains multiple vulnerabilities that an attacker can chained to achieve full device compromise. Description ViewSonic ViewBoards are widely used smart display devices smartboard, typically deoloyed in enterpri...

9.8CVSS6.8AI score0.00666EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/24 12:00 a.m.•31 views

PT-2026-98307

There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows a remote, unauthenticated attacker to inject arbitrary input into service endpoints via network-based HTTP requests to unauthenticated endpoints...

6AI score0.00666EPSS
SaveExploits0References4
Rows per page
Query Builder