Lucene search
+L

558 matches found

BDU FSTEC
BDU FSTEC
added 2019/03/12 12:0 a.m.18 views

The vulnerability of the component for implementing remote access to the desktop based on the VNC protocol in the Astra Linux operating system, related to the incorrect use of flags during compilation, allows a hacker to trigger a service failure.

The vulnerability of the component for implementing remote access to the desktop based on the VNC protocol in the Astra Linux operating system is related to the incorrect use of flags during compilation. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

5.3CVSS5.5AI score
Exploits0References1
CNVD
CNVD
added 2019/03/11 12:0 a.m.5 views

UltraVNC Code Execution Vulnerability

UltraVNC is an open source remote terminal control software for the Windows platform. A security vulnerability exists in the VNC server code in UltraVNC version 1211. An attacker could exploit the vulnerability to execute code...

9.8CVSS7.3AI score0.0392EPSS
Exploits0References1
OSV
OSV
added 2019/03/08 11:29 p.m.4 views

CVE-2019-8273

UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer request handler, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1212...

9.8CVSS7.5AI score0.08263EPSS
Exploits0References3
OSV
OSV
added 2019/03/08 11:29 p.m.4 views

CVE-2019-8272

UltraVNC revision 1211 has multiple off-by-one vulnerabilities in VNC server code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212...

9.8CVSS7.3AI score0.0392EPSS
Exploits0References3
OSV
OSV
added 2019/03/08 11:29 p.m.8 views

CVE-2019-8265

UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of SETPIXELS macro in VNC client code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in...

9.8CVSS7.3AI score0.03142EPSS
Exploits0References6
CNVD
CNVD
added 2019/03/07 12:0 a.m.34 views

UltraVNC Buffer Overflow Vulnerability

UltraVNC is an open source remote terminal control software for the Windows platform. A buffer overflow vulnerability exists in the VNC client code in UltraVNC version 1198. An attacker could exploit this vulnerability to execute code...

9.8CVSS7.8AI score0.02876EPSS
Exploits0References1
OSV
OSV
added 2019/03/05 3:29 p.m.3 views

CVE-2018-15361

UltraVNC revision 1198 has a buffer underflow vulnerability in VNC client code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1199...

9.8CVSS6AI score0.02876EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/02/19 12:0 a.m.6 views

The vulnerability of the LibVNC library, related to reading data beyond the specified buffer, allows a hacker to execute arbitrary code.

The vulnerability of the LibVNC library relates to the reading of data beyond the specified buffer. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.08553EPSS
Exploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/02/19 12:0 a.m.4 views

The vulnerability of the VNC Repeater component of the LibVNC library, which allows a hacker to disclose protected information

The vulnerability of the VNC Repeater component in the client library LibVNC is related to initialization errors. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

8.6CVSS6.6AI score0.02495EPSS
Exploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/01/22 12:0 a.m.6 views

The vulnerability of Siemens Sinumerik programmable logic controllers lies in the integer overflow that occurs in the VNC server. This allows a perpetrator to execute arbitrary code with privileged privileges.

The vulnerability of Siemens Sinumerik programmable logic controllers is related to a numerical overflow in the VNC server. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with privileged privileges by sending specially crafted packets to port 5900/TCP...

10CVSS8AI score0.04593EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/01/22 12:0 a.m.6 views

The vulnerability of Siemens Sinumerik programmable logic controllers is related to an error in processing network packets by the VNC server. This error allows a intruder to trigger a service failure of the VNC server.

The vulnerability of Siemens Sinumerik programmable logic controllers is related to an error in processing network packets by the VNC server. Exploiting this vulnerability allows a malicious actor to cause a service failure on the VNC server by sending specially crafted packets to port 5900/TCP...

5.3CVSS5.9AI score0.01857EPSS
Exploits0References3
Cvelist
Cvelist
added 2019/01/10 5:0 p.m.25 views

CVE-2019-5892

bgpd in FRRouting FRR aka Free Range Routing 2.x and 3.x before 3.0.4, 4.x before 4.0.1, 5.x before 5.0.2, and 6.x before 6.0.2 not affecting Cumulus Linux or VyOS, when ENABLEBGPVNC is used for Virtual Network Control, allows remote attackers to cause a denial of service peering session flap via...

6.5AI score0.02718EPSS
Exploits0References7
CNVD
CNVD
added 2018/12/20 12:0 a.m.4 views

LibVNC Improper Initialization Vulnerability

LibVNC is a cross-platform C library for implementing VNC server and client functionality. A security vulnerability exists in the VNC client code in versions prior to LibVNC 2f5b2ad1c6c99b1ac6482c95844a84d66bb52838, which stems from incorrect initialization of the program. An attacker could explo...

7.5CVSS6.9AI score0.02937EPSS
Exploits0References1
CNVD
CNVD
added 2018/12/20 12:0 a.m.5 views

LibVNC Null Pointer Reverse Reference Vulnerability

LibVNC is a cross-platform C library for implementing VNC server and client functionality. A null pointer back-reference vulnerability exists in VNC client code in versions prior to LibVNC commit 4a21bbd097ef7c44bb000c3bd0907f96a10e4ce7. An attacker could exploit this vulnerability to cause a...

7.5CVSS6.9AI score0.0326EPSS
Exploits0References1
OSV
OSV
added 2018/12/19 4:29 p.m.3 views

DEBIAN-CVE-2018-20022

LibVNC before 2f5b2ad1c6c99b1ac6482c95844a84d66bb52838 contains multiple weaknesses CWE-665: Improper Initialization vulnerability in VNC client code that allows attacker to read stack memory and can be abuse for information disclosure. Combined with another vulnerability, it can be used to leak...

7.5CVSS6.8AI score0.02937EPSS
Exploits0References1
OSV
OSV
added 2018/12/19 12:0 a.m.3 views

UBUNTU-CVE-2018-20019

LibVNC before commit a83439b9fbe0f03c48eb94ed05729cb016f8b72f contains multiple heap out-of-bound write vulnerabilities in VNC client code that can result remote code execution...

9.8CVSS7.8AI score0.09392EPSS
Exploits0References6
CNVD
CNVD
added 2018/12/14 12:0 a.m.7 views

Multiple Siemens Products Denial of Service Vulnerabilities

Siemens SINUMERIK 808D and so on are the German Siemens Siemens company's CNC machine tool system controller. A security vulnerability exists in several Siemens products. A remote attacker could exploit this vulnerability by using the integrated VNC server on port 5900/tcp to cause a denial of...

4.3CVSS6.8AI score0.01857EPSS
Exploits0References1
CNVD
CNVD
added 2018/12/14 12:0 a.m.6 views

Integer Overflow Vulnerability in Multiple Siemens Products

Siemens SINUMERIK 808D and so on are the German Siemens Siemens company's CNC machine tool system controller. An integer overflow vulnerability exists in the Siemens SINUMERIK CNC Controller. A remote attacker could exploit this vulnerability by sending a specially crafted network request to port...

9.3CVSS7.4AI score0.04593EPSS
Exploits0References1
CVE
CVE
added 2018/12/04 2:0 p.m.135 views

CVE-2018-6982

CVE-2018-6982 affects VMware ESXi 6.5 and 6.7 (and related VMware products) due to uninitialized stack memory usage in the vmxnet3 virtual network adapter, which may leak information from host to guest when vmxnet3 is enabled. The Connected documents corroborate that ESXi 6.7 requires ESXi670-201...

6.5CVSS7.2AI score0.00452EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2018/11/27 5:29 p.m.24 views

CVE-2018-6983

VMware Workstation 15.x before 15.0.2 and 14.x before 14.1.5 and Fusion 11.x before 11.0.2 and 10.x before 10.1.5 contain an integer overflow vulnerability in the virtual network devices. This issue may allow a guest to execute code on the host...

8.8CVSS8.8AI score0.00452EPSS
Exploits0References2
Rows per page
Query Builder