Lucene search
K

54 matches found

EUVD
EUVD
added 2026/03/22 3:31 p.m.2 views

EUVD-2019-19944

UltraVNC Launcher 1.2.2.4 contains a buffer overflow vulnerability in the Path vncviewer.exe property field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 300-byte payload of repeated characters through the Properties dialog to...

6.9CVSS6.1AI score0.00017EPSS
Exploits0References5
NVD
NVD
added 2026/03/22 2:16 p.m.1 views

CVE-2019-25601

UltraVNC Launcher 1.2.2.4 contains a buffer overflow vulnerability in the Path vncviewer.exe property field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 300-byte payload of repeated characters through the Properties dialog to...

6.9CVSS0.00017EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/03/22 1:38 p.m.26 views

CVE-2019-25601 UltraVNC Launcher 1.2.2.4 Denial of Service Buffer Overflow

UltraVNC Launcher 1.2.2.4 contains a buffer overflow vulnerability in the Path vncviewer.exe property field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 300-byte payload of repeated characters through the Properties dialog to...

6.9CVSS0.00017EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/03/22 1:38 p.m.3 views

CVE-2019-25601

UltraVNC Launcher 1.2.2.4 contains a buffer overflow vulnerability in the Path vncviewer.exe property field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 300-byte payload of repeated characters through the Properties dialog to...

6.9CVSS6.1AI score0.00017EPSS
Exploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/22 1:38 p.m.3 views

CVE-2019-25601 UltraVNC Launcher 1.2.2.4 Denial of Service Buffer Overflow

UltraVNC Launcher 1.2.2.4 contains a buffer overflow vulnerability in the Path vncviewer.exe property field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 300-byte payload of repeated characters through the Properties dialog to...

6.9CVSS6.1AI score0.00017EPSS
Exploits0References4
CVE
CVE
added 2026/03/22 1:38 p.m.4 views

CVE-2019-25601

The CVE-2019-25601 entry concerns UltraVNC Launcher 1.2.2.4. The vulnerability is a buffer overflow in the Path vncviewer.exe property field that allows a local attacker to crash the application by supplying an excessively long string. Exploitation example: a 300-byte payload of repeated characte...

6.9CVSS6.1AI score0.00017EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/03/22 12:0 a.m.3 views

UltraVNC Launcher 缓冲区错误漏洞

UltraVNC Launcher is a launcher for the remote control software developed by UltraVNC Corporation. Version 1.2.2.4 of UltraVNC Launcher contains a buffer error vulnerability. This vulnerability stems from a buffer overflow in the Path vncviewer.exe attribute field, which could allow local attacke...

6.9CVSS6.1AI score0.00017EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2008-4980

Malware in sbrugna...

9.3CVSS6.4AI score0.05542EPSS
Exploits6References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-1998

Malicious code in bioql PyPI...

6.1CVSS6.4AI score0.00295EPSS
Exploits0References5
Veracode
Veracode
added 2022/09/05 5:53 a.m.26 views

Denial Of Service (DoS)

ibvncserver.so is vulnerable to denial of service. The vulnerability exists due to the memory leak in the rfbClientCleanup function of vncviewer.c, allowing an attacker to crash the application by providing malicious input...

7.5CVSS7AI score0.00939EPSS
Exploits0References3Affected Software2
OSV
OSV
added 2022/05/24 5:22 p.m.14 views

GHSA-2J4H-CJGH-659V Reflected XSS vulnerability in Jenkins VncViewer Plugin

VncViewer Plugin 1.7 and earlier does not escape a parameter value in the checkVncServ form validation endpoint output. This results in a reflected cross-site scripting XSS vulnerability. VncViewer Plugin 1.8 escapes the parameter value in the output...

6.1CVSS6AI score0.00295EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2022/05/24 5:22 p.m.13 views

Reflected XSS vulnerability in Jenkins VncViewer Plugin

VncViewer Plugin 1.7 and earlier does not escape a parameter value in the checkVncServ form validation endpoint output. This results in a reflected cross-site scripting XSS vulnerability. VncViewer Plugin 1.8 escapes the parameter value in the output...

6.1CVSS5.6AI score0.00295EPSS
Exploits0References5Affected Software1
AlmaLinux
AlmaLinux
added 2022/02/01 8:8 p.m.15 views

tigervnc bug fix and enhancement update

Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Bug...

7AI score
Exploits0
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.22 views

SUSE: Security Advisory (SUSE-SU-2015:0939-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.4CVSS6.1AI score0.06422EPSS
Exploits0References8
CNVD
CNVD
added 2020/07/03 12:0 a.m.2 views

CloudBees Jenkins VncViewer Plugin Cross-Site Scripting Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . VncViewer Plugin is used in which a VNC remo...

6.1CVSS6.5AI score0.00295EPSS
Exploits0References1
OSV
OSV
added 2020/07/02 3:15 p.m.11 views

CVE-2020-2207

Jenkins VncViewer Plugin 1.7 and earlier does not escape a parameter value in the checkVncServ form validation endpoint, resulting in a reflected cross-site scripting XSS vulnerability...

6.1CVSS5.8AI score
Exploits0References2
NVD
NVD
added 2020/07/02 3:15 p.m.8 views

CVE-2020-2207

Jenkins VncViewer Plugin 1.7 and earlier does not escape a parameter value in the checkVncServ form validation endpoint, resulting in a reflected cross-site scripting XSS vulnerability...

6.1CVSS0.00295EPSS
Exploits0References2
Prion
Prion
added 2020/07/02 3:15 p.m.10 views

Cross site scripting

Jenkins VncViewer Plugin 1.7 and earlier does not escape a parameter value in the checkVncServ form validation endpoint, resulting in a reflected cross-site scripting XSS vulnerability...

4.3CVSS6AI score0.00295EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2020/07/02 2:55 p.m.15 views

CVE-2020-2207

Jenkins VncViewer Plugin 1.7 and earlier does not escape a parameter value in the checkVncServ form validation endpoint, resulting in a reflected cross-site scripting XSS vulnerability...

6AI score0.00295EPSS
Exploits0References2
CVE
CVE
added 2020/07/02 2:55 p.m.55 views

CVE-2020-2207

Jenkins VncViewer Plugin (versions 1.7 and earlier) is affected by a reflected XSS in the checkVncServ endpoint due to insufficient escaping of a parameter value. This is documented across multiple sources (CVE-2020-2207). Impact is reflected client-side script execution; remediation is to upgrad...

6.1CVSS6AI score0.00295EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder