CVE-2022-23967

CVE-2022-23967 在 TightVNC 1.3.10 中，存在整数符号错误，并由此在 rfbproto.c 的 InitialiseRFBConnection 中导致基于堆的缓冲区溢出 （针对 vncviewer 组件）。代码未对传递给 malloc 的大小进行检查， 例如会接受 -1。这会分配一个大小为零的内存块， 从而得到一个堆指针。然而，攻击者可以发送 0xffffffff 字节的数据， 这可能会造成拒绝服务（DoS）影响或导致远程代码执行。 漏洞类型 缓冲区溢出 产品厂商 TightVNC 受影响产品代码库 vncviewer - 1.3.10 受影响组件...

EUVD-2019-19944

UltraVNC Launcher 1.2.2.4 contains a buffer overflow vulnerability in the Path vncviewer.exe property field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 300-byte payload of repeated characters through the Properties dialog to...

CVE-2019-25601

UltraVNC Launcher 1.2.2.4 contains a buffer overflow vulnerability in the Path vncviewer.exe property field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 300-byte payload of repeated characters through the Properties dialog to...

CVE-2019-25601 UltraVNC Launcher 1.2.2.4 Denial of Service Buffer Overflow

UltraVNC Launcher 1.2.2.4 contains a buffer overflow vulnerability in the Path vncviewer.exe property field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 300-byte payload of repeated characters through the Properties dialog to...

CVE-2019-25601

The CVE-2019-25601 entry concerns UltraVNC Launcher 1.2.2.4. The vulnerability is a buffer overflow in the Path vncviewer.exe property field that allows a local attacker to crash the application by supplying an excessively long string. Exploitation example: a 300-byte payload of repeated characte...

CVE-2019-25601 UltraVNC Launcher 1.2.2.4 Denial of Service Buffer Overflow

UltraVNC Launcher 1.2.2.4 contains a buffer overflow vulnerability in the Path vncviewer.exe property field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 300-byte payload of repeated characters through the Properties dialog to...

CVE-2019-25601

UltraVNC Launcher 1.2.2.4 contains a buffer overflow vulnerability in the Path vncviewer.exe property field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 300-byte payload of repeated characters through the Properties dialog to...

UltraVNC Launcher 缓冲区错误漏洞

UltraVNC Launcher is a launcher for the remote control software developed by UltraVNC Corporation. Version 1.2.2.4 of UltraVNC Launcher contains a buffer error vulnerability. This vulnerability stems from a buffer overflow in the Path vncviewer.exe attribute field, which could allow local attacke...

EUVD-2008-4980

Malware in sbrugna...

EUVD-2022-1998

Malicious code in bioql PyPI...

Denial Of Service (DoS)

ibvncserver.so is vulnerable to denial of service. The vulnerability exists due to the memory leak in the rfbClientCleanup function of vncviewer.c, allowing an attacker to crash the application by providing malicious input...

GHSA-2J4H-CJGH-659V Reflected XSS vulnerability in Jenkins VncViewer Plugin

VncViewer Plugin 1.7 and earlier does not escape a parameter value in the checkVncServ form validation endpoint output. This results in a reflected cross-site scripting XSS vulnerability. VncViewer Plugin 1.8 escapes the parameter value in the output...

Reflected XSS vulnerability in Jenkins VncViewer Plugin

VncViewer Plugin 1.7 and earlier does not escape a parameter value in the checkVncServ form validation endpoint output. This results in a reflected cross-site scripting XSS vulnerability. VncViewer Plugin 1.8 escapes the parameter value in the output...

tigervnc bug fix and enhancement update

Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Bug...

SUSE: Security Advisory (SUSE-SU-2015:0939-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CloudBees Jenkins VncViewer Plugin Cross-Site Scripting Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . VncViewer Plugin is used in which a VNC remo...

CVE-2020-2207

Jenkins VncViewer Plugin 1.7 and earlier does not escape a parameter value in the checkVncServ form validation endpoint, resulting in a reflected cross-site scripting XSS vulnerability...

CVE-2020-2207

Jenkins VncViewer Plugin 1.7 and earlier does not escape a parameter value in the checkVncServ form validation endpoint, resulting in a reflected cross-site scripting XSS vulnerability...

Cross site scripting

Jenkins VncViewer Plugin 1.7 and earlier does not escape a parameter value in the checkVncServ form validation endpoint, resulting in a reflected cross-site scripting XSS vulnerability...

CVE-2020-2207

Jenkins VncViewer Plugin (versions 1.7 and earlier) is affected by a reflected XSS in the checkVncServ endpoint due to insufficient escaping of a parameter value. This is documented across multiple sources (CVE-2020-2207). Impact is reflected client-side script execution; remediation is to upgrad...