Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2017-18635

novnc: XSS vulnerability via the messages propagated to the status field

An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as the VNC server name.

CVSS 3.1 · 6.1 Medium EPSS 4.8% KEV · Not listed
Vendors
Canonical Debian Novnc and 1 more
Products
Ubuntu Linux Debian Linux Novnc and 2 more