Vendors / Kanaka Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now Kanaka records in CISA KEV No Kanaka vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 61
wac commit 385e1 was discovered to contain a heap overflow.
CVSS 3.1 MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00227 · Published 2024-11-08 · No fix listed CWE-120
Priority MEDIUM 61
wac commit 385e1 was discovered to contain a heap overflow via the setup_call function at /wac-asan/wa.c.
CVSS 3.1 MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00227 · Published 2024-11-08 · No fix listed CWE-120
Priority MEDIUM 61
wac commit 385e1 was discovered to contain a heap overflow via the interpret function at /wac-asan/wa.c.
CVSS 3.1 MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00258 · Published 2024-11-08 · No fix listed CWE-120
Priority MEDIUM 58
wac commit 385e1 was discovered to contain a heap overflow via the load_module function at /wac-asan/wa.c.
CVSS 3.1 MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00228 · Published 2024-11-08 · No fix listed CWE-120
Priority LOW 24
noVNC before 0.5 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
CVSS 2.0 MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02168 · Published 2015-04-10 · Fixed CWE-310
Open these records in search → All records by CVSS severity
Critical0 High0 Medium5 Low0 No CVSS0