Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

12 records

Priority HIGH 67

LibVNCServer versions 0.9.15 and prior (fixed in commit dc78dee) contain null pointer dereference vulnerabilities in the HTTP proxy handlers within httpProcessInput() in httpd.c that allow remote attackers to cause a den…

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.05415 Published 2026-03-24 Partial fix CWE-476
Priority HIGH 70

LibVNCServer versions 0.9.15 and prior (fixed in commit 009008e) contain a heap out-of-bounds read vulnerability in the UltraZip encoding handler that allows a malicious VNC server to cause information disclosure or appl…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00445 Published 2026-03-24 Partial fix CWE-125
Priority MEDIUM 49

Heap-based buffer overflow in ultra.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted FramebufferUpdat…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0382 Published 2016-12-31 Will not fix CWE-119
Priority MEDIUM 48

Heap-based buffer overflow in rfbproto.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted FramebufferUp…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03732 Published 2016-12-31 Will not fix CWE-119