Skip to content
OpenAdvisories

Archive

25 September 2019

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2017-18635 Public exploit

    Cross-Site Scripting in @novnc/novnc

    An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as the VNC server name.