libvnc project records
24 published records for vendor libvnc project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 5
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-787 Out-of-bounds Write10
- CWE-476 NULL Pointer Dereference3
- CWE-665 Improper Initialization3
- CWE-416 Use After Free2
- CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')2
- CWE-909 Missing Initialization of Resource1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
24 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
44Plan | CVE-2018-15127No exploit | LibVNC before commit 502821828ed00b4a2c4bef90683d0fd88ce495de contains heap out-of-bound write vulnerability in server code of file transferlibvnc project · libvncserver · CWE-787 | Critical9.8 | — | 15.0% | Dec 19, 2018 |
43Plan | CVE-2018-15126No exploit | LibVNC before commit 73cb96fec028a576a5a24417b57723b55854ad7b contains heap use-after-free vulnerability in server code of file transfer extlibvnc project · libvncserver · CWE-416 | Critical9.8 | — | 11.8% | Dec 19, 2018 |
42Plan | CVE-2018-20019No exploit | LibVNC before commit a83439b9fbe0f03c48eb94ed05729cb016f8b72f contains multiple heap out-of-bound write vulnerabilities in VNC client code tlibvnc project · libvncserver · CWE-787 | Critical9.8 | — | 9.4% | Dec 19, 2018 |
42Plan | CVE-2018-20020No exploit | LibVNC before commit 7b1ef0ffc4815cab9a96c7278394152bdc89dc4d contains heap out-of-bound write vulnerability inside structure in VNC client libvnc project · libvncserver · CWE-787 | Critical9.8 | — | 8.6% | Dec 19, 2018 |
40Plan | CVE-2018-6307No exploit | LibVNC before commit ca2a5ac02fbbadd0a21fabba779c1ea69173d10b contains heap use-after-free vulnerability in server code of file transfer extlibvnc project · libvncserver · CWE-416 | High8.1 | — | 26.5% | Dec 19, 2018 |
40Plan | CVE-2018-20750No exploit | LibVNC through 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c.libvnc project · libvncserver · CWE-787 | Critical9.8 | — | 3.3% | Jan 30, 2019 |
40Plan | CVE-2018-20748No exploit | LibVNC before 0.9.12 contains multiple heap out-of-bounds write vulnerabilities in libvncclient/rfbproto.c.libvnc project · libvncserver · CWE-787 | Critical9.8 | — | 3.2% | Jan 30, 2019 |
40Plan | CVE-2018-20749No exploit | LibVNC before 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c.libvnc project · libvncserver · CWE-787 | Critical9.8 | — | 3.2% | Jan 30, 2019 |
40Plan | CVE-2019-20788No exploit | libvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and heap-based buffer overflow via a large heilibvnc project · libvncserver · CWE-190 | Critical9.8 | — | 2.4% | Apr 23, 2020 |
31Monitor | CVE-2019-20839No exploit | libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename.libvnc project · libvncserver · CWE-120 | High7.5 | — | 3.5% | Jun 17, 2020 |
31Monitor | CVE-2018-20021No exploit | LibVNC before commit c3115350eb8bb635d0fdb4dbbb0d0541f38ed19c contains a CWE-835: Infinite loop vulnerability in VNC client code.libvnc project · libvncserver · CWE-835 | High7.5 | — | 3.4% | Dec 19, 2018 |
31Monitor | CVE-2020-14397No exploit | An issue was discovered in LibVNCServer before 0.9.13.libvnc project · libvncserver · CWE-476 | High7.5 | — | 3.3% | Jun 17, 2020 |
31Monitor | CVE-2018-20024No exploit | LibVNC before commit 4a21bbd097ef7c44bb000c3bd0907f96a10e4ce7 contains null pointer dereference in VNC client code that can result DoS.libvnc project · libvncserver · CWE-476 | High7.5 | — | 3.1% | Dec 19, 2018 |
31Monitor | CVE-2018-20022No exploit | LibVNC before 2f5b2ad1c6c99b1ac6482c95844a84d66bb52838 contains multiple weaknesses CWE-665: Improper Initialization vulnerability in VNC cllibvnc project · libvncserver · CWE-665 | High7.5 | — | 2.9% | Dec 19, 2018 |
31Monitor | CVE-2019-15681No exploit | LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak (CWE-655) in VNC server code, which allow an attacker tlibvnc project · libvncserver · CWE-665 | High7.5 | — | 2.9% | Oct 29, 2019 |
31Monitor | CVE-2020-14398No exploit | An issue was discovered in LibVNCServer before 0.9.13.libvnc project · libvncserver · CWE-835 | High7.5 | — | 2.6% | Jun 17, 2020 |
31Monitor | CVE-2019-20840No exploit | An issue was discovered in LibVNCServer before 0.9.13.libvnc project · libvncserver · CWE-787 | High7.5 | — | 2.6% | Jun 17, 2020 |
31Monitor | CVE-2020-14396No exploit | An issue was discovered in LibVNCServer before 0.9.13.libvnc project · libvncserver · CWE-476 | High7.5 | — | 2.5% | Jun 17, 2020 |
31Monitor | CVE-2018-20023No exploit | LibVNC before 8b06f835e259652b0ff026898014fc7297ade858 contains CWE-665: Improper Initialization vulnerability in VNC Repeater client code tlibvnc project · libvncserver · CWE-665 | High7.5 | — | 2.4% | Dec 19, 2018 |
31Monitor | CVE-2018-21247No exploit | An issue was discovered in LibVNCServer before 0.9.13.libvnc project · libvncserver · CWE-909 | High7.5 | — | 2.4% | Jun 17, 2020 |
27Monitor | CVE-2020-14405No exploit | An issue was discovered in LibVNCServer before 0.9.13.libvnc project · libvncserver · CWE-770 | Medium6.5 | — | 1.8% | Jun 17, 2020 |
22Monitor | CVE-2020-14402No exploit | An issue was discovered in LibVNCServer before 0.9.13.libvnc project · libvncserver · CWE-787 | Medium5.4 | — | 1.8% | Jun 17, 2020 |
21Monitor | CVE-2020-14403No exploit | An issue was discovered in LibVNCServer before 0.9.13.libvnc project · libvncserver · CWE-787 | Medium5.4 | — | 1.6% | Jun 17, 2020 |
21Monitor | CVE-2020-14404No exploit | An issue was discovered in LibVNCServer before 0.9.13.libvnc project · libvncserver · CWE-787 | Medium5.4 | — | 1.5% | Jun 17, 2020 |
- CVE-2018-1512744Plan
LibVNC before commit 502821828ed00b4a2c4bef90683d0fd88ce495de contains heap out-of-bound write vulnerability in server code of file transfer
CriticalCVSS 9.8No exploitEPSS 15%libvnc project · libvncserverDec 19, 2018
- CVE-2018-1512643Plan
LibVNC before commit 73cb96fec028a576a5a24417b57723b55854ad7b contains heap use-after-free vulnerability in server code of file transfer ext
CriticalCVSS 9.8No exploitEPSS 11%libvnc project · libvncserverDec 19, 2018
- CVE-2018-2001942Plan
LibVNC before commit a83439b9fbe0f03c48eb94ed05729cb016f8b72f contains multiple heap out-of-bound write vulnerabilities in VNC client code t
CriticalCVSS 9.8No exploitEPSS 9%libvnc project · libvncserverDec 19, 2018
- CVE-2018-2002042Plan
LibVNC before commit 7b1ef0ffc4815cab9a96c7278394152bdc89dc4d contains heap out-of-bound write vulnerability inside structure in VNC client
CriticalCVSS 9.8No exploitEPSS 8%libvnc project · libvncserverDec 19, 2018
- CVE-2018-630740Plan
LibVNC before commit ca2a5ac02fbbadd0a21fabba779c1ea69173d10b contains heap use-after-free vulnerability in server code of file transfer ext
HighCVSS 8.1No exploitEPSS 26%libvnc project · libvncserverDec 19, 2018
- CVE-2018-2075040Plan
LibVNC through 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c.
CriticalCVSS 9.8No exploitEPSS 3%libvnc project · libvncserverJan 30, 2019
- CVE-2018-2074840Plan
LibVNC before 0.9.12 contains multiple heap out-of-bounds write vulnerabilities in libvncclient/rfbproto.c.
CriticalCVSS 9.8No exploitEPSS 3%libvnc project · libvncserverJan 30, 2019
- CVE-2018-2074940Plan
LibVNC before 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c.
CriticalCVSS 9.8No exploitEPSS 3%libvnc project · libvncserverJan 30, 2019
- CVE-2019-2078840Plan
libvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and heap-based buffer overflow via a large hei
CriticalCVSS 9.8No exploitEPSS 2%libvnc project · libvncserverApr 23, 2020
- CVE-2019-2083931Monitor
libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename.
HighCVSS 7.5No exploitEPSS 3%libvnc project · libvncserverJun 17, 2020
- CVE-2018-2002131Monitor
LibVNC before commit c3115350eb8bb635d0fdb4dbbb0d0541f38ed19c contains a CWE-835: Infinite loop vulnerability in VNC client code.
HighCVSS 7.5No exploitEPSS 3%libvnc project · libvncserverDec 19, 2018
- CVE-2020-1439731Monitor
An issue was discovered in LibVNCServer before 0.9.13.
HighCVSS 7.5No exploitEPSS 3%libvnc project · libvncserverJun 17, 2020
- CVE-2018-2002431Monitor
LibVNC before commit 4a21bbd097ef7c44bb000c3bd0907f96a10e4ce7 contains null pointer dereference in VNC client code that can result DoS.
HighCVSS 7.5No exploitEPSS 3%libvnc project · libvncserverDec 19, 2018
- CVE-2018-2002231Monitor
LibVNC before 2f5b2ad1c6c99b1ac6482c95844a84d66bb52838 contains multiple weaknesses CWE-665: Improper Initialization vulnerability in VNC cl
HighCVSS 7.5No exploitEPSS 2%libvnc project · libvncserverDec 19, 2018
- CVE-2019-1568131Monitor
LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak (CWE-655) in VNC server code, which allow an attacker t
HighCVSS 7.5No exploitEPSS 2%libvnc project · libvncserverOct 29, 2019
- CVE-2020-1439831Monitor
An issue was discovered in LibVNCServer before 0.9.13.
HighCVSS 7.5No exploitEPSS 2%libvnc project · libvncserverJun 17, 2020
- CVE-2019-2084031Monitor
An issue was discovered in LibVNCServer before 0.9.13.
HighCVSS 7.5No exploitEPSS 2%libvnc project · libvncserverJun 17, 2020
- CVE-2020-1439631Monitor
An issue was discovered in LibVNCServer before 0.9.13.
HighCVSS 7.5No exploitEPSS 2%libvnc project · libvncserverJun 17, 2020
- CVE-2018-2002331Monitor
LibVNC before 8b06f835e259652b0ff026898014fc7297ade858 contains CWE-665: Improper Initialization vulnerability in VNC Repeater client code t
HighCVSS 7.5No exploitEPSS 2%libvnc project · libvncserverDec 19, 2018
- CVE-2018-2124731Monitor
An issue was discovered in LibVNCServer before 0.9.13.
HighCVSS 7.5No exploitEPSS 2%libvnc project · libvncserverJun 17, 2020
- CVE-2020-1440527Monitor
An issue was discovered in LibVNCServer before 0.9.13.
MediumCVSS 6.5No exploitEPSS 1%libvnc project · libvncserverJun 17, 2020
- CVE-2020-1440222Monitor
An issue was discovered in LibVNCServer before 0.9.13.
MediumCVSS 5.4No exploitEPSS 1%libvnc project · libvncserverJun 17, 2020
- CVE-2020-1440321Monitor
An issue was discovered in LibVNCServer before 0.9.13.
MediumCVSS 5.4No exploitEPSS 1%libvnc project · libvncserverJun 17, 2020
- CVE-2020-1440421Monitor
An issue was discovered in LibVNCServer before 0.9.13.
MediumCVSS 5.4No exploitEPSS 1%libvnc project · libvncserverJun 17, 2020