https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T22:29:59.332063+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2017-18635 CVE-2017-18635 2026-10-06T22:29:59.335048+00:00

An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as the VNC server name.

 https://cve.radiocsirt.org/vuln/usn-4522-1 USN-4522-1 — novnc vulnerability 2026-10-06T22:29:59.335093+00:00

Affected: Ubuntu:16.04:LTS: novnc

It was discovered that noVNC did not properly manage certain messages, resulting in the remote VNC server injecting arbitrary HTML into the noVNC web page. An attacker could use this issue to conduct cross-site scripting (XSS) attacks. (CVE-2017-18635)