https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 21:34:21 +0000 https://cve.radiocsirt.org/vuln/cve-2017-18635 <p>An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as the VNC server name.</p> <p>An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as the VNC server name.</p> https://cve.radiocsirt.org/vuln/cve-2017-18635 https://cve.radiocsirt.org/vuln/usn-4522-1 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: novnc</p> <p>It was discovered that noVNC did not properly manage certain messages, resulting in the remote VNC server injecting arbitrary HTML into the noVNC web page. An attacker could use this issue to conduct cross-site scripting (XSS) attacks. (CVE-2017-18635)</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: novnc</p> <p>It was discovered that noVNC did not properly manage certain messages, resulting in the remote VNC server injecting arbitrary HTML into the noVNC web page. An attacker could use this issue to conduct cross-site scripting (XSS) attacks. (CVE-2017-18635)</p> https://cve.radiocsirt.org/vuln/usn-4522-1