Cybelsoft Thinvnc
2 CVEs affecting Cybelsoft Thinvnc. Latest disclosed: 2022-04-18. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-25226 | Critical | 10.0 | 2022-04-18 | ThinVNC version 1.0b1 allows an unauthenticated user to bypass the authentication process via 'http://thin-vnc:8080/cmd?cmd=connect' by obtaining a valid SID w… |
CVE-2019-17662 | Critical | 9.8 | 2019-10-16 | ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exists even when authentication is turned… |