Novnc

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2013-7436 MEDIUM This Month

noVNC before 0.5 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Information Disclosure Novnc

NVD GitHub

CVSS 2.0

4.3

EPSS

0.6%

CVE-2013-7436

EPSS 1% CVSS 4.3

MEDIUM This Month

noVNC before 0.5 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Information Disclosure Novnc

NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy