Known Vulnerabilities for products from Cybelesoft
Listed below are 8 of the newest known vulnerabilities associated with the vendor "Cybelesoft".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2022-25227 json | Thinfinity VNC v4.0.0.1 contains a Cross-Origin Resource Sharing (CORS) vulnerability which can allow an unprivileged remote ... | 8.8 - HIGH | 2022-05-20 | 2022-06-01 |
| CVE-2021-46354 json | Thinfinity VirtualUI 2.1.28.0, 2.1.32.1 and 2.5.26.2, fixed in version 3.0 is affected by an information disclosure vulnerabi... | Not Provided | 2022-02-09 | 2026-07-09 |
| CVE-2021-45092 json | Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the... | 9.8 - CRITICAL | 2021-12-16 | 2022-07-12 |
| CVE-2021-44848 json | In Cibele Thinfinity VirtualUI before 3.0, /changePassword returns different responses for invalid authentication requests de... | 5.3 - MEDIUM | 2021-12-13 | 2022-07-12 |
| CVE-2021-44554 json | Thinfinity VirtualUI before 3.0 allows a malicious actor to enumerate users registered in the OS (Windows) through the /chang... | 5.3 - MEDIUM | 2021-12-20 | 2021-12-29 |
| CVE-2019-16385 json | Cybele Thinfinity VirtualUI 2.5.17.2 allows HTTP response splitting via the mimetype parameter within a PDF viewer request, a... | 6.1 - MEDIUM | 2020-06-04 | 2021-07-21 |
| CVE-2019-16384 json | Cybele Thinfinity VirtualUI 2.5.17.2 allows ../ path traversal that can be used for data exfiltration. This enables files out... | 6.5 - MEDIUM | 2020-06-04 | 2020-06-05 |
| CVE-2015-1429 json | Directory traversal vulnerability in Cybele Software Thinfinity Remote Desktop Workstation 3.0.0.3 32-bit and 64-bit allows r... | 7.5 - HIGH | 2017-10-06 | 2020-08-19 |
Known software with vulnerabilities from Cybelesoft
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Cybelesoft | Thinfinity Remote Desktop Workstation | 3.0.0.0 |
| Application | Cybelesoft | Thinfinity Virtualui | 2.0 |