Approved changes feed: RSS · Atom

cpe:2.3:a:kanaka:novnc:0.4:*:*:*:*:*:*:*

part: a version: 0.4 update: *

VendorKanaka (eefa2ea2-78bc-51db-b0e9-5a7cd8216ceb)
ProductNovnc (496bd196-c689-5dc5-8129-0e796a93db3b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/novnc purl2cpe 2026-06-01 10:11:40.936668
pkg:deb/ubuntu/novnc purl2cpe 2026-06-01 10:11:40.936671
pkg:github/novnc/novnc purl2cpe 2026-06-01 10:11:40.936674
pkg:golang/github.com/novnc/novnc purl2cpe 2026-06-01 10:11:40.936676
pkg:maven/org.webjars.npm/github-com-novnc-novnc purl2cpe 2026-06-01 10:11:40.936679
pkg:npm/novnc purl2cpe 2026-06-01 10:11:40.936682
pkg:rpm/fedora/novnc purl2cpe 2026-06-01 10:11:40.936684
pkg:rpm/opensuse/novnc purl2cpe 2026-06-01 10:11:40.936687

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-7436 vulnerable 2026-06-08 05:05:10.289737 Details available
noVNC before 0.5 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
Published: 2015-04-10T14:00:00.000Z
Updated: 2024-08-06T18:09:16.427Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.