Approved changes feed: RSS · Atom

cpe:2.3:a:tightvnc:tightvnc:1.2.2:*:*:*:*:*:*:*

part: a version: 1.2.2 update: *

VendorTightvnc (36386c57-edd2-5c79-8711-0bdc385f5334)
ProductTightvnc (a2fc893b-ff89-555c-a7ef-fecadac5701d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/chenall/tightvnc purl2cpe 2026-06-01 10:18:03.154537
pkg:github/landv/tightvnc purl2cpe 2026-06-01 10:18:03.154539
pkg:github/markjandrews/tightvnc purl2cpe 2026-06-01 10:18:03.154540
pkg:sourceforge/vnc-tight purl2cpe 2026-06-01 10:18:03.154542

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2002-1848 vulnerable 2026-06-08 04:47:18.317448 Details available
TightVNC before 1.2.4 running on Windows stores unencrypted passwords in the password text control of the WinVNC Properties dialog, which could allow local users to access passwords.
Published: 2005-06-28T04:00:00.000Z
Updated: 2024-09-16T20:27:48.696Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1511 vulnerable 2026-06-08 04:46:23.920142 Details available
The vncserver wrapper for vnc before 3.3.3r2-21 uses the rand() function instead of srand(), which causes vncserver to generate weak cookies.
Published: 2004-09-01T04:00:00.000Z
Updated: 2024-08-08T03:26:28.781Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.