CYBELE software ThinVNC 1.0 B1

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:cybelsoft:thinvnc:1.0:b1:*:*:*:*:*:*

part: a version: 1.0 update: b1

VendorCybelsoft (0dd43082-d15d-5b43-bb53-add521b993a4)
ProductThinvnc (7b5c7c0b-3ca0-5e35-b46a-36d04a463d32)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/bewest/thinvnc purl2cpe 2026-06-01 10:15:24.470575
pkg:github/zekiguven/thinvnc purl2cpe 2026-06-01 10:15:24.470580
pkg:sourceforge/thinvnc purl2cpe 2026-06-01 10:15:24.470584

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-25226 vulnerable 2026-06-08 05:41:45.576255 Details available
ThinVNC version 1.0b1 allows an unauthenticated user to bypass the authentication process via 'http://thin-vnc:8080/cmd?cmd=connect' by obtaining a valid SID without any kind of authentication. It is possible to achieve code execution on the server by sending keyboard or mouse events to the server.
Published: 2022-04-18T16:20:44.000Z
Updated: 2024-08-03T04:36:06.608Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17662 vulnerable 2026-06-08 05:13:10.933436 Details available
ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exists even when authentication is turned on during the deployment of the VNC server. The password for authentication is stored in cleartext in a file that can be read via a ../../ThinVnc.ini directory traversal attack vector.
Published: 2019-10-16T17:24:07.000Z
Updated: 2024-08-05T01:47:13.477Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.