Advisories · Technology
NoMachine.
Every CVE that names NoMachine among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.8 CriticalCritical · CVSS 9+
NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability
- NoMachine
- Memory corruption
- CVSS 7.2 High
NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability
- NoMachine
- Server-side request forgery (SSRF)
- CVSS 7.8 High
NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability
- NoMachine
- CWE-331
- CVSS 8.8 High
NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability
- NoMachine
- Memory corruption
- CVSS 7.8 High
NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability
- NoMachine
- Broken access control
- CVSS 8.8 High
NoMachine getstat Command Injection Remote Code Execution Vulnerability
- NoMachine
- Command injection
- CVSS 7.3 High
Potential local privileges escalation through argument injection in the nxchmod.sh script
- NoMachine
- Command injection
- CVSS 7.8 High
NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
- NoMachine
- CWE-427
- CVSS 7.8 High
NoMachine External Control of File Path Local Privilege Escalation Vulnerability
- NoMachine
- Path traversal
- CVSS 7.1 High
NoMachine External Control of File Path Arbitrary File Deletion Vulnerability
- NoMachine
- Path traversal
- CVSS 7.8 High
NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
- NoMachine
- CWE-427
- CVSS 7.8 High
NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
- NoMachine
- CWE-427