Skip to contentDevolutions vulnerabilities
Newest
- devolutions serverImproper access control in PAM propagation scripts in Devolutions Server 2023.2.8.0 and ealier...CVE-2023-52407.5 High
- devolutions remote desktop managerImproper access controls in the entry duplication component in Devolutions Remote Desktop Manager...CVE-2023-44176.5 Medium
- devolutions remote desktop managerInadequate validation of permissions when employing remote tools and macros within Devolutions...CVE-2023-43739.8 Critical
- devolutions serverImproper deletion of resource in the user management feature in Devolutions Server 2023.1.8 and...CVE-2023-24002.7 Low
- arborator serverArborator Server project.cgi start denial of serviceCVE-2018-250873.5 Low
- devolutions serverImproper access control in Subscriptions Folder path filter in Devolutions Server 2023.1.1 and...CVE-2023-24454.9 Medium
- devolutions remote desktop managerImproper access control in the Web Login listener in Devolutions Remote Desktop Manager 2023.1.22...CVE-2023-22826.5 Medium
- devolutions workspace, workspace desktop +1 moreAuthentication Bypass in Hub Business integration in Devolutions Workspace Desktop 2023.1.1.3 and...CVE-2023-22577.8 High
- devolutions serverInsufficient access control in support ticket feature in Devolutions Server 2023.1.5.0 and below...CVE-2023-21185.4 Medium
- devolutions remote desktop managerNo access control for the OTP key on OTP entriesCVE-2023-19394.3 Medium
- devolutions remote desktop managerTwo factor
authentication
bypass on login in Devolutions Remote Desktop Manager 2022.3.35 and...CVE-2023-19806.5 Medium
- devolutions serverPermission bypass when importing or synchronizing entries in User vault in Devolutions Server...CVE-2023-16036.5 Medium
- devolutions remote desktop managerPermission bypass when importing or synchronizing entries in User vault in Devolutions Remote...CVE-2023-12026.5 Medium
- devolutions gatewayUncontrolled resource consumption in the logging feature in Devolutions Gateway 2023.1.1 and...CVE-2023-15807.5 High
- devolutions remote desktop managerInformation disclosure in the user creation feature of a MSSQL data source in Devolutions Remote...CVE-2023-15746.5 Medium
- devolutions serverImproper access control in the secure messages feature in Devolutions Server 2022.3.12 and below...CVE-2023-12016.5 Medium
- devolutions remote desktop manager powershell module, remote desktop manager +1 moreImproper removal of sensitive data in the entry edit feature of Hub Business submodule in...CVE-2023-12036.5 Medium
- devolutions serverImproper access controls on entries in Devolutions Server 2022.3.12 and earlier could allow an...CVE-2023-09526.5 Medium
- devolutions serverImproper access controls on some API endpoints in Devolutions Server 2022.3.12 and earlier could...CVE-2023-09518.8 High
- devolutions serverInsufficient input sanitization in the documentation feature of Devolutions Server 2022.3.12 and...CVE-2023-09538.8 High
- devolutions serverImproper access control in Devolutions Server allows an authenticated user to access unauthorized...CVE-2023-06616.5 Medium
- devolutions remote desktop managerThe force offline MFA prompt setting is not respected when switching to offline mode in...CVE-2023-04633.3 Low
- devolutions serverGotify server XSS vulnerability in the application image file uploadCVE-2022-46181Fix available6.1 Medium
- devolutions remote desktop managerWeak password derivation for export in Devolutions Remote Desktop Manager before 2022.1 allows...CVE-2022-269647.4 High
- devolutions remote desktop managerAuthentication bypass in local application lock feature in Devolutions Remote Desktop Manager...CVE-2022-42878.8 High
- devolutions remote desktop managerElevation of privilege in the Azure SQL Data Source in Devolutions Remote Desktop Manager 2022.3...CVE-2022-36418.8 High
- devolutions server, go-vela ui, worker +2 moreVela Insecure DefaultsCVE-2022-39395Fix available9.6 Critical
- devolutions server, remote desktop manager +1 moreDashlane password and Keepass Server password in My Account Settings are not encrypted in the...CVE-2022-37816.5 Medium
- devolutions remote desktop managerDatabase connections on deleted users could stay active on MySQL data sources in Remote Desktop...CVE-2022-37807.5 High
- devolutions server, x.org x server +1 moreX.org Server xquartz X11Controller.m denial of serviceCVE-2022-3553Fix available3.5 Low
- devolutions server, debian linux, fedoraproject fedora +1 more +3 moreX.org Server xkb.c ProcXkbGetKbdByName memory leakCVE-2022-3551Fix available3.5 Low
- devolutions server, debian linux, fedoraproject fedora +1 more +3 moreX.org Server xkb.c _GetCountedString buffer overflowCVE-2022-3550Fix available5.5 Medium
- devolutions remote desktop managerImproper Access Control vulnerability in the Duo SMS two-factor of Devolutions Remote Desktop...CVE-2022-31827.0 High
- devolutions server, filezilla-project filezilla server +1 moreFileZilla Server PORT confused deputyCVE-2015-100034.3 Medium
- devolutions serverIncorrect permission management in Devolutions Server before 2022.2 allows a new user with a...CVE-2022-339968.8 High
- devolutions serverHTML injection vulnerability in secure messages of Devolutions Server before 2022.2 allows...CVE-2022-23165.4 Medium
- devolutions serverTrueConf Server cross-site request forgeryCVE-2017-201204.3 Medium
- devolutions serverTrueConf Server change-lang redirectCVE-2017-201193.5 Low
- devolutions serverTrueConf Server DOM cross site scriptingCVE-2017-201183.5 Low
- devolutions serverTrueConf Server group DOM cross site scriptingCVE-2017-201173.5 Low
- devolutions serverTrueConf Server Reflected cross site scriptingCVE-2017-201163.5 Low
- devolutions serverTrueConf Server Reflected cross site scriptingCVE-2017-201153.5 Low
- devolutions serverTrueConf Server Reflected cross site scriptingCVE-2017-201143.5 Low
- devolutions serverTrueConf Server Stored cross site scriptingCVE-2017-201133.5 Low
- devolutions remote desktop managerInformation Exposure vulnerability in My Account Settings of Devolutions Remote Desktop Manager...CVE-2022-22216.5 Medium
- devolutions remote desktop managerA path traversal issue in entry attachments in Devolutions Remote Desktop Manager before 2022.2...CVE-2022-339957.5 High
- devolutions remote desktop managerA lack of password masking in Devolutions Remote Desktop Manager allows physically proximate...CVE-2022-13424.6 Medium
- devolutions password hubThe biometric lock in Devolutions Password Hub for iOS before 2021.3.4 allows attackers to access...CVE-2022-238496.6 Medium
- devolutions remote desktop managerAn incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16...CVE-2021-420988.8 High
- devolutions serverDevolutions Server before 2021.1.18, and LTS before 2020.3.20, allows attackers to intercept...CVE-2021-363822.6 Low
- Show moreLoading…