| CVE-2024-35164 |
The terminal emulator of Apache Guacamole 1.5.5 and older does not properly validate console codes received from servers…
|
6.8
Medium
|
Jul 2, 2025 |
| CVE-2023-43826 |
Apache Guacamole 1.5.3 and older do not consistently ensure that values received from a VNC server will not result in…
|
7.5
High
|
Dec 19, 2023 |
| CVE-2023-30576 |
Apache Guacamole 0.9.10 through 1.5.1 may continue to reference a freed RDP audio input buffer
|
6.8
Medium
|
Jun 7, 2023 |
| CVE-2023-30575 |
Apache Guacamole 1.5.1 and older may incorrectly calculate the lengths of instruction elements sent during the Guacamole…
|
6.5
Medium
|
Jun 7, 2023 |
| CVE-2021-43999 |
Apache Guacamole 1.2.0 and 1.3.0 do not properly validate responses received from a SAML identity provider
|
Not rated
|
Jan 11, 2022 |
| CVE-2021-41767 |
Apache Guacamole 1.3.0 and older may incorrectly include a private tunnel identifier in the non-private details of…
|
Not rated
|
Jan 11, 2022 |
| CVE-2018-1340 |
Prior to 1.0.0, Apache Guacamole used a cookie for client-side storage of the user's session token
|
Not rated
|
Feb 7, 2019 |
| CVE-2017-3158 |
A race condition in Guacamole's terminal emulator in versions 0.9.5 through 0.9.10-incubating could allow writes of…
|
Not rated
|
Jan 18, 2018 |