← Back

Att

att

29 CVEs • 11 products

Products (11)

Click to collapse
Toggle

CVEs (29)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
5Att
HtcSamsung+2 more
9Chacha
DesireEvo Shift 4g+6 more
Apr 29, 2026
Aug 21, 2012
N/A· v4
N/A· v3
7.1 HIGH· v2
The Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC ChaCha, AT&T Status, HTC Desire Z, T-Mobile G2, T-Mobile myTouch 4G Slide, and Sams...Show more
The Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC ChaCha, AT&T Status, HTC Desire Z, T-Mobile G2, T-Mobile myTouch 4G Slide, and Samsung Galaxy S stores touch coordinates in the dmesg buffer, which allows remote attackers to obtain sensitive information via a crafted application, as demonstrated by PIN numbers, telephone numbers, and text messages.Show less
2Att
Tightvnc
2Tightvnc
Vnc
Apr 16, 2026
Mar 3, 2003
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The vncserver wrapper for vnc before 3.3.3r2-21 uses the rand() function instead of srand(), which causes vncserver to generate weak cookies.
3Att
TightvncTridia
3Tightvnc
TridiavncWinvnc Server
Apr 16, 2026
Sep 24, 2002
N/A· v4
N/A· v3
4.6 MEDIUM· v2
Vulnerability in VNC, TightVNC, and TridiaVNC allows local users to execute arbitrary code as LocalSystem by using the Win32 Messaging System to bypass the VNC GUI and access the "Add new clients" dialogue box.
1Att
1Winvnc
Apr 16, 2026
May 3, 2001
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in AT&T WinVNC (Virtual Network Computing) server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0.
1Att
1Winvnc
Apr 16, 2026
May 3, 2001
N/A· v4
N/A· v3
7.6 HIGH· v2
Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFailed packet with a long reason string.
1Att
1Winvnc
Apr 16, 2026
Jan 23, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
WinVNC 3.3.3 and earlier generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing the challenge and response of other users.
1Att
1Winvnc
Apr 16, 2026
Jan 9, 2001
N/A· v4
N/A· v3
9.0 HIGH· v2
WinVNC installs the WinVNC3 registry key with permissions that give Special Access (read and modify) to the Everybody group, which allows users to read and modify sensitive information such as passwords and gain access t...Show more
WinVNC installs the WinVNC3 registry key with permissions that give Special Access (read and modify) to the Everybody group, which allows users to read and modify sensitive information such as passwords and gain access to the system.Show less
1Att
1Svr4
Apr 16, 2026
Feb 25, 1992
N/A· v4
N/A· v3
10.0 HIGH· v2
Vulnerability in rexec daemon (rexecd) in AT&T TCP/IP 4.0 for various SVR4 systems allows remote attackers to execute arbitrary commands.
1Att
1Svr4
Apr 16, 2026
May 23, 1991
N/A· v4
N/A· v3
7.2 HIGH· v2
Vulnerability in login in AT&T System V Release 4 allows local users to gain privileges.