Nomachine

nomachine

25 CVEs • 8 products

Products (8)

Click to collapse

Toggle

Enterprise Desktop

enterprise_desktop

Enterprise Client

enterprise_client

Nx Web Companion

nx_web_companion

CVEs (25)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-6947 2Microsoft Nomachine 4Nomachine Windows 10Windows 7+1 more Nov 21, 2024 Feb 28, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS library shipped with NoMachine 6.0.66_2 and earlier allows a local low privileged user to gain elevation of privileges on Wi...Show more An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS library shipped with NoMachine 6.0.66_2 and earlier allows a local low privileged user to gain elevation of privileges on Windows 7 (32 and 64bit), and denial of service for Windows 8 and 10.Show less
CVE-2017-12763 1Nomachine 1Nomachine May 13, 2026 Aug 29, 2017 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 An unspecified server utility in NoMachine before 5.3.10 on Mac OS X and Linux allows authenticated users to gain privileges by gaining access to local files.
CVE-2012-5003 1Nomachine 1Nx Web Companion Apr 29, 2026 Sep 19, 2012 N/A· v4 N/A· v3 6.8 MEDIUM· v2 nxapplet.jar in No Machine NX Web Companion 3.x and earlier does not properly verify the authenticity of updates, which allows user-assisted remote attackers to execute arbitrary code via a crafted (1) SiteUrl or (2) Red...Show more nxapplet.jar in No Machine NX Web Companion 3.x and earlier does not properly verify the authenticity of updates, which allows user-assisted remote attackers to execute arbitrary code via a crafted (1) SiteUrl or (2) RedirectUrl parameter that points to a Trojan Horse client.zip update file.Show less
CVE-2011-3977 1Nomachine 2Nx Node Nx Server Apr 29, 2026 Oct 4, 2011 N/A· v4 N/A· v3 7.2 HIGH· v2 Unspecified vulnerability in nxconfigure.sh in NoMachine NX Node 3.x before 3.5.0-4 and NX Server 3.x before 3.5.0-5 allows local users to read arbitrary files via unknown vectors.
CVE-2007-0625 1Nomachine 1Nx Server Apr 23, 2026 Jan 31, 2007 N/A· v4 N/A· v3 4.9 MEDIUM· v2 nxconfigure.sh in NoMachine NX Server before 2.1.0-18 does not validate the invoking user, which allows local users to modify server configuration keys in /usr/NX/etc/server.cfg, resulting in an unspecified denial of ser...Show more nxconfigure.sh in NoMachine NX Server before 2.1.0-18 does not validate the invoking user, which allows local users to modify server configuration keys in /usr/NX/etc/server.cfg, resulting in an unspecified denial of service.Show less