CVE-2023-39210

Cleartext storage of sensitive information in Zoom Client SDK for Windows before 5.15.0 may allow an authenticated user to enable an information disclosure via local access...

CVE-2023-39214

Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial of service via network access...

CVE-2023-39214

Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial of service via network access...

Information disclosure

Cleartext storage of sensitive information in Zoom Client SDK for Windows before 5.15.0 may allow an authenticated user to enable an information disclosure via local access...

Design/Logic Flaw

Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial of service via network access...

CVE-2023-39214

The CVE-2023-39214 entry concerns Zoom Client SDK before version 5.15.5, where an authenticated user may exploit a network-access vulnerability to cause a denial of service and potential exposure of sensitive information. Publicly documented details from OpenVAS listings corroborate the affected ...

CVE-2023-39214

Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial of service via network access...

CVE-2023-39210

Cleartext storage of sensitive information in Zoom Client SDK for Windows before 5.15.0 may allow an authenticated user to enable an information disclosure via local access...

PT-2023-5591 · Zoom · Zoom Client Sdk

Name of the Vulnerable Software and Affected Versions: Zoom Client SDK versions prior to 5.15.5 Description: The issue is related to insufficient protection of service data, which may allow a remote attacker to gain unauthorized access to protected information. It involves exposure of sensitive...

CVE-2023-34117

Relative path traversal in the Zoom Client SDK before version 5.15.0 may allow an unauthorized user to enable information disclosure via local access...

CVE-2023-34117

Summary: CVE-2023-34117 describes a relative path traversal in the Zoom Client SDK prior to 5.15.0, enabling an unauthorized local user to disclose information via local access. Affected software: Zoom Client SDK (pre-5.15.0). Root cause: relative path traversal in the SDK. Impact: information di...

CVE-2023-34117

Relative path traversal in the Zoom Client SDK before version 5.15.0 may allow an unauthorized user to enable information disclosure via local access...

CVE-2023-34117

Relative path traversal in the Zoom Client SDK before version 5.15.0 may allow an unauthorized user to enable information disclosure via local access...

PT-2023-24687 · Zoom · Zoom Client Sdk

Name of the Vulnerable Software and Affected Versions: Zoom Client SDK versions prior to 5.15.0 Description: The issue concerns a relative path traversal that may allow an unauthorized user to enable information disclosure via local access. Recommendations: For versions prior to 5.15.0, update to...

Improper Authorization

github.com/codenotary/immudb is vulnerable to improper authorization. A malicious attacker is able to provide falsified proof that will be accepted by the client SDK, signing a falsified transaction replacing the genuine one. This vulnerability only affects immudb client SDKs, the immudb server...

immudb data forgery problem vulnerability

Immudb is a database with built-in cryptographic proof and authentication. A data forgery issue vulnerability exists in codenotary immudb versions prior to 1.4.1, which stems from a client SDK that does not validate the UUID and can accept any value reported by the server, which can be exploited ...

CVE-2022-36111 immundb has insufficient verification of data authenticity

immudb is a database with built-in cryptographic proof and verification. In versions prior to 1.4.1, a malicious immudb server can provide a falsified proof that will be accepted by the client SDK signing a falsified transaction replacing the genuine one. This situation can not be triggered by a...

Insufficient Verification of Proofs generated by the immudb server in client SDK.

Impact In certain scenario a malicious immudb server can provide a falsified proof that will be accepted by the client SDK signing a falsified transaction replacing the genuine one. This situation can not be triggered by a genuine immudb server and requires the client to perform a specific list o...

GHSA-672P-M5JQ-MRH8 Insufficient Verification of Proofs generated by the immudb server in client SDK.

Impact In certain scenario a malicious immudb server can provide a falsified proof that will be accepted by the client SDK signing a falsified transaction replacing the genuine one. This situation can not be triggered by a genuine immudb server and requires the client to perform a specific list o...

Malicious Package

Overview bi-client-sdk is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...