Lucene search
+L

1377 matches found

Cvelist
Cvelist
added 2022/11/22 12:00 a.m.32 views

CVE-2022-41326

The web conferencing component of Mitel MiCollab through 9.6.0.13 could allow an unauthenticated attacker to upload arbitrary scripts due to improper authorization controls. A successful exploit could allow remote code execution within the context of the application...

10AI score0.01371EPSS
SaveExploits0References2
CVE
CVE
added 2022/11/22 12:00 a.m.79 views

CVE-2022-41326

CVE-2022-41326 concerns the Mitel MiCollab web conferencing component up to version 9.6.0.13. The issue arises from improper authorization controls that allow an unauthenticated user to upload arbitrary scripts, enabling remote code execution within the application context. The vulnerability affe...

9.8CVSS9.8AI score0.01371EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2022/10/25 7:15 p.m.22 views

CVE-2022-36452

A vulnerability in the web conferencing component of Mitel MiCollab through 9.5.0.101 could allow an unauthenticated attacker to upload malicious files. A successful exploit could allow an attacker to execute arbitrary code within the context of the application...

9.8CVSS0.00896EPSS
SaveExploits0References2
OSV
OSV
added 2022/10/25 7:15 p.m.12 views

CVE-2022-36452

A vulnerability in the web conferencing component of Mitel MiCollab through 9.5.0.101 could allow an unauthenticated attacker to upload malicious files. A successful exploit could allow an attacker to execute arbitrary code within the context of the application...

9.8CVSS6AI score0.00896EPSS
SaveExploits0References2
Prion
Prion
added 2022/10/25 7:15 p.m.27 views

Code injection

A vulnerability in the web conferencing component of Mitel MiCollab through 9.5.0.101 could allow an unauthenticated attacker to upload malicious files. A successful exploit could allow an attacker to execute arbitrary code within the context of the application...

7.5CVSS9.7AI score0.00896EPSS
SaveExploits0References2Affected Software1
HackRead
HackRead
added 2022/10/25 11:13 a.m.16 views

7 benefits of including a Q&A session as part of a webinar

By Owais Sultan No matter how diligently you prepare an online presentation, you can realistically expect it to leave viewers with… This is a post from HackRead.com Read the original post: 7 benefits of including a Q&A session as part of a webinar...

3AI score
SaveExploits0
CNNVD
CNNVD
added 2022/10/25 12:00 a.m.10 views

Mitel MiCollab 代码问题漏洞

Mitel MiCollab is a mobile application from Mitel Canada that provides voice, video, messaging, audio conferencing and team collaboration for employees. A security vulnerability exists in Mitel MiCollab version 9.5.0.101 and prior versions, which stems from an issue in the web conferencing...

9.8CVSS8.8AI score0.00896EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2022/10/25 12:00 a.m.27 views

CVE-2022-36452

A vulnerability in the web conferencing component of Mitel MiCollab through 9.5.0.101 could allow an unauthenticated attacker to upload malicious files. A successful exploit could allow an attacker to execute arbitrary code within the context of the application...

9.9AI score0.00896EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/10/25 12:00 a.m.11 views

PT-2022-23376 · Mitel · Mitel Micollab

Name of the Vulnerable Software and Affected Versions: Mitel MiCollab versions through 9.5.0.101 Description: A vulnerability in the web conferencing component could allow an unauthenticated attacker to upload malicious files, potentially leading to the execution of arbitrary code within the...

9.8CVSS9.8AI score0.00896EPSS
SaveExploits0References4
CVE
CVE
added 2022/10/25 12:00 a.m.87 views

CVE-2022-36452

Summary: CVE-2022-36452 affects Mitel MiCollab (web conferencing component) up to version 9.5.0.101. An unauthenticated attacker could upload a malicious file, with the potential to execute arbitrary code in the application’s context. This is supported by multiple sources (NVD entry and vendor ad...

9.8CVSS9.6AI score0.00896EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2022/10/11 12:00 a.m.26 views

Cisco Touch 10 Authentication Error Vulnerability

Cisco Touch 10 is a video conferencing system control unit from Cisco. It is designed for intuitive touch-based interaction with Webex Room Kit Series, Webex Rome Series, and Panorama Series systems, providing instant access to meetings, contacts, directories, and content. An authentication error...

6.8CVSS6.8AI score0.00425EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/10/11 12:00 a.m.45 views

Cisco Touch 10 Access Control Error Vulnerability

Cisco Touch 10 is a video conferencing system control unit from Cisco USA. Designed for intuitive touch-based interaction with the Webex Room Kit Series, Webex Rome Series, and Panorama Series systems, providing instant access to meetings, contacts, directories, and content, an access control err...

6.5CVSS3.6AI score0.00273EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/10/10 12:00 a.m.12 views

The vulnerability of Zoom, a video conferencing software, relates to insufficient validation of entered data, allowing attackers to execute arbitrary code.

The vulnerability of Zoom video conferencing software is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.1CVSS7.5AI score0.01238EPSS
SaveExploits0References3Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/10/06 12:00 a.m.34 views

Vulnerability of the `getUsersOfRoom` method in the server-based corporate messaging system that supports file sharing and video conferencing in Rocket. This chat feature allows attackers to expose sensitive information.

The vulnerability of the getUsersOfRoom method in the server-based corporate messaging system that supports file sharing and video conferences in Rocket. Chat involves insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive informatio...

4.3CVSS5.4AI score0.00707EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/10/06 12:00 a.m.11 views

Vulnerability of the actionLinkHandler method in the server-based corporate messaging system that supports file sharing and video conferences. Chat, which allows attackers to expose sensitive information.

The vulnerability of the actionLinkHandler method in the server-based corporate messaging system that supports file and video conferencing exchanges. Chat-related vulnerabilities involve insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to disclose...

4.3CVSS5.4AI score0.00745EPSS
SaveExploits1References5Affected Software1
ThreatPost
ThreatPost
added 2022/08/15 1:56 p.m.173 views

Black Hat and DEF CON Roundup

There was nothing typical this year at BSides LV, Black Hat USA and DEF CON – also known collectively as Hacker Summer Camp. The weeklong collection of cybersecurity conferences featured an eclectic mix of attendees to learn, network, hack and have fun. The week even included a rare Las Vegas fla...

7AI score
SaveExploits0References14
CNVD
CNVD
added 2022/07/19 12:00 a.m.60 views

Pexip Infinity Input Validation Error Vulnerability (CNVD-2022-54743)

Pexip Infinity Pexip Video Conferencing Cloud Collaboration Platform is a video conferencing cloud collaboration platform from the Norwegian company Pexip. Pexip Infinity is vulnerable to an input validation error that could be exploited by attackers to trigger a software abort, resulting in a...

7.5CVSS4AI score0.01124EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/07/19 12:00 a.m.60 views

Pexip Infinity Input Validation Error Vulnerability (CNVD-2022-54735)

Pexip Infinity Pexip Video Conferencing Cloud Collaboration Platform is a video conferencing cloud collaboration platform from Pexip, a Norwegian company. Pexip Infinity is vulnerable to an input validation error that could be exploited by a remote, unauthenticated attacker to cause a denial of...

7.5CVSS3.3AI score0.01092EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/07/19 12:00 a.m.69 views

Pexip Infinity Input Validation Error Vulnerability (CNVD-2022-54744)

Pexip Infinity Pexip Video Conferencing Cloud Collaboration Platform is a video conferencing cloud collaboration platform from the Norwegian company Pexip. Pexip Infinity is vulnerable to an input validation error that could be exploited by attackers to trigger a software abort, resulting in a...

7.5CVSS4AI score0.01124EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/07/19 12:00 a.m.70 views

Pexip Infinity Input Validation Error Vulnerability (CNVD-2022-54740)

Pexip Infinity Pexip Video Conferencing Cloud Collaboration Platform is a video conferencing cloud collaboration platform from Pexip, a Norwegian company. Pexip Infinity is vulnerable to an input validation error that could be exploited by attackers to cause a denial of service...

7.5CVSS4.4AI score0.01124EPSS
SaveExploits0References1
Rows per page
Query Builder