CVE-2020-3541: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the media engine component of Cisco Webex Meetings Client for Windows, Cisco Webex Meetings Desktop App for Windows, and Cisco Webex Teams for Windows could allow an authenticated, local attacker to gain access to sensitive information. The vulnerability is due to unsafe loggin...

PT-2020-3849

Name of the Vulnerable Software and Affected Versions: Cisco Webex Meetings Client for Windows versions affected versions not specified Cisco Webex Meetings Desktop App for Windows versions affected versions not specified Cisco Webex Teams for Windows versions affected versions not specified...

CVE-2020-3440 Cisco Webex Meetings Desktop App for Windows Arbitrary File Overwrite Vulnerability

A vulnerability in Cisco Webex Meetings Desktop App for Windows could allow an unauthenticated, remote attacker to overwrite arbitrary files on an end-user system. The vulnerability is due to improper validation of URL parameters that are sent from a website to the affected application. An attack...

CVE-2020-3440

CVE-2020-3440 affects Cisco Webex Meetings Desktop App for Windows. The root cause is improper validation of URL parameters sent from a website, enabling an unauthenticated, remote attacker to overwrite arbitrary files on an end-user system. Exploitation involves convincing a user to click a craf...

CVE-2020-3440: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in Cisco Webex Meetings Desktop App for Windows could allow an unauthenticated, remote attacker to overwrite arbitrary files on an end-user system. The vulnerability is due to improper validation of URL parameters that are sent from a website to the affected application. An attack...

PT-2020-3769

Name of the Vulnerable Software and Affected Versions: Cisco Webex Meetings Desktop App for Windows affected versions not specified Description: The issue is related to improper validation of URL parameters sent from a website to the application, allowing an unauthenticated, remote attacker to...

CVE-2020-3502

Multiple vulnerabilities in the user interface of Cisco Webex Meetings Desktop App could allow an authenticated, remote attacker to obtain restricted information from other Webex users. These vulnerabilities are due to improper input validation of parameters returned to the application from a web...

Input validation

Multiple vulnerabilities in the user interface of Cisco Webex Meetings Desktop App could allow an authenticated, remote attacker to obtain restricted information from other Webex users. These vulnerabilities are due to improper input validation of parameters returned to the application from a web...

CVE-2020-3501

Cisco Webex Meetings Desktop App has CVE-2020-3501 describing information disclosure due to improper input validation of parameters returned from a website. An authenticated, remote attacker could lure a user to a crafted URL to access restricted information from other Webex users. Multiple sourc...

CVE-2020-3502 Cisco Webex Meetings Desktop App Information Disclosure Vulnerabilities

Multiple vulnerabilities in the user interface of Cisco Webex Meetings Desktop App could allow an authenticated, remote attacker to obtain restricted information from other Webex users. These vulnerabilities are due to improper input validation of parameters returned to the application from a web...

CVE-2020-3502

Cisco Webex Meetings Desktop App contains information disclosure vulnerabilities in its user interface due to improper input validation of parameters returned from a website. An authenticated remote attacker could lure a user via a crafted URL to extract restricted information from other Webex us...

CVE-2020-3501: Improper Input Validation

Multiple vulnerabilities in the user interface of Cisco Webex Meetings Desktop App could allow an authenticated, remote attacker to obtain restricted information from other Webex users. These vulnerabilities are due to improper input validation of parameters returned to the application from a web...

CVE-2020-3502: Improper Input Validation

Multiple vulnerabilities in the user interface of Cisco Webex Meetings Desktop App could allow an authenticated, remote attacker to obtain restricted information from other Webex users. These vulnerabilities are due to improper input validation of parameters returned to the application from a web...

TeamViewer Flaw in Windows App Allows Password-Cracking

Popular remote-support software TeamViewer has patched a high-severity flaw in its desktop app for Windows. If exploited, the flaw could allow remote, unauthenticated attackers to execute code on users’ systems or crack their TeamViewer passwords. TeamViewer is a proprietary software application...

Cisco Webex Meetings Desktop App Information Disclosure Vulnerabilities

Multiple vulnerabilities in the user interface of Cisco Webex Meetings Desktop App could allow an authenticated, remote attacker to obtain restricted information from other Webex users. These vulnerabilities are due to improper input validation of parameters returned to the application from a web...

PT-2020-4222

Name of the Vulnerable Software and Affected Versions: Cisco Webex Meetings Desktop App affected versions not specified Cisco Webex Meetings Server affected versions not specified Description: The issue is related to improper input validation of parameters returned to the application from a...

PT-2020-4223

Name of the Vulnerable Software and Affected Versions: Cisco Webex Meetings Desktop App affected versions not specified Cisco Webex Meetings Server affected versions not specified Description: The issue is related to improper input validation of parameters returned to the application from a...

Command Execution Vulnerability in Ramme

Ramme is an unofficial Instagram desktop application. Ramme suffers from a command execution vulnerability that can be exploited by attackers to execute malicious code due to the program's failure to package the main files, which can result in local arbitrary file execution...

The vulnerability of the software update service for Cisco Webex Meetings Desktop App allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the software update service for the Cisco Webex Meetings Desktop App is related to authentication deficiencies. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the Cisco Webex Meetings Desktop App’s software lies in the lack of protection for sensitive data, allowing attackers to disclose confidential information.

The vulnerability of the Cisco Webex Meetings Desktop App software relates to the lack of protection for sensitive data. Exploiting this vulnerability could allow an attacker to disclose confidential information...