462 matches found
CVE-2020-3588 Cisco Webex Meetings Desktop App Arbitrary Code Execution Vulnerability
A vulnerability in virtualization channel messaging in Cisco Webex Meetings Desktop App for Windows could allow a local attacker to execute arbitrary code on a targeted system. This vulnerability occurs when this app is deployed in a virtual desktop environment and using virtual environment...
CVE-2020-3588
CVE-2020-3588 affects Cisco Webex Meetings Desktop App for Windows in virtual desktop environments. The root cause is improper validation of messages processed by the virtualization channel interface, allowing a local attacker with limited privileges to execute arbitrary code with the user’s priv...
Cisco Webex Meetings Desktop App Arbitrary Code Execution Vulnerability
A vulnerability in virtualization channel messaging in Cisco Webex Meetings Desktop App for Windows could allow a local attacker to execute arbitrary code on a targeted system. This vulnerability occurs when this app is deployed in a virtual desktop environment and using virtual environment...
KLA11974 ACE vulnerabilities in Microsoft Apps
ACE vulnerabilities were found in Microsoft Apps. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2020-17003 CVE-2020-16918 Related products Yammer-Desktop-App CVE list CVE-2020-17003 critical CVE-2020-16918 critical KB list Solution Install...
Cisco Webex Multiple Product Information Disclosure Vulnerability
Cisco Webex Teams and others are products of Cisco, Inc.Cisco Webex Teams is a team collaboration application.Cisco Webex Meetings Desktop App is a video conferencing control application used in a desktop environment.Cisco Webex Meetings is a video conferencing solution. An information disclosure...
CVE-2020-3440
CVE-2020-3440 affects Cisco Webex Meetings Desktop App for Windows. The root cause is improper validation of URL parameters sent from a website, enabling an unauthenticated, remote attacker to overwrite arbitrary files on an end-user system. Exploitation involves convincing a user to click a craf...
CVE-2020-3440 Cisco Webex Meetings Desktop App for Windows Arbitrary File Overwrite Vulnerability
A vulnerability in Cisco Webex Meetings Desktop App for Windows could allow an unauthenticated, remote attacker to overwrite arbitrary files on an end-user system. The vulnerability is due to improper validation of URL parameters that are sent from a website to the affected application. An attack...
CVE-2020-3502
Multiple vulnerabilities in the user interface of Cisco Webex Meetings Desktop App could allow an authenticated, remote attacker to obtain restricted information from other Webex users. These vulnerabilities are due to improper input validation of parameters returned to the application from a web...
Input validation
Multiple vulnerabilities in the user interface of Cisco Webex Meetings Desktop App could allow an authenticated, remote attacker to obtain restricted information from other Webex users. These vulnerabilities are due to improper input validation of parameters returned to the application from a web...
CVE-2020-3501
Cisco Webex Meetings Desktop App has CVE-2020-3501 describing information disclosure due to improper input validation of parameters returned from a website. An authenticated, remote attacker could lure a user to a crafted URL to access restricted information from other Webex users. Multiple sourc...
CVE-2020-3502
Cisco Webex Meetings Desktop App contains information disclosure vulnerabilities in its user interface due to improper input validation of parameters returned from a website. An authenticated remote attacker could lure a user via a crafted URL to extract restricted information from other Webex us...
CVE-2020-3502 Cisco Webex Meetings Desktop App Information Disclosure Vulnerabilities
Multiple vulnerabilities in the user interface of Cisco Webex Meetings Desktop App could allow an authenticated, remote attacker to obtain restricted information from other Webex users. These vulnerabilities are due to improper input validation of parameters returned to the application from a web...
TeamViewer Flaw in Windows App Allows Password-Cracking
Popular remote-support software TeamViewer has patched a high-severity flaw in its desktop app for Windows. If exploited, the flaw could allow remote, unauthenticated attackers to execute code on users’ systems or crack their TeamViewer passwords. TeamViewer is a proprietary software application...
Cisco Webex Meetings Desktop App Information Disclosure Vulnerabilities
Multiple vulnerabilities in the user interface of Cisco Webex Meetings Desktop App could allow an authenticated, remote attacker to obtain restricted information from other Webex users. These vulnerabilities are due to improper input validation of parameters returned to the application from a web...
Command Execution Vulnerability in Ramme
Ramme is an unofficial Instagram desktop application. Ramme suffers from a command execution vulnerability that can be exploited by attackers to execute malicious code due to the program's failure to package the main files, which can result in local arbitrary file execution...
The vulnerability of the Cisco Webex Meetings Desktop App’s software lies in the lack of protection for sensitive data, allowing attackers to disclose confidential information.
The vulnerability of the Cisco Webex Meetings Desktop App software relates to the lack of protection for sensitive data. Exploiting this vulnerability could allow an attacker to disclose confidential information...
The vulnerability of the software update service for Cisco Webex Meetings Desktop App allows a malicious individual to gain unauthorized access to protected information.
The vulnerability of the software update service for the Cisco Webex Meetings Desktop App is related to authentication deficiencies. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
Unspecified Vulnerability in Mattermost Desktop App (CNVD-2020-41482)
Mattermost Desktop App is a messaging desktop application from Mattermost USA. A security vulnerability exists in Mattermost Desktop App versions prior to 4.0.0 that stems from the program not properly handling the same-origin policy setPermissionRequestHandler. An attacker could exploit the...
Mattermost Desktop App Access Control Error Vulnerability
Mattermost Desktop App is a messaging desktop application from Mattermost USA. An Access Control Error vulnerability exists in Mattermost Desktop App versions prior to 4.4.0, which stems from the program's failure to properly handle the same-origin policy and can be exploited by an attacker to...
Mattermost Desktop App Input Validation Error Vulnerability
Mattermost Desktop App is a messaging desktop application from Mattermost USA. An input validation error vulnerability in Mattermost Desktop App versions prior to 4.4.0, which stems from the program's failure to properly handle server redirects, can be exploited by an attacker to open an arbitrar...