The vulnerability of the freerdp_image_copy function in the RDP client FreeRDP allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the freerdpimagecopy function in the RDP client FreeRDP is related to reading data beyond the memory boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

freerdp: missing offset validation leading to Out-of-Bounds Read in gdi_multi_opaque_rect

A flaw was found in FreeRDP. Looping through multiopaquerect-numRectangles without proper boundary checks can lead to a heap-buffer-overflow, which may result in a crash...

Zoom Desktop Client for Linux Cross-Site Scripting Vulnerability

Zoom Desktop Client for Linux is a client application designed for virtualized desktop environments such as Windows 365 Cloud PC. A cross-site scripting vulnerability exists in Zoom Desktop Client for Linux, which stems from the application's lack of effective filtering and escaping of...

CVE-2024-26362

HTML injection vulnerability in Enpass Password Manager Desktop Client 6.9.2 for Windows and Linux allows attackers to run arbitrary HTML code via creation of crafted note...

CVE-2024-26362

CVE-2024-26362 applies to Enpass Password Manager Desktop Client 6.9.2 for Windows and Linux. The connected sources confirm an HTML injection vulnerability triggered by creation of a crafted note, allowing an attacker to run arbitrary HTML code. The CVSS3.1 base metrics in the initial document in...

CVE-2024-27242

Cross site scripting in Zoom Desktop Client for Linux before version 5.17.10 may allow an authenticated user to conduct a denial of service via network access...

CVE-2024-24694

Improper privilege management in the installer for Zoom Desktop Client for Windows before version 5.17.10 may allow an authenticated user to conduct an escalation of privilege via local access...

CVE-2024-27247

CVE-2024-27247 describes an issue in the Zoom Desktop Client for macOS installer prior to version 5.17.10 where improper privilege management could allow a privileged local user to escalate privileges. Affected software: Zoom Desktop Client for macOS (pre-5.17.10). Root cause: installer privilege...

CVE-2024-24694 Zoom Desktop Client for Windows - Improper Privilege Management

Improper privilege management in the installer for Zoom Desktop Client for Windows before version 5.17.10 may allow an authenticated user to conduct an escalation of privilege via local access...

PT-2024-21773 · Zoom · Zoom Desktop Client For Macos

Name of the Vulnerable Software and Affected Versions: Zoom Desktop Client for macOS versions prior to 5.17.10 Description: The issue is related to improper privilege management in the installer, which may allow a privileged user to conduct an escalation of privilege via local access...

Zoom Client 安全漏洞

Zoom Desktop Client for Linux is a client application designed for virtualized desktop environments such as Windows 365 Cloud PC. A cross-site scripting vulnerability exists in Zoom Desktop Client for Linux, which stems from the application's lack of effective filtering and escaping of...

PT-2024-20494 · Zoom · Zoom Desktop Client For Windows

Name of the Vulnerable Software and Affected Versions: Zoom Desktop Client for Windows versions prior to 5.17.10 Description: The issue is related to improper privilege management in the installer, which may allow an authenticated user to conduct an escalation of privilege via local access...

CVE-2024-24278

An issue in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to obtain sensitive information via a crafted payload to the message function...

CVE-2024-24276

Cross Site Scripting XSS vulnerability in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to obtain sensitive information via a crafted payload to the chat name, message preview, username and group name components...

Cross site scripting

Cross Site Scripting vulnerability in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to obtain sensitive information via a crafted payload to the global search function...

CVE-2024-24275

Cross Site Scripting vulnerability in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to obtain sensitive information via a crafted payload to the global search function...

CVE-2024-24276

Cross Site Scripting XSS vulnerability in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to obtain sensitive information via a crafted payload to the chat name, message preview, username and group name components...

CVE-2024-24275

The CVE-2024-24275 issue affects Teamwire Windows desktop client versions 2.0.1–2.4.0. A Cross Site Scripting (XSS) vulnerability exists in the global search function that allows a remote attacker to obtain sensitive information via a crafted payload. The vulnerability is described across multipl...

CVE-2024-24278

An issue in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to obtain sensitive information via a crafted payload to the message function...

CVE-2024-24275

Cross Site Scripting vulnerability in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to obtain sensitive information via a crafted payload to the global search function...