Zoom VDI Meeting Client < 5.16.0 Vulnerability (ZSB-23052)

The version of Zoom VDI Meeting Client installed on the remote host is prior to 5.16.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23052 advisory. - Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information...

CVE-2023-5543

When duplicating a BigBlueButton activity, the original meeting ID was also duplicated instead of using a new ID for the new activity. This could provide unintended access to the original meeting...

Code injection

When duplicating a BigBlueButton activity, the original meeting ID was also duplicated instead of using a new ID for the new activity. This could provide unintended access to the original meeting...

CVE-2023-5543

When duplicating a BigBlueButton activity, the original meeting ID was also duplicated instead of using a new ID for the new activity. This could provide unintended access to the original meeting...

UBUNTU-CVE-2023-5543

When duplicating a BigBlueButton activity, the original meeting ID was also duplicated instead of using a new ID for the new activity. This could provide unintended access to the original meeting...

CVE-2023-5543 Moodle: duplicating a bigbluebutton activity assigns the same meeting id

When duplicating a BigBlueButton activity, the original meeting ID was also duplicated instead of using a new ID for the new activity. This could provide unintended access to the original meeting...

CVE-2023-5543

CVE-2023-5543 relates to Moodle’s BigBlueButton activity duplication: when duplicating an activity, the original meeting ID is copied instead of generating a new ID, potentially granting access to the original meeting. The available connected records (OSV entries and cross-references) describe th...

PT-2023-32166 · Unknown · Bigbluebutton

Name of the Vulnerable Software and Affected Versions: BigBlueButton affected versions not specified Description: When duplicating a BigBlueButton activity, the original meeting ID was also duplicated instead of using a new ID for the new activity. This could provide unintended access to the...

November 7, 2023, update for Outlook 2016 (KB5002523)

None None...

November 7, 2023, update for Outlook 2013 (KB5002514)

November 7, 2023, update for Outlook 2013 KB5002514 This article describes update 5002514 for Microsoft Outlook 2013 that was released on November 7, 2023. Be aware that the update in the Microsoft Download Center applies to the Microsoft Installer .msi-based edition of Office 2013. It doesn't...

Zoom VDI Meeting Client < 5.15.2 Vulnerability (ZSB-23038)

The version of Zoom VDI Meeting Client installed on the remote host is prior to 5.15.2. It is, therefore, affected by a vulnerability as referenced in the ZSB-23038 advisory. - Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may all...

Zoom VDI Meeting Client < 5.14.12 Vulnerability (ZSB-23040)

The version of Zoom VDI Meeting Client installed on the remote host is prior to 5.14.12. It is, therefore, affected by a vulnerability as referenced in the ZSB-23040 advisory. - Improper authentication in Zoom clients may allow an authenticated user to conduct a denial of service via network...

Zoom VDI Meeting Client < 5.14.0 Vulnerability (ZSB-23013)

The version of Zoom VDI Meeting Client installed on the remote host is prior to 5.14.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23013 advisory. - Improper input validation in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting clients before 5.14.0 may allow ...

Zoom VDI Meeting Client < 5.15.4 Vulnerability (ZSB-23040)

The version of Zoom VDI Meeting Client installed on the remote host is prior to 5.15.4. It is, therefore, affected by a vulnerability as referenced in the ZSB-23040 advisory. - Improper authentication in Zoom clients may allow an authenticated user to conduct a denial of service via network acces...

Vulnerability fixed in Cisco Meeting Server

Cisco has fixed a vulnerability in Meeting Server. A unauthenticated malicious person could exploit the vulnerability to cause a denial-of-service. Cisco has released updates to fix the vulnerability in Meeting Server. For more information, see:...

CVE-2023-20255

A vulnerability in an API of the Web Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending...

CVE-2023-20255

A vulnerability in an API of the Web Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending...

Design/Logic Flaw

A vulnerability in an API of the Web Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending...

CVE-2023-20255

CVE-2023-20255 affects Cisco Meeting Server Web Bridge API. Unable to validate HTTP requests allows an unauthenticated, remote attacker to trigger DoS, causing partial availability and dropped video calls due to invalid packets reaching the Web Bridge. Exploitation details across sources show net...

CVE-2023-20255

A vulnerability in an API of the Web Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending...