Lucene search
+L

2456 matches found

Positive Technologies
Positive Technologies
added 2022/10/14 12:00 a.m.16 views

PT-2022-19214 · Zoom · Zoom On-Premise Meeting Connector Mmr

Name of the Vulnerable Software and Affected Versions: Zoom On-Premise Meeting Connector MMR versions prior to 4.8.20220815.130 Description: The issue allows a malicious actor to obtain the audio and video feed of a meeting they were not authorized to join and cause other meeting disruptions due ...

6.5CVSS6.5AI score0.00545EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/10/14 12:00 a.m.14 views

Zoom On-Premise Meeting Connector 安全漏洞

Zoom On-Premise Meeting Connector is a meeting connector from Zoom USA. A security vulnerability exists in versions prior to Zoom On-Premise Meeting Connector MMR 4.8.20220916.131 that stems from incorrect access control...

6.5CVSS6.5AI score0.00721EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/09/29 12:00 a.m.12 views

BigBlueButton 注入漏洞

BigBlueButton is an open source web conferencing system from the BigBlueButton community. A security vulnerability exists in BigBlueButton versions prior to 2.2.7, which stems from an unprotected mechanism for delimiter injection in meetingId, userId, and authToken...

9.8CVSS8.3AI score0.01423EPSS
SaveExploits0References3
NVD
NVD
added 2022/09/16 10:15 p.m.27 views

CVE-2022-28758

Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability. As a result, a malicious actor could obtain the audio and video feed of a meeting they were not authorized to join and cause other meeting disruptions...

8.2CVSS0.0069EPSS
SaveExploits0References1
OSV
OSV
added 2022/09/16 10:15 p.m.7 views

CVE-2022-28758

Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability. As a result, a malicious actor could obtain the audio and video feed of a meeting they were not authorized to join and cause other meeting disruptions...

8.2CVSS5.8AI score0.0069EPSS
SaveExploits0References1
Prion
Prion
added 2022/09/16 10:15 p.m.22 views

Improper access control

Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability. As a result, a malicious actor could obtain the audio and video feed of a meeting they were not authorized to join and cause other meeting disruptions...

6.4CVSS8.1AI score0.0069EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/09/16 8:13 p.m.65 views

CVE-2022-28758

The CVE-2022-28758 entry concerns Zoom On-Premise Meeting Connector MMR prior to 4.8.20220815.130, with an improper access control flaw. The issue could allow a malicious actor to obtain the audio and video feeds of a meeting they are not authorized to join, potentially causing other meeting disr...

8.2CVSS8.2AI score0.0069EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/09/16 8:13 p.m.36 views

CVE-2022-28758 Zoom On-Premise Deployments: Improper Access Control

Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability. As a result, a malicious actor could obtain the audio and video feed of a meeting they were not authorized to join and cause other meeting disruptions...

8.2CVSS8.4AI score0.0069EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/09/16 12:00 a.m.13 views

Zoom On-Premise Meeting Connector 安全漏洞

Zoom On-Premise Meeting Connector is a meeting connector from Zoom USA. A security vulnerability exists in versions prior to Zoom On-Premise Meeting Connector MMR 4.8.20220815.130, which stems from the inclusion of incorrect access control, and can be exploited by an attacker to gain access to...

8.2CVSS7.7AI score0.0069EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/09/16 12:00 a.m.12 views

PT-2022-19211 · Zoom · Zoom On-Premise Meeting Connector Mmr

Name of the Vulnerable Software and Affected Versions: Zoom On-Premise Meeting Connector MMR versions prior to 4.8.20220815.130 Description: The issue allows a malicious actor to obtain the audio and video feed of a meeting they were not authorized to join, causing meeting disruptions due to...

8.2CVSS8.2AI score0.0069EPSS
SaveExploits0References3
Openbugbounty
Openbugbounty
added 2022/09/13 8:23 p.m.22 views

sicily.meeting-hotels-events.de Cross Site Scripting vulnerability OBB-2918675

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/09/13 12:00 a.m.6 views

CVE-2022-28758

Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability. As a result, a malicious actor could obtain the audio and video feed of a meeting they were not authorized to join and cause other meeting disruptions...

8.2CVSS7.2AI score0.0069EPSS
SaveExploits0References2
OSV
OSV
added 2022/08/30 5:15 a.m.6 views

CVE-2022-38118

OAKlouds Portal website’s Meeting Room has insufficient validation for user input. A remote attacker with general user privilege can perform SQL-injection to access, modify, delete database, perform system operations and disrupt service...

8.8CVSS5.8AI score0.01672EPSS
SaveExploits0References2
NVD
NVD
added 2022/08/30 5:15 a.m.29 views

CVE-2022-38118

OAKlouds Portal website’s Meeting Room has insufficient validation for user input. A remote attacker with general user privilege can perform SQL-injection to access, modify, delete database, perform system operations and disrupt service...

8.8CVSS0.01672EPSS
SaveExploits0References2
Prion
Prion
added 2022/08/30 5:15 a.m.22 views

Sql injection

OAKlouds Portal website’s Meeting Room has insufficient validation for user input. A remote attacker with general user privilege can perform SQL-injection to access, modify, delete database, perform system operations and disrupt service...

6.5CVSS8.7AI score0.01672EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2022/08/30 4:25 a.m.66 views

CVE-2022-38118

Affected software: OAKlouds Portal Meeting Room. The issue is a SQL injection caused by insufficient input validation. A remote attacker with general user privileges can access, modify, delete the database, perform system operations, and disrupt service. CVSS v3.1 base score 8.8 (AV:N/AC:L/PR:L/U...

8.8CVSS8.8AI score0.01672EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/08/30 4:25 a.m.37 views

CVE-2022-38118 HGiga OAKlouds - SQL Injection

OAKlouds Portal website’s Meeting Room has insufficient validation for user input. A remote attacker with general user privilege can perform SQL-injection to access, modify, delete database, perform system operations and disrupt service...

8.8CVSS8.9AI score0.01672EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/08/30 4:05 a.m.8 views

CVE-2022-38118

OAKlouds Portal website’s Meeting Room has insufficient validation for user input. A remote attacker with general user privilege can perform SQL-injection to access, modify, delete database, perform system operations and disrupt service...

8.8CVSS7.4AI score0.01672EPSS
SaveExploits0References3
OSV
OSV
added 2022/08/11 3:15 p.m.6 views

CVE-2022-28753

Zoom On-Premise Meeting Connector MMR before version 4.8.129.20220714 contains an improper access control vulnerability. As a result, a malicious actor can join a meeting which they are authorized to join without appearing to the other participants, can admit themselves into the meeting from the...

5.4CVSS6.1AI score
SaveExploits0References1
NVD
NVD
added 2022/08/11 3:15 p.m.24 views

CVE-2022-28754

Zoom On-Premise Meeting Connector MMR before version 4.8.129.20220714 contains an improper access control vulnerability. As a result, a malicious actor can join a meeting which they are authorized to join without appearing to the other participants, can admit themselves into the meeting from the...

7.1CVSS0.00534EPSS
SaveExploits0References1
Rows per page
Query Builder