Lucene search
+L

2456 matches found

CNNVD
CNNVD
added 2022/07/17 12:00 a.m.12 views

Pexip Infinity 安全漏洞

Pexip Infinity Pexip Video Conferencing Cloud Collaboration Platform is a video conferencing cloud collaboration platform from Pexip, a Norwegian company. Pexip Infinity is vulnerable to an access control error that could be exploited by a remote, unauthenticated attacker to join a locked but...

5.3CVSS5.5AI score0.0064EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
added 2022/07/12 7:09 a.m.15 views

medien-meeting-mannheim.de Cross Site Scripting vulnerability OBB-2762166

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/07/06 12:00 a.m.15 views

The vulnerability of Owl Labs Meeting Owl Pro’s microprogrammed software, related to authentication procedures that lack sufficient safeguards, allows attackers to circumvent existing security restrictions.

The vulnerability of Owl Labs Meeting Owl Pro’s camera software-related microprogramming system is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

7.4CVSS7.2AI score0.00885EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/29 12:00 a.m.14 views

The vulnerability of the Bluetooth Low Energy (BLE) implementation of the camera software for video conferencing, Meeting Owl Pro, allows a intruder to select passwords.

The vulnerability of the Bluetooth Low Energy BLE implementation of the Meeting Owl Pro camera’s microsoftware solution is related to a deficiency in processing the value "c": 10 when using the cryptographic algorithm SHA-1. Exploiting this vulnerability could allow an attacker to select password...

7.4CVSS7.3AI score0.00844EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/29 12:00 a.m.12 views

The vulnerability of Owl Labs Meeting Owl Pro’s microprogramming software, related to the use of pre-installed credentials, allows a hacker to activate the “tethering Mode” and increase their privileges.

The vulnerability of Owl Labs Meeting Owl Pro’s camera software-related microprogramming system lies in the use of pre-installed credentials. Exploiting this vulnerability allows a remote attacker to activate the “tethering Mode” mode and increase their privileges...

7.4CVSS7.6AI score0.03408EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2022/06/20 8:24 p.m.13 views

MAL-2022-6443 Malicious code in teams-outlook-meeting-addin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 254db63733e190096e316f42d7c5d39135d329b4d4c96d2440af2fc1ac4cfeaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2022/06/15 9:15 p.m.9 views

CVE-2022-28749

Zooms On-Premise Meeting Connector MMR before version 4.8.113.20220526 fails to properly check the permissions of a Zoom meeting attendee. As a result, a threat actor in the Zooms waiting room can join the meeting without the consent of the host...

4.3CVSS5.8AI score0.00576EPSS
SaveExploits0References1
NVD
NVD
added 2022/06/15 9:15 p.m.23 views

CVE-2022-28749

Zooms On-Premise Meeting Connector MMR before version 4.8.113.20220526 fails to properly check the permissions of a Zoom meeting attendee. As a result, a threat actor in the Zooms waiting room can join the meeting without the consent of the host...

6.5CVSS0.00576EPSS
SaveExploits0References1
Prion
Prion
added 2022/06/15 9:15 p.m.30 views

Design/Logic Flaw

Zooms On-Premise Meeting Connector MMR before version 4.8.113.20220526 fails to properly check the permissions of a Zoom meeting attendee. As a result, a threat actor in the Zooms waiting room can join the meeting without the consent of the host...

4CVSS4.7AI score0.00576EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/06/15 8:12 p.m.76 views

CVE-2022-28749

Affected software: Zoom On-Premise Meeting Connector MMR (versions prior to 4.8.113.20220526). Issue: improper permission checking for attendees in the waiting room, enabling a threat actor to join a meeting without the host’s consent. Impact: unauthorized entry into meetings (no host permission)...

6.5CVSS4.8AI score0.00576EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/06/15 8:12 p.m.41 views

CVE-2022-28749 Insufficient Authorization Check During Meeting Join

Zooms On-Premise Meeting Connector MMR before version 4.8.113.20220526 fails to properly check the permissions of a Zoom meeting attendee. As a result, a threat actor in the Zooms waiting room can join the meeting without the consent of the host...

6.5CVSS6.6AI score0.00576EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/06/15 12:00 a.m.12 views

Zooms On-Premise Meeting Connector MMR 安全漏洞

Zooms On-Premise Meeting Connector MMR is a video conferencing connection controller from Zoom USA. A security vulnerability exists in versions of Zooms On-Premise Meeting Connector MMR prior to 4.8.113.20220526, which stems from an inability to properly check the permissions of Zoom meeting...

6.5CVSS5.3AI score0.00576EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/06/15 12:00 a.m.15 views

PT-2022-19207 · Zoom · Zoom On-Premise Meeting Connector Mmr

Name of the Vulnerable Software and Affected Versions: Zoom On-Premise Meeting Connector MMR version 4.8.113.20220526 and earlier Description: The issue arises from improper permission checking of Zoom meeting attendees. This allows a threat actor in the waiting room to join a meeting without the...

6.5CVSS4.5AI score0.00576EPSS
SaveExploits0References2
Malwarebytes
Malwarebytes
added 2022/06/09 12:41 p.m.157 views

Update now! Patch against vulnerabilities in Meeting Owl Pro and Whiteboard Owl devices

After a decent amount of pressure, Owl Labs has finally released updates for vulnerabilities in Meeting Owl, and Whiteboard Owl cameras. The vulnerabilities were reported to Owl Labs in January, One of the vulnerabilities, CVE-2022-31460 has been added to the Known exploited vulnerabilities catal...

5.4CVSS0.3AI score0.03408EPSS
SaveExploits5
CNVD
CNVD
added 2022/06/08 12:00 a.m.67 views

Owl Labs Meeting Owl Trust Management Issue Vulnerability (CNVD-2022-64973)

Owl Labs Meeting Owl is a video conferencing device from Owl Labs, Inc. Featuring an array of cameras and microphones that capture 360-degree video and audio and automatically focus on the speaker to make meetings more dynamic and inclusive, Owl Labs Meeting Owl version 5.2.0.15 is vulnerable to ...

9.3CVSS3.1AI score0.0088EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/06/08 12:00 a.m.65 views

Owl Labs Meeting Owl Licensing Issue Vulnerability

Owl Labs Meeting Owl is a video conferencing device from Owl Labs, Inc. Equipped with an array of cameras and microphones, it captures 360-degree video and audio and automatically focuses on the speaker, making meetings more dynamic and inclusive.Owl Labs Meeting Owl version 5.2.0.15 is vulnerabl...

8.2CVSS2.7AI score0.0104EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/06/08 12:00 a.m.75 views

Owl Labs Meeting Owl Trust Management Issue Vulnerability

Owl Labs Meeting Owl is a video conferencing device from Owl Labs, Inc. Owl Labs Meeting Owl version 5.2.0.15 is vulnerable to a trust management issue, which could be exploited by an attacker to activate network sharing mode using hard-coded hoothoot credentials via a certain c 150 value...

7.4CVSS4.2AI score0.03408EPSS
SaveExploits1References1
CISA
CISA
added 2022/06/07 12:00 a.m.106 views

Owl Labs Releases Security Updates for Meeting Owl Pro and Whiteboard Owl

Owl Labs has released security updates to address a vulnerability CVE-2022-31460 in Meeting Owl Pro and Whiteboard Owl. An attacker could exploit this vulnerability to obtain sensitive information. CISA encourages users and administrators to review the Owl Labs security advisories for Meeting Owl...

3.3CVSS1.7AI score0.03408EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/06/02 10:15 p.m.41 views

CVE-2022-31462

Owl Labs Meeting Owl 5.2.0.15 allows attackers to control the device via a backdoor password derived from the serial number that can be found in Bluetooth broadcast data...

9.3CVSS7.5AI score0.0088EPSS
SaveIn wildExploits1References4
OSV
OSV
added 2022/06/02 10:15 p.m.13 views

CVE-2022-31463

Owl Labs Meeting Owl 5.2.0.15 does not require a password for Bluetooth commands, because only client-side authentication is used...

7.1CVSS7.4AI score0.0104EPSS
SaveExploits1References3
Rows per page
Query Builder