25778 matches found
CVE-2025-49461
Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access...
CVE-2025-49460
Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access...
CVE-2025-49458
Buffer overflow in certain Zoom Workplace Clients may allow an authenticated user to conduct a denial of service via network access...
CVE-2025-58135 Zoom Workplace Clients for Windows - Improper Action Enforcement
Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via network access...
CVE-2025-58134 Zoom Workplace Clients for Windows - Incorrect Authorization
Incorrect authorization in certain Zoom Workplace Clients for Windows may allow an authenticated user to conduct an impact to integrity via network access...
CVE-2025-58134 Zoom Workplace Clients for Windows - Incorrect Authorization
Incorrect authorization in certain Zoom Workplace Clients for Windows may allow an authenticated user to conduct an impact to integrity via network access...
CVE-2025-58134
CVE-2025-58134 concerns Zoom Workplace Windows clients. Multiple sources confirm an Incorrect authorization issue that may allow an authenticated user to impact integrity over the network. Affected products include Zoom Workplace Clients for Windows (and related VDI/WIN components in Nessus refer...
CVE-2025-49461 Zoom Workplace Clients - Cross-site Scripting
Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access...
CVE-2025-49461 Zoom Workplace Clients - Cross-site Scripting
Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access...
CVE-2025-49461
CVE-2025-49461 concerns Zoom Workplace Clients affected by a cross-site scripting vulnerability that may allow an unauthenticated attacker to cause a denial of service over the network. The issue is described in the ZSB-25034 advisory and is associated with Zoom Workplace versions prior to 6.3.14...
CVE-2025-49460
The CVE-2025-49460 issue affects Zoom Workplace family components (notably Zoom Workplace/VDI Client) with versions older than fixed releases. The publicly documented impact is Uncontrolled resource consumption that allows an unauthenticated remote attacker to cause a denial of service over the n...
CVE-2025-49460 Zoom Workplace Clients - Argument Injection
Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access...
CVE-2025-49460 Zoom Workplace Clients - Argument Injection
Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access...
CVE-2025-49458 Zoom Workplace Clients - Buffer Overflow
Buffer overflow in certain Zoom Workplace Clients may allow an authenticated user to conduct a denial of service via network access...
CVE-2025-49458 Zoom Workplace Clients - Buffer Overflow
Buffer overflow in certain Zoom Workplace Clients may allow an authenticated user to conduct a denial of service via network access...
CVE-2025-49458
CVE-2025-49458 describes a buffer overflow in Zoom Workplace Clients that could allow an authenticated user to cause a denial of service over the network. Public documentation and scanner advisories (e.g., ZSB-25031) indicate the issue affects Zoom Workplace Clients generally and is mitigated by ...
CVE-2025-9269 Server-Side Request Forgery (SSRF) vulnerability found in embedded web server
A Server-Side Request Forgery SSRF vulnerability has been identified in the embedded web server in various Lexmark devices. This vulnerability can be leveraged by an attacker to force the device to send an arbitrary HTTP request to a third-party server. Successful exploitation of this vulnerabili...
CVE-2025-9269
Lexmark devices with the embedded web server are affected by CVE-2025-9269 (SSRF). The vulnerability allows an attacker to coerce the device into issuing arbitrary HTTP requests to a third-party server, potentially enabling internal network access or data disclosure. CVSSv4 base score 6.9 (networ...