Windows 10 VDI Resolution Changed to 1600 from 1920 after Waking up Dell Wyse from Sleep Mode

Windows 10 VDI resolution changed to 1600 from 1920 after waking up Dell Wyse 3040 from sleep mode...

xorg-x11-server: XvdiSelectVideoNotify use-after-free

A vulnerability was found in X.Org. This flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory after it has been freed. This flaw can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding...

DLL Hijacking Vulnerability in ZTE Corporation uSmartView VDI McClient

ZTE Corporation is a leading global provider of integrated communications and information technology solutions. A DLL hijacking vulnerability exists in ZTE Corporation's uSmartView VDI McClient, which can be exploited by attackers to execute malicious code...

Zoom VDI Meeting Client < 5.13.1 Vulnerability (ZSB-23001)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.13.3., or the version of Zoom VDI isntalled on the remote host is prior to 5.13.1. It is, therefore, affected by a the Information Disclosure vulnerability as referenced in the ZSB-23001 advisory. - Zoom for Window...

Information disclosure

Zoom for Windows clients before version 5.13.3, Zoom Rooms for Windows clients before version 5.13.5 and Zoom VDI for Windows clients before 5.13.1 contain an information disclosure vulnerability. A recent update to the Microsoft Edge WebView2 runtime used by the affected Zoom clients, transmitte...

Zoom Client 安全漏洞

Zoom Client is a video conferencing client application from Zoom Inc. that supports multiple platforms. A security vulnerability exists in Zoom Client versions prior to 5.13.3, Zoom Rooms for Windows clients versions prior to 5.13.5, and Zoom VDI for Windows clients versions prior to 5.13.1, whic...

K73657294: BIG-IP APM VDI plugin vulnerability CVE-2020-27722

Security Advisory Description Under certain conditions, the VDI plugin does not observe plugin flow-control protocol causing excessive resource consumption. CVE-2020-27722 Impact This affects only a BIG-IP APM virtual server configured with a Virtual Desktop Infrastructure VDI profile. Your BIG-I...

K81903701: Libpng vulnerability CVE-2015-8472

Security Advisory Description Buffer overflow in the pngsetPLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x before 1.4.18, 1.5.x before 1.5.25, and 1.6.x before 1.6.20 allows remote attackers to cause a denial of service application crash or possibly have...

What’s New in InsightVM and Nexpose: Q2 2022 in Review

The Vulnerability Management team kicked off Q2 by remediating the instances of Spring4Shell CVE-2022-22965 and Spring Cloud CVE-2022-22963 vulnerabilities that impacted cybersecurity teams worldwide. We also made several investments to both InsightVM and Nexpose throughout the second quarter tha...

CVE-2022-22782

The Zoom Client for Meetings for Windows prior to version 5.9.7, Zoom Rooms for Conference Room for Windows prior to version 5.10.0, Zoom Plugins for Microsoft Outlook for Windows prior to version 5.10.3, and Zoom VDI Windows Meeting Clients prior to version 5.9.6; was susceptible to a local...

CVE-2022-22782: Undefined Security Weakness

The Zoom Client for Meetings for Windows prior to version 5.9.7, Zoom Rooms for Conference Room for Windows prior to version 5.10.0, Zoom Plugins for Microsoft Outlook for Windows prior to version 5.10.3, and Zoom VDI Windows Meeting Clients prior to version 5.9.6; was susceptible to a local...

AL 21.12: Office 365 users are prompted to login, use MFA, during every login

When a user logs off the VDI desktop then logs back in, opening any Office 365 app prompts for two-factor authentication login. This was not happening before the upgrade...

Sangfor VDI Client has an unspecified vulnerability

Sangfor VDI Client is a tool used by Sangfor to quickly build virtual desktops.A security vulnerability exists in Sangfor VDI Client, which can be exploited by attackers to discover the contents of username and password fields when reading process memory...

CVE-2022-22908

SangforCSClient.exe in Sangfor VDI Client 5.4.2.1006 allows attackers, when they are able to read process memory, to discover the contents of the Username and Password fields...

CVE-2022-22908

SangforCSClient.exe in Sangfor VDI Client 5.4.2.1006 allows attackers, when they are able to read process memory, to discover the contents of the Username and Password fields...

Default credentials

SangforCSClient.exe in Sangfor VDI Client 5.4.2.1006 allows attackers, when they are able to read process memory, to discover the contents of the Username and Password fields...

CVE-2022-22908

Summary: CVE-2022-22908 affects Sangfor VDI Client (SangforCSClient.exe) 5.4.2.1006. The issue arises when an attacker can read the process memory, enabling disclosure of the contents of the Username and Password fields (credential leakage). The connected documents corroborate the affected produc...

CVE-2022-22908

SangforCSClient.exe in Sangfor VDI Client 5.4.2.1006 allows attackers, when they are able to read process memory, to discover the contents of the Username and Password fields...

Sangfor VDI Client 安全漏洞

Sangfor VDI Client is a tool used by Sangfor to quickly build virtual desktops.A security vulnerability exists in Sangfor VDI Client, which can be exploited by attackers to discover the contents of username and password fields when reading process memory...

CVE-2022-22908: Insufficiently Protected Credentials

SangforCSClient.exe in Sangfor VDI Client 5.4.2.1006 allows attackers, when they are able to read process memory, to discover the contents of the Username and Password fields...