Lucene search
+L

1105 matches found

Positive Technologies
Positive Technologies
•added 2025/04/08 12:00 a.m.•22 views

PT-2025-15475 · Zoom · Zoom Workplace Apps

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps for Windows affected versions not specified Description: A null pointer dereference issue may allow an authenticated user to conduct a denial of service via network access. Recommendations: At the moment, there is no...

6.8CVSS6.2AI score0.00406EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/08 12:00 a.m.•9 views

CVE-2025-30670: NULL Pointer Dereference

Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access...

6.5CVSS6.5AI score0.00424EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/08 12:00 a.m.•21 views

Zoom Workplace 安全漏洞

Zoom Workplace Apps for Windows is an official suite of collaboration tools from Zoom that includes core features such as team chat, whiteboards, notes, and more, and is required to be used through a Zoom Meetings account. A security vulnerability exists in Zoom Workplace Apps for Windows, which...

5.5CVSS6.7AI score0.00164EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/08 12:00 a.m.•9 views

CVE-2025-27443: Initialization of a Resource with an Insecure Default

Insecure default variable initialization in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a loss of integrity via local access...

5.5CVSS5.4AI score0.00164EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/08 12:00 a.m.•24 views

Zoom Workplace 代码问题漏洞

Zoom Workplace Apps for Windows is an official suite of collaboration tools from Zoom that includes core features such as team chat, whiteboards, notes, and more, and is required to be used through a Zoom Meetings account. A null pointer dereference vulnerability exists in Zoom Workplace Apps for...

6.5CVSS6.4AI score0.00406EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/08 12:00 a.m.•9 views

CVE-2025-27442: Improper Neutralization of Input During Web Page Generation

Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access...

5.2CVSS5.3AI score0.00243EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/08 12:00 a.m.•7 views

CVE-2025-30671: NULL Pointer Dereference

Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access...

6.5CVSS6.5AI score0.00406EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/03/28 12:00 a.m.•16 views

Zoom Workplace Denial of Service Vulnerability

Zoom Workplace is an AI-first collaboration platform from Zoom that integrates core features such as team communication, meetings, document collaboration, and a built-in AI Companion smart assistant to boost productivity. Zoom Workplace suffers from a denial-of-service vulnerability that stems fr...

7.5CVSS6.7AI score0.00248EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/03/26 12:00 a.m.•19 views

Zoom Workplace App for iOS Denial of Service Vulnerability

Zoom Workplace App for iOS is an AI-first collaboration platform from Zoom Communications designed for iOS devices. A denial of service vulnerability exists in Zoom Workplace App for iOS, which stems from a misordered behavioral sequence, and can be exploited by an attacker to cause a denial of...

7.1CVSS6.6AI score0.00487EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/23 7:25 p.m.•37 views

CVE-2025-25035

Improper Neutralization of Input During Web Page Generation Cross-site Scripting vulnerability in Jalios JPlatform 10 allows for Reflected XSS and Stored XSS.This issue affects JPlatform 10: before 10.0.8 SP8, before 10.0.7 SP7, before 10.0.6 SP6 and Jalios Workplace 6.2, Jalios Workplace 6.1,...

7.3CVSS5.8AI score0.00392EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/21 7:15 p.m.•25 views

CVE-2025-25035

Improper Neutralization of Input During Web Page Generation Cross-site Scripting vulnerability in Jalios JPlatform 10 allows for Reflected XSS and Stored XSS.This issue affects JPlatform 10: before 10.0.8 SP8, before 10.0.7 SP7, before 10.0.6 SP6 and Jalios Workplace 6.2, Jalios Workplace 6.1,...

7.3CVSS0.00392EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2025/03/21 7:02 p.m.•41 views

CVE-2025-25035 Jalios JPlatform 10 Multiple Cross-Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation Cross-site Scripting vulnerability in Jalios JPlatform 10 allows for Reflected XSS and Stored XSS.This issue affects JPlatform 10: before 10.0.8 SP8, before 10.0.7 SP7, before 10.0.6 SP6 and Jalios Workplace 6.2, Jalios Workplace 6.1,...

7.3CVSS0.00392EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/03/21 12:00 a.m.•6 views

PT-2025-12440

Name of the Vulnerable Software and Affected Versions Jalios JPlatform versions prior to 10.0.8 Jalios Workplace versions 5.3 through 6.2 Description The issue is related to improper restriction of XML external entity references, allowing XML injection, and improper neutralization of input during...

7.3CVSS0.00392EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/21 12:00 a.m.•5 views

CVE-2025-25035: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation Cross-site Scripting vulnerability in Jalios JPlatform 10 allows for Reflected XSS and Stored XSS.This issue affects JPlatform 10: before 10.0.8 SP8, before 10.0.7 SP7, before 10.0.6 SP6 and Jalios Workplace 6.2, Jalios Workplace 6.1,...

7.3CVSS5.8AI score0.00392EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/03/21 12:00 a.m.•36 views

Zoom Workplace Post-Release Reuse Vulnerability

Zoom Workplace is an AI-first collaboration platform from Zoom that integrates core features such as team communication, meetings, document collaboration, and a built-in AI Companion smart assistant to boost productivity. A post-release reuse vulnerability exists in Zoom Workplace. The...

8.8CVSS6.9AI score0.00441EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/03/21 12:00 a.m.•21 views

The vulnerability of Zoom’s video conferencing software lies in the insufficient protection of sensitive data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Zoom Workplace, SDK, Room clients, and Room controllers’ software relates to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

6.8CVSS5.5AI score0.00514EPSS
SaveExploits0References3Affected Software12
CNVD
CNVD
•added 2025/03/17 12:00 a.m.•28 views

Zoom Workplace Apps Heap Buffer Overflow Vulnerability

Zoom Workplace Apps is an enterprise-grade collaboration platform that combines video conferencing, team collaboration, AI assistance, and other features for hybrid office scenarios. Zoom Workplace Apps suffers from a heap buffer overflow vulnerability that stems from the program not properly...

8.8CVSS7.6AI score0.00448EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/03/17 12:00 a.m.•49 views

Zoom Workplace Apps Buffer Overflow Vulnerability

Zoom Workplace Apps is an enterprise-grade collaboration platform that combines video conferencing, team collaboration, AI assistance, and other features for hybrid office scenarios. Zoom Workplace Apps suffers from a buffer overflow vulnerability that stems from certain applications not properly...

8.8CVSS7.4AI score0.00441EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/14 12:14 p.m.•20 views

CVE-2025-0149

Insufficient verification of data authenticity in some Zoom Workplace Apps may allow an unprivileged user to conduct a denial of service via network access...

6.5CVSS6.7AI score0.00248EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/03/13 7:28 p.m.•20 views

CVE-2025-27440

Heap overflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access...

8.5CVSS7.4AI score0.00448EPSS
SaveExploits0References3
Rows per page
Query Builder