948 matches found
PT-2025-36990
Name of the Vulnerable Software and Affected Versions: Zoom Workplace Clients for Windows affected versions not specified Description: Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via network...
Zoom Workplace 安全漏洞
Zoom Workplace is a desktop application from Zoom USA. A security vulnerability exists in Zoom Workplace that stems from a buffer overflow that could lead to a denial of service attack...
Zoom Workplace 安全漏洞
Zoom Workplace is a desktop application from Zoom USA. A security vulnerability exists in Zoom Workplace versions prior to 6.5.0 that stems from a missing authorization in the installer, which could result in elevated privileges...
CVE-2025-58135: Improper Enforcement of a Single, Unique Action
Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via network access...
CVE-2025-58131: Time-of-check Time-of-use (TOCTOU) Race Condition
Race condition in the Zoom Workplace VDI Plugin macOS Universal installer for VMware Horizon before version 6.4.10 or before 6.2.15 and 6.3.12 in their respective tracks may allow an authenticated user to conduct a disclosure of information via network access...
Zoom Workplace VDI Client < 6.3.14 Vulnerability (ZSB-25036)
The version of Zoom Workplace VDI Client installed on the remote host is prior to 6.3.14. It is, therefore, affected by a vulnerability as referenced in the ZSB-25036 advisory. - Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct...
Enterprise Search 8.18.6, 8.19.3 Security Update (ESA-2025-15) (CVE-2025-54988)
Enterprise Search XML external entity XXE injection in Apache Tika ESA-2025-15 On August 20, 2025, CVE-2025-54988 in Apache Tika PDF parser module was announced, disclosing an XML External Entity injection flaw in the Apache Tika tika-parser-pdf-module. This vulnerability allows an attacker to...
Zoom Workplace < 6.3.10 Vulnerability (ZSB-25030)
The version of Zoom Workplace installed on the remote host is prior to 6.3.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25030 advisory. - Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of privilege...
Zoom Workplace < 6.4.10 Vulnerability (ZSB-25029)
The version of Zoom Workplace installed on the remote host is prior to 6.4.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25029 advisory. - Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application...
Zoom Workplace VDI < 6.3.12 Vulnerability (ZSB-25029)
The version of Zoom Workplace VDI installed on the remote host is prior to 6.3.12. It is, therefore, affected by a vulnerability as referenced in the ZSB-25029 advisory. - Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application...
Zoom Workplace VDI < 6.3.10 Vulnerability (ZSB-25030)
The version of Zoom Workplace VDI installed on the remote host is prior to 6.3.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25030 advisory. - Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of...
Zoom Workplace for Linux Improper Certificate Validation Vulnerability
Zoom Workplace for Linux is a Linux application for enterprise communication and collaboration, offering features such as video conferencing, online meetings, chat and mobile collaboration. Zoom Workplace for Linux suffers from an improper certificate validation vulnerability that can be exploite...
Zoom Workplace Desktop App < 6.4.13 Information Disclosure (ZSB-25023)
The version of Zoom Workplace Desktop App installed on the remote host is prior to 6.4.13. It is, therefore, affected by a vulnerability as referenced in the ZSB-25023 advisory. - Improper certificate validation in Zoom Workplace for Linux before version 6.4.13 may allow an unauthorized user to...
Zoom Workplace < 6.4.5 Vulnerability (ZSB-25027)
The version of Zoom Workplace installed on the remote host is prior to 6.4.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-25027 advisory. - Classic buffer overflow in certain Zoom Clients for Windows may allow an authorised user to conduct a denial of service via networ...
Zoom Workplace VDI < 6.3.10 Vulnerability (ZSB-25028)
The version of Zoom Workplace VDI installed on the remote host is prior to 6.3.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25028 advisory. - Classic buffer overflow in certain Zoom Clients for Windows may allow an authorised user to conduct a denial of service via...
Zoom Workplace < 6.4.0 Vulnerability (ZSB-25028)
The version of Zoom Workplace installed on the remote host is prior to 6.4.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-25028 advisory. - Classic buffer overflow in certain Zoom Clients for Windows may allow an authorised user to conduct a denial of service via networ...
Zoom Workplace < 6.4.5 Vulnerability (ZSB-25025)
The version of Zoom Workplace installed on the remote host is prior to 6.4.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-25025 advisory. - Cross-site scripting in certain Zoom Clients before version 6.4.5 may allow an authenticated user to conduct a disclosure of...
Zoom Workplace for Windows < 6.4.5 / Workplace VDI for Windows < 6.3.12 Buffer Overflow (ZSB-25024)
The version of Zoom Workplace or Zoom Workplace VDI installed on the remote Windows host is prior to 6.4.5 or 6.3.12 respectively. It is, therefore, affected by a buffer overflow vulnerability as referenced in the ZSB-25024 advisory. A classic buffer overflow vulnerability in certain Zoom Clients...
