Lucene search
+L

448 matches found

CNNVD
CNNVD
added 2022/10/31 12:0 a.m.8 views

Zoom Client 输入验证错误漏洞

Zoom Client is a video conferencing client application from Zoom Inc. that supports multiple platforms. A security vulnerability exists in Zoom Client for Meetings prior to version 5.12.2, which stems from susceptibility to a URL parsing vulnerability, whereby if a malicious Zoom meeting URL is...

9.6CVSS8.4AI score0.01134EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/10/25 12:0 a.m.24 views

Zoom Client < 5.12.2 URL Parsing Vulnerability (ZSB-22024)

The Zoom Client is prone to a URL parsing vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

9.6CVSS9.4AI score0.01134EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/10/18 12:0 a.m.10 views

The vulnerability of clients for conducting real-time audio and video conferences via Zoom Client for Meetings for Windows allows a perpetrator to compromise the integrity of protected information.

The vulnerability of clients for conducting real-time audio and video conferences using the Zoom Client for Meetings for Windows involves an improper verification of the cryptographic signature. Exploiting this vulnerability can allow attackers to compromise the integrity of the protected...

5CVSS7.2AI score0.00394EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2022/10/14 3:15 p.m.6 views

CVE-2022-28762

Zoom Client for Meetings for macOS Standard and for IT Admin starting with 5.10.6 and prior to 5.12.0 contains a debugging port misconfiguration. When camera mode rendering context is enabled as part of the Zoom App Layers API by running certain Zoom Apps, a local debugging port is opened by the...

7.8CVSS5.8AI score0.00302EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/10/14 2:51 p.m.41 views

CVE-2022-28762 Debugging port misconfiguration in Zoom Apps in the Zoom Client for Meetings for macOS

Zoom Client for Meetings for macOS Standard and for IT Admin starting with 5.10.6 and prior to 5.12.0 contains a debugging port misconfiguration. When camera mode rendering context is enabled as part of the Zoom App Layers API by running certain Zoom Apps, a local debugging port is opened by the...

7.3CVSS7.6AI score0.00302EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/10/14 2:51 p.m.8 views

CVE-2022-28762 Debugging port misconfiguration in Zoom Apps in the Zoom Client for Meetings for macOS

Zoom Client for Meetings for macOS Standard and for IT Admin starting with 5.10.6 and prior to 5.12.0 contains a debugging port misconfiguration. When camera mode rendering context is enabled as part of the Zoom App Layers API by running certain Zoom Apps, a local debugging port is opened by the...

7.3CVSS7.4AI score0.00302EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/10/14 12:0 a.m.16 views

Zoom Client 安全漏洞

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability exists in Zoom Client for Meetings version 5.10.6 through versions prior to 5.12.0, which stems from an incorrectly configured debug port...

7.8CVSS7.3AI score0.00302EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/10/06 12:0 a.m.9 views

The vulnerability of clients for conducting real-time audio and video conferences via Zoom Client for Meetings on Linux exists due to the lack of measures to neutralize specific elements, allowing a violator to execute arbitrary code.

The vulnerability of clients for conducting real-time audio and video conferences via Zoom Client for Meetings on Linux exists due to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

3.7CVSS6.3AI score0.00603EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/10/05 12:0 a.m.62 views

Zoom Client < 5.11.0 URL Parsing Vulnerability

The Zoom Client for Meetings for Android, iOS, Linux, macOS, and Windows before version 5.11.0 is susceptible to a URL parsing vulnerability. If a malicious Zoom meeting URL is opened, the malicious link may direct the user to connect to an arbitrary network address, leading to additional attacks...

9.6CVSS7.2AI score0.00741EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/09/15 12:0 a.m.25 views

Zoom Client 5.7.3 < 5.11.6 Privilege Escalation

The Zoom Client for Meetings for macOS Standard and for IT Admin starting with version 5.7.3 and before 5.11.6 contains a vulnerability in the auto update process. A local low-privileged user could exploit this vulnerability to escalate their privileges to root. Note that Nessus has not tested fo...

8.8CVSS7.4AI score0.00177EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2022/09/07 12:0 a.m.41 views

Zoom Client < 5.10.0 Multiple Vulnerabilities (macOS)

The version of Zoom Client for Meetings installed on the remote macOS or Mac OS X host is prior to 5.10.0 and is therefore affected by multiple vulnerabilities. - The Zoom Client for Meetings for Android, iOS, Linux, MacOS, and Windows before version 5.10.0 failed to properly parse XML stanzas in...

9.1CVSS8.1AI score0.04301EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2022/08/24 12:0 a.m.9 views

The vulnerability of clients for conducting real-time audio and video conferences via Zoom Client for Meetings on macOS arises from improper verification of the cryptographic signature. This allows a perpetrator to execute arbitrary commands with root privileges.

The vulnerability of clients for conducting real-time audio and video conferences using Zoom Client for Meetings on macOS is related to an improper verification of the cryptographic signature. Exploiting this vulnerability could allow a perpetrator to execute arbitrary commands with root privileg...

8.8CVSS7.6AI score0.0015EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/08/24 12:0 a.m.9 views

The vulnerability of the automatic update function for conducting audio and video conferences in real-time with Zoom Client for Meetings for macOS allows a malicious individual to elevate their privileges to root level.

The vulnerability of the automatic update function for conducting real-time audio and video conferences in Zoom Client for Meetings for macOS is related to improper verification of the cryptographic signature. Exploiting this vulnerability can allow an attacker to elevate their privileges to the...

8.8CVSS7.2AI score0.00177EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
added 2022/08/19 12:0 a.m.17 views

Zoom Client 5.7.3 < 5.11.6 Privilege Escalation Vulnerability (ZSB-22019) - Mac OS X

The Zoom Client is prone to a privilege escalation vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

8.8CVSS7.7AI score0.00177EPSS
SaveExploits0References1
NVD
NVD
added 2022/08/18 8:15 p.m.17 views

CVE-2022-28757

The Zoom Client for Meetings for macOS Standard and for IT Admin starting with version 5.7.3 and before 5.11.6 contains a vulnerability in the auto update process. A local low-privileged user could exploit this vulnerability to escalate their privileges to root...

8.8CVSS0.00177EPSS
SaveExploits0References1
OSV
OSV
added 2022/08/18 8:15 p.m.4 views

CVE-2022-28757

The Zoom Client for Meetings for macOS Standard and for IT Admin starting with version 5.7.3 and before 5.11.6 contains a vulnerability in the auto update process. A local low-privileged user could exploit this vulnerability to escalate their privileges to root...

7.8CVSS5.8AI score0.00177EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/08/18 12:0 a.m.17 views

Zoom Client 安全漏洞

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability exists in Zoom Client macOS Standard and IT Administrator Editions version 5.7.3 through versions prior to 5.11.6. An attacker exploited the vulnerability to escalate to...

8.8CVSS7.4AI score0.00177EPSS
SaveExploits0References2
OSV
OSV
added 2022/08/17 10:15 p.m.2 views

CVE-2022-28751

The Zoom Client for Meetings for MacOS Standard and for IT Admin before version 5.11.3 contains a vulnerability in the package signature validation during the update process. A local low-privileged user could exploit this vulnerability to escalate their privileges to root...

7.8CVSS5.8AI score0.00142EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/08/17 12:0 a.m.9 views

Zoom Client 数据伪造问题漏洞

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A data forgery issue vulnerability exists in Zoom Client for Meetings for MacOS Standard and for IT Admin versions prior to 5.11.3, which stems from the inclusion of a package signature...

8.8CVSS7.4AI score0.00142EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/08/17 12:0 a.m.8 views

PT-2022-4375 · Zoom · Zoom Client For Meetings

Name of the Vulnerable Software and Affected Versions: Zoom Client for Meetings versions prior to 5.11.3 Description: The issue is related to incorrect cryptographic signature validation in the update process of the Zoom Client for Meetings for macOS. This could allow a local low-privileged user ...

8.8CVSS7.5AI score0.00142EPSS
SaveExploits0References4
Rows per page
Query Builder