3268 matches found
CVE-2025-0148 Zoom Jenkins Marketplace plugin - Missing Password Field Masking
Missing password field masking in the Zoom Jenkins Marketplace plugin before version 1.6 may allow an unauthenticated user to conduct a disclosure of information via adjacent network access...
CVE-2025-0148 Zoom Jenkins Marketplace plugin - Missing Password Field Masking
Missing password field masking in the Zoom Jenkins Marketplace plugin before version 1.6 may allow an unauthenticated user to conduct a disclosure of information via adjacent network access...
CVE-2025-23581
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in digitalzoomstudio Demo User DZS demo-user-dzs-showcase-your-admin-safely allows Stored XSS.This issue affects Demo User DZS: from n/a through = 1.1.0...
CVE-2025-23581 WordPress Demo User DZS plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Digital Zoom Studio Demo User DZS allows Stored XSS. This issue affects Demo User DZS: from n/a through 1.1.0...
CVE-2025-23581 WordPress Demo User DZS plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in digitalzoomstudio Demo User DZS demo-user-dzs-showcase-your-admin-safely allows Stored XSS.This issue affects Demo User DZS: from n/a through = 1.1.0...
CVE-2025-23581
CVE-2025-23581 is a stored XSS vulnerability in the WordPress plugin “Demo User DZS – Showcase your admin safely” (Digital Zoom Studio Demo User DZS). Affected are versions
PT-2025-3757 · Zoom · Zoom Jenkins Marketplace Plugin
Name of the Vulnerable Software and Affected Versions: Zoom Jenkins Marketplace plugin version 1.6 and earlier Description: The issue concerns missing password field masking in the Zoom Jenkins Marketplace plugin, which may allow an unauthenticated user to conduct a disclosure of information via...
PT-2025-4952 · Unknown · Digital Zoom Studio Demo User Dzs
Name of the Vulnerable Software and Affected Versions: Digital Zoom Studio Demo User DZS versions 1.1.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This means that an attacker can...
Zoom Jenkins Marketplace plugin 安全漏洞
Zoom Jenkins Marketplace plugin is a plugin from Zoom USA. The Zoom Jenkins Marketplace plugin suffers from an information disclosure vulnerability that stems from a missing password field mask. An attacker can exploit this vulnerability to disclose sensitive information...
Jenkins Zoom Plugin Stores Sensitive Information in Cleartext
Cleartext storage of sensitive information in the Zoom Jenkins Marketplace plugin before version 1.4 may allow an authenticated user to conduct a disclosure of information via network access...
CVE-2025-0147
Type confusion in the Zoom Workplace App for Linux before 6.2.10 may allow an authorized user to conduct an escalation of privilege via network access...
CVE-2025-0147
Type confusion in the Zoom Workplace App for Linux before 6.2.10 may allow an authorized user to conduct an escalation of privilege via network access...
CVE-2025-0143
Out-of-bounds write in the Zoom Workplace App for Linux before version 6.2.5 may allow an unauthorized user to conduct a denial of service via network access...
CVE-2025-0146
Symlink following in the installer for Zoom Workplace App for macOS before 6.2.10 may allow an authenticated user to conduct a denial of service via local access...
CVE-2025-0145
Untrusted search path in the installer for some Zoom Workplace Apps for Windows may allow an authorized user to conduct an escalation of privilege via local access...
CVE-2025-0145
Untrusted search path in the installer for some Zoom Workplace Apps for Windows may allow an authorized user to conduct an escalation of privilege via local access...
CVE-2025-0143
Out-of-bounds write in the Zoom Workplace App for Linux before version 6.2.5 may allow an unauthorized user to conduct a denial of service via network access...
CVE-2025-0146
Symlink following in the installer for Zoom Workplace App for macOS before 6.2.10 may allow an authenticated user to conduct a denial of service via local access...