Lucene search
+L

3267 matches found

CNNVD
CNNVD
added 2022/10/14 12:0 a.m.9 views

Zoom On-Premise Meeting Connector 安全漏洞

Zoom On-Premise Meeting Connector is a meeting connector from Zoom USA. A security vulnerability exists in versions prior to Zoom On-Premise Meeting Connector MMR 4.8.20220916.131 that stems from incorrect access control...

6.5CVSS6.5AI score0.00676EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/10/14 12:0 a.m.6 views

Zoom On-Premise Meeting Connector 安全漏洞

Zoom On-Premise Meeting Connector is a meeting connector from Zoom USA. A security vulnerability exists in versions prior to Zoom On-Premise Meeting Connector MMR 4.8.20220815.130 that stems from incorrect access control...

6.5CVSS6.5AI score0.00511EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/10/14 12:0 a.m.6 views

Zoom On-Premise Meeting Connector 安全漏洞

Zoom On-Premise Meeting Connector is a meeting connector from Zoom USA. A security vulnerability exists in versions prior to Zoom On-Premise Meeting Connector MMR 4.8.20220815.130 that stems from incorrect access control...

8.6CVSS7.9AI score0.00551EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/10/14 12:0 a.m.8 views

PT-2022-19212 · Zoom · Zoom On-Premise Meeting Connector Mmr

Name of the Vulnerable Software and Affected Versions: Zoom On-Premise Meeting Connector MMR versions prior to 4.8.20220815.130 Description: The issue allows a malicious actor to obtain the audio and video feed of a meeting they were not authorized to join and cause other meeting disruptions due ...

8.6CVSS8.5AI score0.00551EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/10/14 12:0 a.m.9 views

PT-2022-19214 · Zoom · Zoom On-Premise Meeting Connector Mmr

Name of the Vulnerable Software and Affected Versions: Zoom On-Premise Meeting Connector MMR versions prior to 4.8.20220815.130 Description: The issue allows a malicious actor to obtain the audio and video feed of a meeting they were not authorized to join and cause other meeting disruptions due ...

6.5CVSS6.5AI score0.00511EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2022/10/13 12:0 a.m.17 views

Zoom Client 5.10.6 < 5.12.0 Debugging Port Misconfiguration Vulnerability (ZSB-22023) - Mac OS X

The Zoom Client is prone to a debugging port misconfiguration vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

7.8CVSS7.7AI score0.00294EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/10/12 12:0 a.m.11 views

The vulnerability of Zoom’s video conferencing software, related to the handling of the zero pointer, allows a hacker to cause a service failure.

The vulnerability of Zoom video conferencing software relates to the handling of the zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

4CVSS5.9AI score0.00608EPSS
SaveExploits0References3Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/10/10 12:0 a.m.9 views

The vulnerability of Zoom, a video conferencing software, relates to insufficient validation of entered data, allowing attackers to execute arbitrary code.

The vulnerability of Zoom video conferencing software is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.1CVSS7.5AI score0.01238EPSS
SaveExploits0References3Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/10/06 12:0 a.m.8 views

The vulnerability of clients for conducting real-time audio and video conferences via Zoom Client for Meetings on Linux exists due to the lack of measures to neutralize specific elements, allowing a violator to execute arbitrary code.

The vulnerability of clients for conducting real-time audio and video conferences via Zoom Client for Meetings on Linux exists due to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

3.7CVSS6.3AI score0.00603EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/10/05 12:0 a.m.60 views

Zoom Client < 5.11.0 URL Parsing Vulnerability

The Zoom Client for Meetings for Android, iOS, Linux, macOS, and Windows before version 5.11.0 is susceptible to a URL parsing vulnerability. If a malicious Zoom meeting URL is opened, the malicious link may direct the user to connect to an arbitrary network address, leading to additional attacks...

9.6CVSS7.2AI score0.00741EPSS
SaveExploits0References2
Malwarebytes
Malwarebytes
added 2022/09/28 1:0 p.m.16 views

Spyware disguises itself as Zoom downloads

Zoom video call software continues to be a staple in work environments. Despite a slow, post-lockdown easing back to the "old normal," many businesses still have remote workers, or people working in different geographies. It's no surprise then to see criminals continuing to abuse Zoom's popularit...

0.5AI score
SaveExploits0
Schneier on Security
Schneier on Security
added 2022/09/23 11:43 a.m.17 views

Leaking Screen Information on Zoom Calls through Reflections in Eyeglasses

Okay, its an obscure threat. But people are researching it: Our models and experimental results in a controlled lab setting show it is possible to reconstruct and recognize with over 75 percent accuracy on-screen texts that have heights as small as 10 mm with a 720p webcam." That corresponds to 2...

SaveExploits0
NVD
NVD
added 2022/09/16 10:15 p.m.20 views

CVE-2022-28758

Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability. As a result, a malicious actor could obtain the audio and video feed of a meeting they were not authorized to join and cause other meeting disruptions...

8.2CVSS0.006EPSS
SaveExploits0References1
Prion
Prion
added 2022/09/16 10:15 p.m.19 views

Improper access control

Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability. As a result, a malicious actor could obtain the audio and video feed of a meeting they were not authorized to join and cause other meeting disruptions...

6.4CVSS8.1AI score0.006EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/09/16 8:13 p.m.28 views

CVE-2022-28758 Zoom On-Premise Deployments: Improper Access Control

Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability. As a result, a malicious actor could obtain the audio and video feed of a meeting they were not authorized to join and cause other meeting disruptions...

8.2CVSS8.4AI score0.006EPSS
SaveExploits0References1
CVE
CVE
added 2022/09/16 8:13 p.m.55 views

CVE-2022-28758

The CVE-2022-28758 entry concerns Zoom On-Premise Meeting Connector MMR prior to 4.8.20220815.130, with an improper access control flaw. The issue could allow a malicious actor to obtain the audio and video feeds of a meeting they are not authorized to join, potentially causing other meeting disr...

8.2CVSS8.2AI score0.006EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/09/16 12:0 a.m.7 views

PT-2022-19211 · Zoom · Zoom On-Premise Meeting Connector Mmr

Name of the Vulnerable Software and Affected Versions: Zoom On-Premise Meeting Connector MMR versions prior to 4.8.20220815.130 Description: The issue allows a malicious actor to obtain the audio and video feed of a meeting they were not authorized to join, causing meeting disruptions due to...

8.2CVSS8.2AI score0.006EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/09/16 12:0 a.m.8 views

Zoom On-Premise Meeting Connector 安全漏洞

Zoom On-Premise Meeting Connector is a meeting connector from Zoom USA. A security vulnerability exists in versions prior to Zoom On-Premise Meeting Connector MMR 4.8.20220815.130, which stems from the inclusion of incorrect access control, and can be exploited by an attacker to gain access to...

8.2CVSS7.7AI score0.006EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2022/09/15 12:0 a.m.24 views

Zoom Client 5.7.3 < 5.11.6 Privilege Escalation

The Zoom Client for Meetings for macOS Standard and for IT Admin starting with version 5.7.3 and before 5.11.6 contains a vulnerability in the auto update process. A local low-privileged user could exploit this vulnerability to escalate their privileges to root. Note that Nessus has not tested fo...

8.8CVSS7.4AI score0.00177EPSS
SaveExploits0References3
NCSC
NCSC
added 2022/09/14 12:0 a.m.6 views

Vulnerabilities fixed in Zoom

Vulnerabilities have been fixed in Zoom. The vulnerabilities allow a malicious person to carry out attacks that result in the following categories of damage: Manipulation of data Circumvention of security measure Accessing sensitive data The vulnerabilities with characteristics CVE-2022-28758 and...

8.6CVSS6.7AI score0.006EPSS
SaveExploits0
Rows per page
Query Builder