3265 matches found
Design/Logic Flaw
The Zoom Opener installer is downloaded by a user from the Launch meeting page, when attempting to join a meeting without having the Zoom Meeting Client installed. The Zoom Opener installer for Zoom Client for Meetings before version 5.10.3 and Zoom Rooms for Conference Room for Windows before...
CVE-2022-28749 Insufficient Authorization Check During Meeting Join
Zooms On-Premise Meeting Connector MMR before version 4.8.113.20220526 fails to properly check the permissions of a Zoom meeting attendee. As a result, a threat actor in the Zooms waiting room can join the meeting without the consent of the host...
CVE-2022-28749
Affected software: Zoom On-Premise Meeting Connector MMR (versions prior to 4.8.113.20220526). Issue: improper permission checking for attendees in the waiting room, enabling a threat actor to join a meeting without the host’s consent. Impact: unauthorized entry into meetings (no host permission)...
CVE-2022-22788 DLL injection in Zoom Opener installer for Zoom and Zoom Rooms clients
The Zoom Opener installer is downloaded by a user from the Launch meeting page, when attempting to join a meeting without having the Zoom Meeting Client installed. The Zoom Opener installer for Zoom Client for Meetings before version 5.10.3 and Zoom Rooms for Conference Room for Windows before...
CVE-2022-22788
CVE-2022-22788 affects Zoom Client for Meetings <5.10.3 and Zoom Rooms for Windows
Zooms On-Premise Meeting Connector MMR 安全漏洞
Zooms On-Premise Meeting Connector MMR is a video conferencing connection controller from Zoom USA. A security vulnerability exists in versions of Zooms On-Premise Meeting Connector MMR prior to 4.8.113.20220526, which stems from an inability to properly check the permissions of Zoom meeting...
Zoom Client 代码问题漏洞
Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability exists in the Zoom Opener installer for Zoom Client versions prior to 5.10.3 and Zoom Rooms for Conference Room for Windows versions prior to 5.10.3, which can be...
PT-2022-19207 · Zoom · Zoom On-Premise Meeting Connector Mmr
Name of the Vulnerable Software and Affected Versions: Zoom On-Premise Meeting Connector MMR version 4.8.113.20220526 and earlier Description: The issue arises from improper permission checking of Zoom meeting attendees. This allows a threat actor in the waiting room to join a meeting without the...
CVE-2022-22788
The Zoom Opener installer is downloaded by a user from the Launch meeting page, when attempting to join a meeting without having the Zoom Meeting Client installed. The Zoom Opener installer for Zoom Client for Meetings before version 5.10.3 and Zoom Rooms for Conference Room for Windows before...
KLA12567 RCE vulnerability in Zoom
Remote code execution vulnerability was found in Zoom. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories Zoom Security Bulletin CVE list CVE-2022-22788 unknown Solution Update to the latest version Download Zoom Impacts ACE Arbitrary code execution...
Reolink E1 Zoom Camera 3.0.0.716 Configuration Disclosure Vulnerability
ADVISORY INFORMATION ======================= Product: Reolink E1 Zoom Camera Vendor URL: https://reolink.com/product/e1-zoom/ Type: Exposure of Sensitive Information to an Unauthorized Actor CWE-200 Date found: 2021-08-26 Date published: 2022-06-01 CVSSv3 Score: 5.3...
Reolink E1 Zoom Camera 3.0.0.716 Private Key Disclosure Vulnerability
ADVISORY INFORMATION ======================= Product: Reolink E1 Zoom Camera Vendor URL: https://reolink.com/product/e1-zoom/ Type: Exposure of Sensitive Information to an Unauthorized Actor CWE-200 Date found: 2021-08-26 Date published: 2022-06-01 CVSSv3 Score: 7.5...
Reolink E1 Zoom Camera 3.0.0.716 Configuration Disclosure
RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ======================= Product: Reolink E1 Zoom Camera Vendor URL: https://reolink.com/product/e1-zoom/ Type: Exposure of Sensitive Information to an Unauthorized Actor CWE-200 Date found: 2021-08-26 Date published:...
Reolink E1 Zoom Camera 安全漏洞
Reolink E1 Zoom Camera is a dual-band WiFi IP camera from China Reolink. It has a pan-tilt-zoom function for home security, with night vision, two-way audio and other features. A security vulnerability exists in Reolink E1 Zoom Camera 3.0.0.716 and earlier, which stems from an application...
Reolink E1 Zoom Camera 信息泄露漏洞
Reolink E1 Zoom Camera is a dual-band WiFi IP camera from China Reolink. It has a pan-tilt-zoom function for home security with night vision and two-way audio. An information disclosure vulnerability exists in Reolink E1 Zoom Camera 3.0.0.716 and earlier, which stems from a lack of adequate...
Reolink E1 Zoom Camera 3.0.0.716 Private Key Disclosure
RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ======================= Product: Reolink E1 Zoom Camera Vendor URL: https://reolink.com/product/e1-zoom/ Type: Exposure of Sensitive Information to an Unauthorized Actor CWE-200 Date found: 2021-08-26 Date published:...
The vulnerability of Zoom video conferencing software for Windows lies in the improper checking of the currently installed software version during updates. This allows a malicious individual to circumvent certain security restrictions.
The vulnerability of Zoom video conferencing software for Windows stems from improper checking of the currently installed software version during updates. Exploiting this vulnerability can allow a malicious actor to bypass certain security restrictions remotely...
The vulnerability of clients for conducting real-time audio and video conferences via Zoom Client for Meetings on Android, iOS, Linux, macOS, and Windows allows a hacker to perform spoofing attacks due to improper data analysis of XML messages in XMPP messages.
The vulnerability of clients for conducting real-time audio and video conferences using Zoom Client for Meetings on Android, iOS, Linux, macOS, and Windows is related to improper analysis of XML data in XMPP messages. Exploiting this vulnerability allows a malicious actor to perform a spoofing...
Zoom Client < 5.10.0 Attack Chain Vulnerabilities
The version of Zoom Client for Meetings for Windows installed on the remote host is prior to 5.10.0. It is, therefore, affected by multiple vulnerabilities. - The Zoom Client for Meetings for Android, iOS, Linux, MacOS, and Windows before version 5.10.0 failed to properly parse XML stanzas in XMP...
