CVE-2017-14012

Boston Scientific ZOOM LATITUDE PRM Model 3120 does not encrypt PHI at rest. CVSS v3 base score: 4.6; CVSS vector string: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N...

PT-2018-5613

Name of the Vulnerable Software and Affected Versions: Boston Scientific ZOOM LATITUDE PRM Model 3120 Description: The issue concerns the use of a hard-coded cryptographic key for encrypting Protected Health Information PHI before it is transferred to removable media. This could potentially...

PT-2018-5612

Name of the Vulnerable Software and Affected Versions: Boston Scientific ZOOM LATITUDE PRM Model 3120 Description: The issue concerns the lack of encryption for Protected Health Information PHI at rest. This means that sensitive health data is not properly secured, potentially allowing unauthoriz...

CVE-2017-14012: Missing Encryption of Sensitive Data

Boston Scientific ZOOM LATITUDE PRM Model 3120 does not encrypt PHI at rest. CVSS v3 base score: 4.6; CVSS vector string: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N...

CVE-2017-14014: Use of Hard-coded Cryptographic Key

Boston Scientific ZOOM LATITUDE PRM Model 3120 uses a hard-coded cryptographic key to encrypt PHI prior to having it transferred to removable media. CVSS v3 base score: 4.6; CVSS vector string: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N...

WordPress WP Image Zoom plugin <=1.23 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found by Tom Adams in WordPress WP Image Zoom plugin versions =1.23. Solution Update the WordPress WP Image Zoom plugin to the latest available version at least 1.24...

WordPress Image Zoom 1.23 Plugin Denial Of Service Vulnerability

Exploit for php platform in category web applications Details ================ Software: WP Image Zoom Version: 1.23 Homepage: http://wordpress.org/plugins/wp-image-zoooom/ Advisory report: https://advisories.dxw.com/advisories/wp-image-zoom-dos/ CVE: Awaiting assignment CVSS: 7.5 High;...

WordPress WP Image Zoom 1.23 Denial Of Service

Details ================ Software: WP Image Zoom Version: 1.23 Homepage: http://wordpress.org/plugins/wp-image-zoooom/ Advisory report: https://advisories.dxw.com/advisories/wp-image-zoom-dos/ CVE: Awaiting assignment CVSS: 7.5 High; AV:N/AC:L/Au:S/C:N/I:P/A:C Description ================ WP Imag...

WP Image Zoom <= 1.23 - Cross-Site Request Forgery (CSRF)

The WP Image Zoom WordPress plugin was affected by a Cross-Site Request Forgery CSRF security vulnerability...

Stack overflow

Stack-based buffer overflow in the ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler...

CVE-2017-15048

Stack-based buffer overflow in the ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler...

CVE-2017-15048

Stack-based buffer overflow in the ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler...

CVE-2017-15049

The ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 does not properly sanitize user input when constructing a shell command, which allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler...

CVE-2017-15048

Stack-based buffer overflow in the ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler...

CVE-2017-15048

CVE-2017-15048 – Zoom Linux client buffer overflow . The vulnerability is a stack-based overflow in the ZoomLauncher binary of the Zoom client for Linux, triggered by the zoommtg:// scheme handler. It allows a remote attacker to execute arbitrary code in the context of the affected user. Affected...

CVE-2017-15049

The CVE-2017-15049 entry relates to the Zoom Linux client where the ZoomLauncher binary did not properly sanitize user input when building a shell command, enabling remote arbitrary code execution via the zoommtg:// scheme handler in versions before 2.0.115900.1201. Connected advisories and explo...

PT-2017-13835

Name of the Vulnerable Software and Affected Versions Zoom client for Linux versions prior to 2.0.115900.1201 Description The issue concerns the ZoomLauncher binary in the Zoom client for Linux, which does not properly sanitize user input when constructing a shell command. This allows remote...

PT-2017-13834

Name of the Vulnerable Software and Affected Versions Zoom client for Linux versions prior to 2.0.115900.1201 Description The issue is related to a stack-based buffer overflow in the ZoomLauncher binary, which can be exploited by remote attackers to execute arbitrary code. This is achieved by...

CVE-2017-15049: Improper Neutralization of Special Elements used in an OS Command

The ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 does not properly sanitize user input when constructing a shell command, which allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler...

CVE-2017-15048: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler...