Zoom Workplace VDI Client < 6.3.14 Vulnerability (ZSB-25031)

The version of Zoom Workplace VDI Client installed on the remote host is prior to 6.3.14. It is, therefore, affected by a vulnerability as referenced in the ZSB-25031 advisory. - Buffer overflow in certain Zoom Workplace Clients may allow an authenticated user to conduct a denial of service via...

PT-2025-36988

Name of the Vulnerable Software and Affected Versions: Zoom Workplace VDI Plugin versions prior to 6.4.10 Zoom Workplace VDI Plugin versions prior to 6.2.15 Zoom Workplace VDI Plugin versions prior to 6.3.12 Description: A race condition exists in the Zoom Workplace VDI Plugin macOS Universal...

PT-2025-36983

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Client affected versions not specified Description: An uncontrolled resource consumption issue in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access...

PT-2025-36984

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Clients affected versions not specified Description: Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access. Recommendations: At the moment,...

PT-2025-36990

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Clients for Windows affected versions not specified Description: Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via network...

PT-2025-36881

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: A security-feature bypass exists in Windows due to a protection mechanism failure in the MapUrlToZone function. This allows an unauthorized attacker to bypass a security feature over a...

Linux Distros Unpatched Vulnerability : CVE-2017-3635

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/C. Supported versions that are affected are 6.1.10 and earlier. Difficul...

Linux Distros Unpatched Vulnerability : CVE-2025-30706

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. Supported versions that are affected are 9.0.0-9.2.0. Difficult to exploit...

CVE-2025-44015

A command injection vulnerability has been reported to affect HybridDesk Station. If an attacker gains local network access, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following version: HybridDesk Station 4.2.18 and later...

Linux Distros Unpatched Vulnerability : CVE-2022-21363

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. Supported versions that are affected are 8.0.27 and prior. Difficult to...

Linux Distros Unpatched Vulnerability : CVE-2022-3116

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Heimdal Software Kerberos 5 implementation is vulnerable to a null pointer dereferance. An attacker with network access to an application that depends on th...

Linux Distros Unpatched Vulnerability : CVE-2020-2959

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.40, prior to...

Linux Distros Unpatched Vulnerability : CVE-2023-2203

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the WebKitGTK package. An improper input validation issue may lead to a use-after-free vulnerability. This flaw allows attackers with networ...

Linux Distros Unpatched Vulnerability : CVE-2019-2435

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/Python. Supported versions that are affected are 8.0.13 and prior and...

Linux Distros Unpatched Vulnerability : CVE-2025-30714

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/Python. Supported versions that are affected are 9.0.0-9.2.0. Difficult to...

Linux Distros Unpatched Vulnerability : CVE-2019-14553

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network access. CVE-2019-14553 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2022-39399

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versions that are affected are...

CVE-2025-44015

A command injection vulnerability has been reported to affect HybridDesk Station. If an attacker gains local network access, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following version: HybridDesk Station 4.2.18 and later...

CVE-2025-31977 A cryptographic weakness has been identified in the HCL BigFix Service Management (SM)

HCL BigFix SM is affected by cryptographic weakness due to weak or outdated encryption algorithms. An attacker with network access could exploit this weakness to decrypt or manipulate encrypted communications under certain conditions...

CVE-2025-31977 A cryptographic weakness has been identified in the HCL BigFix Service Management (SM)

HCL BigFix SM is affected by cryptographic weakness due to weak or outdated encryption algorithms. An attacker with network access could exploit this weakness to decrypt or manipulate encrypted communications under certain conditions...