Lucene search
+L

10 matches found

Positive Technologies
Positive Technologies
•added 2026/06/05 12:00 a.m.•36 views

PT-2026-46974

Name of the Vulnerable Software and Affected Versions EOS affected versions not specified CVX server affected versions not specified Description In a CVX cluster, a lack of resilience to malformed messages between an EOS switch and a connected CVX server can lead to a denial of service DoS...

7.1CVSS5.7AI score0.00235EPSS
SaveExploits0References3
AstraLinux
AstraLinux
•added 2025/11/01 10:54 a.m.•16 views

Astra Linux – Vulnerability in curl

Successfully using libcurl to perform a transfer over a specific HTTP proxy proxyA with Digest authentication. Then, changing the proxy host to another one proxyB for a second transfer, while reusing the same handle, causes libcurl to incorrectly pass the Proxy-Authorization: header field meant f...

5.3CVSS6.7AI score0.00471EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•34 views

EUVD-2022-27930

Malicious code in bioql PyPI...

7.5CVSS6.7AI score0.03686EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2022/05/18 5:15 p.m.•11 views

CVE-2022-22787

The Zoom Client for Meetings for Android, iOS, Linux, macOS, and Windows before version 5.10.0 fails to properly validate the hostname during a server switch request. This issue could be used in a more sophisticated attack to trick an unsuspecting users client to connect to a malicious server whe...

7.5CVSS5.8AI score0.03686EPSS
SaveExploits0References2
Prion
Prion
•added 2022/05/18 5:15 p.m.•24 views

Cross site request forgery (csrf)

The Zoom Client for Meetings for Android, iOS, Linux, macOS, and Windows before version 5.10.0 fails to properly validate the hostname during a server switch request. This issue could be used in a more sophisticated attack to trick an unsuspecting users client to connect to a malicious server whe...

6CVSS7.6AI score0.03686EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2022/05/18 4:03 p.m.•181 views

CVE-2022-22787

CVE-2022-22787 affects the Zoom Client for Meetings on Android, iOS, Linux, macOS and Windows, prior to version 5.10.0. The root cause is improper hostname validation during a server switch request, which could allow a malicious server to impersonate a legitimate Zoom server and lure the client d...

7.5CVSS6.5AI score0.03686EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2022/05/18 12:00 a.m.•23 views

Zoom Client Trust Management Vulnerability

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A trust management issue vulnerability exists in Zoom Client for Meetings prior to version 5.10.0, which stems from the application's inability to properly validate hostnames during a server...

7.5CVSS7.6AI score0.03686EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/18 12:00 a.m.•8 views

CVE-2022-22787: Improper Certificate Validation

The Zoom Client for Meetings for Android, iOS, Linux, macOS, and Windows before version 5.10.0 fails to properly validate the hostname during a server switch request. This issue could be used in a more sophisticated attack to trick an unsuspecting users client to connect to a malicious server whe...

7.5CVSS6.8AI score0.03686EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/05/17 12:00 p.m.•19 views

CVE-2022-22787

The Zoom Client for Meetings for Android, iOS, Linux, macOS, and Windows before version 5.10.0 fails to properly validate the hostname during a server switch request. This issue could be used in a more sophisticated attack to trick an unsuspecting users client to connect to a malicious server whe...

7.5CVSS7.3AI score0.03686EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/01/07 12:00 a.m.•5 views

PT-2022-3248

Name of the Vulnerable Software and Affected Versions Zoom Client for Meetings versions prior to 5.10.0 Description The issue is related to the improper validation of the hostname during a server switch request. This could be used in a sophisticated attack to trick an unsuspecting user's client...

7.5CVSS0.03686EPSS
SaveExploits0References12
Rows per page
Query Builder