CVE-2025-49458: Buffer Copy without Checking Size of Input

Buffer overflow in certain Zoom Workplace Clients may allow an authenticated user to conduct a denial of service via network access...

Zoom Workplace < 6.5.0 Vulnerability (ZSB-25031)

The version of Zoom Workplace installed on the remote host is prior to 6.5.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-25031 advisory. - Buffer overflow in certain Zoom Workplace Clients may allow an authenticated user to conduct a denial of service via network acces...

Zoom Workplace < 6.5.0 Vulnerability (ZSB-25034)

The version of Zoom Workplace installed on the remote host is prior to 6.5.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-25034 advisory. - Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via networ...

CVE-2025-58135: Improper Enforcement of a Single, Unique Action

Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via network access...

Zoom Workplace < 6.5.0 Vulnerability (ZSB-25033)

The version of Zoom Workplace installed on the remote host is prior to 6.5.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-25033 advisory. - Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of servi...

PT-2025-36990

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Clients for Windows affected versions not specified Description: Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via network...

PT-2025-36981

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Clients affected versions not specified Description: A buffer overflow issue exists in certain Zoom Workplace Clients. An authenticated user can potentially cause a denial of service by accessing the network. Recommendations: A...

PT-2025-36983

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Client affected versions not specified Description: An uncontrolled resource consumption issue in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access...

Zoom Workplace 安全漏洞

Zoom Workplace is a desktop application from Zoom USA. A security vulnerability exists in Zoom Workplace that stems from improper authorization and could lead to a breach of integrity...

Enterprise Search 8.18.6, 8.19.3 Security Update (ESA-2025-15) (CVE-2025-54988)

Enterprise Search XML external entity XXE injection in Apache Tika ESA-2025-15 On August 20, 2025, CVE-2025-54988 in Apache Tika PDF parser module was announced, disclosing an XML External Entity injection flaw in the Apache Tika tika-parser-pdf-module. This vulnerability allows an attacker to...

Zoom Workplace < 6.3.10 Vulnerability (ZSB-25030)

The version of Zoom Workplace installed on the remote host is prior to 6.3.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25030 advisory. - Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of privilege...

Zoom Workplace VDI < 6.3.12 Vulnerability (ZSB-25029)

The version of Zoom Workplace VDI installed on the remote host is prior to 6.3.12. It is, therefore, affected by a vulnerability as referenced in the ZSB-25029 advisory. - Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application...

Zoom Workplace VDI < 6.3.10 Vulnerability (ZSB-25030)

The version of Zoom Workplace VDI installed on the remote host is prior to 6.3.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25030 advisory. - Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of...

Zoom Workplace < 6.4.10 Vulnerability (ZSB-25029)

The version of Zoom Workplace installed on the remote host is prior to 6.4.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25029 advisory. - Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application...

Zoom Workplace for Linux Improper Certificate Validation Vulnerability

Zoom Workplace for Linux is a Linux application for enterprise communication and collaboration, offering features such as video conferencing, online meetings, chat and mobile collaboration. Zoom Workplace for Linux suffers from an improper certificate validation vulnerability that can be exploite...

Zoom Workplace Desktop App < 6.4.13 Information Disclosure (ZSB-25023)

The version of Zoom Workplace Desktop App installed on the remote host is prior to 6.4.13. It is, therefore, affected by a vulnerability as referenced in the ZSB-25023 advisory. - Improper certificate validation in Zoom Workplace for Linux before version 6.4.13 may allow an unauthorized user to...

Zoom Workplace < 6.4.5 Vulnerability (ZSB-25025)

The version of Zoom Workplace installed on the remote host is prior to 6.4.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-25025 advisory. - Cross-site scripting in certain Zoom Clients before version 6.4.5 may allow an authenticated user to conduct a disclosure of...

Zoom Workplace < 6.4.0 Vulnerability (ZSB-25028)

The version of Zoom Workplace installed on the remote host is prior to 6.4.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-25028 advisory. - Classic buffer overflow in certain Zoom Clients for Windows may allow an authorised user to conduct a denial of service via networ...

Zoom Workplace < 6.4.5 Vulnerability (ZSB-25027)

The version of Zoom Workplace installed on the remote host is prior to 6.4.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-25027 advisory. - Classic buffer overflow in certain Zoom Clients for Windows may allow an authorised user to conduct a denial of service via networ...

Zoom Workplace VDI < 6.3.10 Vulnerability (ZSB-25028)

The version of Zoom Workplace VDI installed on the remote host is prior to 6.3.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25028 advisory. - Classic buffer overflow in certain Zoom Clients for Windows may allow an authorised user to conduct a denial of service via...