1067 matches found
Zoom Workplace for Windows < 6.4.5 / Workplace VDI for Windows < 6.3.12 Buffer Overflow (ZSB-25024)
The version of Zoom Workplace or Zoom Workplace VDI installed on the remote Windows host is prior to 6.4.5 or 6.3.12 respectively. It is, therefore, affected by a buffer overflow vulnerability as referenced in the ZSB-25024 advisory. A classic buffer overflow vulnerability in certain Zoom Clients...
CVE-2025-46788
Improper certificate validation in Zoom Workplace for Linux before version 6.4.13 may allow an unauthorized user to conduct an information disclosure via network access...
CVE-2025-46788
Improper certificate validation in Zoom Workplace for Linux before version 6.4.13 may allow an unauthorized user to conduct an information disclosure via network access...
CVE-2025-46788
CVE-2025-46788 affects Zoom Workplace for Linux prior to version 6.4.13, with an improper certificate validation vulnerability that can lead to information disclosure over the network. Affected component: Zoom Workplace for Linux; root cause: improper TLS certificate validation. Impact per source...
CVE-2025-46788 Zoom Workplace for Linux - Improper Certificate Validation
Improper certificate validation in Zoom Workplace for Linux before version 6.4.13 may allow an unauthorized user to conduct an information disclosure via network access...
CVE-2025-46788 Zoom Workplace for Linux - Improper Certificate Validation
Improper certificate validation in Zoom Workplace for Linux before version 6.4.13 may allow an unauthorized user to conduct an information disclosure via network access...
Zoom Workplace for Linux 信任管理问题漏洞
Zoom Workplace for Linux is a Linux application for enterprise communication and collaboration, offering features such as video conferencing, online meetings, chat and mobile collaboration. Zoom Workplace for Linux suffers from an improper certificate validation vulnerability that can be exploite...
CVE-2025-46788: Improper Certificate Validation
Improper certificate validation in Zoom Workplace for Linux before version 6.4.13 may allow an unauthorized user to conduct an information disclosure via network access...
PT-2025-29107 · Zoom · Zoom Workplace App For Linux
Name of the Vulnerable Software and Affected Versions: Zoom Workplace for Linux versions prior to 6.4.13 Description: Improper certificate validation may allow an unauthorized user to conduct an information disclosure via network access. Recommendations: Update Zoom Workplace for Linux to version...
The vulnerability of software products for conducting Zoom Workplace video conferences on the Windows operating system, related to the manipulation of the null pointer, allows a hacker to cause a service failure.
The vulnerability of software products for conducting Zoom Workplace video conferences on the Windows operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...
The vulnerability of software products for conducting Zoom Workplace video conferences on the Windows operating system, related to insecure resource initialization, allows a perpetrator to influence the integrity of protected information.
The vulnerability of software products for conducting Zoom Workplace video conferences on the Windows operating system is related to an insecure initialization of resources. Exploiting this vulnerability could allow an attacker to influence the integrity of protected information...
The vulnerability of software products for conducting Zoom Workplace video conferences on the Windows operating system, related to the manipulation of the null pointer, allows a hacker to trigger a service failure.
The vulnerability of software products for conducting Zoom Workplace video conferences on the Windows operating system is related to the handling of the null pointer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of software products for conducting Zoom Workplace video conferences, related to the manipulation of cross-site requests, allows a perpetrator to influence the integrity of protected information.
The vulnerability of Zoom Workplace, a software product for conducting video conferences, is related to the manipulation of cross-site requests. Exploiting this vulnerability could allow an attacker to influence the integrity of the protected information...
The vulnerability of software products for conducting Zoom Workplace video conferences, related to the manipulation of cross-site requests, allows a perpetrator to influence the integrity of protected information.
The vulnerability of Zoom Workplace, a software product for conducting video conferences, is related to the manipulation of cross-site requests. Exploiting this vulnerability could allow an attacker operating remotely to influence the integrity of the protected information...
CVE-2024-44115
The RFC enabled function module allows a low privileged user to add URLs to any user's workplace favourites. This vulnerability could be utilized to identify usernames and access information about targeted user's workplaces, and nodes. There is low impact on integrity of the application...
CVE-2024-44116
The RFC enabled function module allows a low privileged user to add any workbook to any user's workplace favourites. This vulnerability could be utilized to identify usernames and access information about targeted user's workplaces. There is low impact on integrity of the application...
CVE-2024-42380
The RFC enabled function module allows a low privileged user to read any user's workplace favourites and user menu along with all the specific data of each node. Usernames can be enumerated by exploiting vulnerability. There is low impact on confidentiality of the application...
CVE-2024-42371
The RFC enabled function module allows a low privileged user to delete the workplace favourites of any user. This vulnerability could be utilized to identify usernames and access information about targeted user's workplaces and nodes. There is low impact on integrity and availability of the...
CVE-2021-37940
An information disclosure via GET request server-side request forgery vulnerability was discovered with the Workplace Search Github Enterprise Server integration. Using this vulnerability, a malicious Workplace Search admin could use the GHES integration to view hosts that might not be publicly...
