CVE-2021-34417

The CVE-2021-34417 entry affects multiple Zoom On‑Premise components: Controller, MMR, Recording Connector, Virtual Room Connector, and Load Balancer, with vulnerable versions prior to 4.6.365.20210703 (Controller/MMR/Recording Connector) or 4.4.6868.20210703 (Virtual Room Connector) and 2.5.5496...

CVE-2021-34418

CVE-2021-34418 affects multiple Zoom On-Premise components. The login routine of the web console for the Zoom On-Premise Meeting Connector (before 4.6.239.20200613), Meeting Connector MMR (before 4.6.239.20200613), Recording Connector (before 3.8.42.20200905), Virtual Room Connector (before 4.4.6...

CVE-2021-34418 Pre-auth Null pointer crash in on-premise web console

The login routine of the web console in the Zoom On-Premise Meeting Connector before version 4.6.239.20200613, Zoom On-Premise Meeting Connector MMR before version 4.6.239.20200613, Zoom On-Premise Recording Connector before version 3.8.42.20200905, Zoom On-Premise Virtual Room Connector before...

CVE-2021-34419 HTML injection in Zoom Linux client

In the Zoom Client for Meetings for Ubuntu Linux before version 5.1.0, there is an HTML injection flaw when sending a remote control request to a user in the process of in-meeting screen sharing. This could allow meeting participants to be targeted for social engineering attacks...

CVE-2021-34419

The CVE-2021-34419 issue affects the Zoom Client for Meetings on Ubuntu Linux before version 5.1.0. The vulnerability is an HTML injection flaw triggered when a remote control request is sent to a user during in-meeting screen sharing, potentially enabling targeted social engineering. The availab...

CVE-2021-34420 Zoom Windows installation executable signature bypass

The Zoom Client for Meetings for Windows installer before version 5.5.4 does not properly verify the signature of files with .msi, .ps1, and .bat extensions. This could lead to a malicious actor installing malicious software on a customer’s computer...

CVE-2021-34420

CVE-2021-34420 affects Zoom Client for Meetings on Windows prior to 5.5.4. The root cause is that the Windows installer does not properly verify the signatures of files with .msi, .ps1, and .bat extensions, enabling a malicious actor to install malware on a customer’s computer. Reported in multip...

ZOOM 多款产品代码问题漏洞

ZOOM Zoom Call Recording is a scalable session recording management solution.ZOOM on-premise Meeting Connector is a meeting connector.Zoom On- Premise Meeting Connector Controller and others are products of Zoom USA.Zoom On-Premise Meeting Connector Controller is an on-premise meeting connector. ...

ZOOM Client 注入漏洞

ZOOM Client is a video conferencing client application from ZOOM USA that supports multiple platforms. A security vulnerability exists in Zoom Client for Meetings, which stems from an HTML injection vulnerability in Zoom Client for Meetings on Ubuntu Linux prior to 5.1.0 when sending a remote...

Zoom Client 数据伪造问题漏洞

ZOOM Client is a video conferencing client application from ZOOM USA that supports multiple platforms. A data forgery issue vulnerability exists in the windows installer of Zoom Client for Meetings versions prior to 5.5.4, which originates from not properly verifying the signatures of files with...

The vulnerability of clients for conducting real-time audio and video conferences in Zoom Client for Meetings for Windows, due to lack of access control mechanisms, allows attackers to escalate their privileges.

The vulnerability of clients for conducting real-time audio and video conferences via Zoom Client for Meetings for Windows is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Zoom 多款产品输入验证错误漏洞

ZOOM Zoom Call Recording is a scalable session recording management solution.ZOOM on-premise Meeting Connector is a meeting connector.Zoom On- Premise Meeting Connector Controller and others are products of Zoom USA.Zoom On-Premise Meeting Connector Controller is an on-premise meeting connector. ...

KLA12443 RCE vulnerability in Zoom

Remote code execution vulnerability was found in Zoom. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories Zoom Security Bulletin Related products Zoom-MSI CVE list CVE-2021-34420 high Solution Update to the latest version Download Zoom Impacts ACE...

Boston Scientific ZOOM LATITUDE Programmer/Recorder/Monitor (PRM) Model 3120 has an unspecified vulnerability (CNVD-2022-77534)

The Boston Scientific ZOOM LATITUDE Programmer/Recorder/Monitor PRM Model 3120 is a portable cardiac rhythm management Crm programming system from Boston Scientific, Inc. Boston Scientific ZOOM LATITUDE Programmer/Recorder/Monitor PRM Model 3120 is a portable rhythm management Crm programming...

Boston Scientific ZOOM LATITUDE Programmer/Recorder/Monitor (PRM) Model 3120 Encryption Error Vulnerability

The Boston Scientific ZOOM LATITUDE Programmer/Recorder/Monitor PRM Model 3120 is a portable cardiac rhythm management Crm programming system from Boston Scientific, Inc. The Boston Scientific ZOOM LATITUDE Programmer/Recorder/Monitor PRM Model 3120 is vulnerable to an encryption error that could...

Boston Scientific ZOOM LATITUDE Programmer/Recorder/Monitor (PRM) Model 3120 has an unspecified vulnerability

The Boston Scientific ZOOM LATITUDE Programmer/Recorder/Monitor PRM Model 3120 is a portable cardiac rhythm management Crm programming system from Boston Scientific, Inc. The Boston Scientific ZOOM LATITUDE Programmer/Recorder/Monitor PRM Model 3120 contains a security vulnerability that could be...

Boston Scientific ZOOM LATITUDE Programmer/Recorder/Monitor (PRM) Model 3120 Access Control Error Vulnerability

The Boston Scientific ZOOM LATITUDE Programmer/Recorder/Monitor PRM Model 3120 is a portable cardiac rhythm management Crm programming system from Boston Scientific, Inc. The Boston Scientific ZOOM LATITUDE Programmer/Recorder/Monitor PRM Model 3120 is vulnerable to an access control error that...

Boston Scientific ZOOM LATITUDE Programmer/Recorder/Monitor (PRM) Model 3120 Data Validation Error Vulnerability

The Boston Scientific ZOOM LATITUDE Programmer/Recorder/Monitor PRM Model 3120 is a portable cardiac rhythm management Crm programming system from Boston Scientific, Inc. The Boston Scientific ZOOM LATITUDE Programmer/Recorder/Monitor PRM Model 3120 is vulnerable to a data validation error that...

VMconf 22 Vulnerability Management conference: Call For Papers started

Hello everyone! This episode will be about the VMconf 22 Vulnerability Management conference. CFP started on November 1, which will last a month and a half. So please submit your talk or share this video with someone who might be interested. Lets talk about the conference itself. All started with...

CVE-2019-19810

Zoom Call Recording 6.3.1 from Eleveo is vulnerable to Java Deserialization attacks targeting the inbuilt RMI service. A remote unauthenticated attacker can exploit this vulnerability by sending crafted RMI requests to execute arbitrary code on the target host...