Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: zoom'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2022-22787 6.0 The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.10.0 fails to properly validate the hostname during a server switch request. This issue could be used in a more sophisticated attack to trick an unsuspecting 2022-05-27 15:19:00
CVE-2022-22784 5.5 The Zoom Client for Meetings (for Android, iOS, Linux, MacOS, and Windows) before version 5.10.0 failed to properly parse XML stanzas in XMPP messages. This can allow a malicious user to break out of the current XMPP message context and create a new 2022-05-27 15:09:00
CVE-2020-6110 6.8 An exploitable partial path traversal vulnerability exists in the way Zoom Client version 4.6.10 processes messages including shared code snippets. A specially crafted chat message can cause an arbitrary binary planting which could be abused to achie 2022-05-12 17:22:00
CVE-2020-6109 7.5 An exploitable path traversal vulnerability exists in the Zoom client, version 4.6.10 processes messages including animated GIFs. A specially crafted chat message can cause an arbitrary file write, which could potentially be abused to achieve arbitra 2022-05-12 17:22:00
CVE-2022-22781 5.0 The Zoom Client for Meetings for MacOS (Standard and for IT Admin) prior to version 5.9.6 failed to properly check the package version during the update process. This could lead to a malicious actor updating an unsuspecting user’s currently installed 2022-05-09 18:21:00
CVE-2021-34423 7.5 A buffer overflow vulnerability was discovered in Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Meetings for Blackberry (for Android and iOS) before version 5.8.1, Zoom Client for Meeting 2022-04-29 17:57:00
CVE-2021-34425 4.0 The Zoom Client for Meetings before version 5.7.3 (for Android, iOS, Linux, macOS, and Windows) contain a server side request forgery vulnerability in the chat\'s "link preview" functionality. In versions prior to 5.7.3, if a user were to enable the 2022-04-12 18:15:00
CVE-2022-22780 7.8 The Zoom Client for Meetings chat functionality was susceptible to Zip bombing attacks in the following product versions: Android before version 5.8.6, iOS before version 5.9.0, Linux before version 5.8.6, macOS before version 5.7.3, and Windows befo 2022-02-17 02:12:00
CVE-2021-34420 4.3 The Zoom Client for Meetings for Windows installer before version 5.5.4 does not properly verify the signature of files with .msi, .ps1, and .bat extensions. This could lead to a malicious actor installing malicious software on a customer’s computer. 2021-12-16 18:39:00
CVE-2021-34419 5.0 In the Zoom Client for Meetings for Ubuntu Linux before version 5.1.0, there is an HTML injection flaw when sending a remote control request to a user in the process of in-meeting screen sharing. This could allow meeting participants to be targeted f 2021-11-16 18:39:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/21
Zapisa po stranici: