Rezultati pretraživanja za 'Proizvođač: zoom'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2017-15049 | 9.3 | The ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 does not properly sanitize user input when constructing a shell command, which allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler. | 2021-05-14 15:14:00 | 2017-12-19 15:29:00 |
| CVE-2017-15048 | 6.8 | Stack-based buffer overflow in the ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler. | 2021-05-14 15:14:00 | 2017-12-19 15:29:00 |
| CVE-2021-28133 | 4.3 | Zoom through 5.5.4 sometimes allows attackers to read private information on a participant's screen, even though the participant never attempted to share the private part of their screen. When a user shares a specific application window via the Share | 2021-03-26 13:20:00 | 2021-03-18 14:15:00 |
| CVE-2019-13567 | 6.8 | The Zoom Client before 4.4.53932.0709 on macOS allows remote code execution, a different vulnerability than CVE-2019-13450. If the ZoomOpener daemon (aka the hidden web server) is running, but the Zoom Client is not installed or can't be opened, an a | 2020-08-24 17:37:00 | 2019-07-12 04:15:00 |
| CVE-2020-9767 | 7.2 | A vulnerability related to Dynamic-link Library (“DLL”) loading in the Zoom Sharing Service would allow an attacker who had local access to a machine on which the service was running with elevated privileges to elevate their system privileges as well | 2020-08-21 14:56:00 | 2020-08-14 18:15:00 |
| CVE-2020-11500 | 5.0 | Zoom Client for Meetings through 4.6.9 uses the ECB mode of AES for video and audio encryption. Within a meeting, all participants use a single 128-bit key. | 2020-04-07 13:46:00 | 2020-04-03 13:15:00 |
| CVE-2018-15715 | 7.5 | Zoom clients on Windows (before version 4.1.34814.1119), Mac OS (before version 4.1.34801.1116), and Linux (2.4.129780.0915 and below) are vulnerable to unauthorized message processing. A remote unauthenticated attacker can spoof UDP messages from a | 2019-10-09 23:35:00 | 2018-11-30 20:29:00 |
| CVE-2004-0680 | 10.0 | Zoom X3 ADSL modem has a terminal running on port 254 that can be accessed using the default HTML management password, even if the password has been changed for the HTTP interface, which could allow remote attackers to gain unauthorized access. | 2017-07-11 01:30:00 | 2004-08-06 04:00:00 |
| CVE-2014-5811 | 5.4 | The ZOOM Cloud Meetings (aka us.zoom.videomeetings) application @7F060008 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certif | 2014-09-20 23:37:00 | 2014-09-09 10:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/21
Zapisa po stranici: