CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 1CVE-2022-4578 – Video Conferencing with Zoom < 4.0.10 - Contributor+ Stored XSS
https://notcve.org/view.php?id=CVE-2022-4578
29 Dec 2022 — The Video Conferencing with Zoom WordPress plugin before 4.0.10 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. El complemento Video Conferencing with Zoom para WordPress anterior a 4.0.10 no valida ni escapa algunos de sus atributos de código corto antes de devolverlos a la página, lo ... • https://wpscan.com/vulnerability/fad16c68-9f14-4866-b241-40468fb71494 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0CVE-2022-28761 – Zoom On-Premise Deployments: Improper Access Control
https://notcve.org/view.php?id=CVE-2022-28761
14 Oct 2022 — Zoom On-Premise Meeting Connector MMR before version 4.8.20220916.131 contains an improper access control vulnerability. As a result, a malicious actor in a meeting or webinar they are authorized to join could prevent participants from receiving audio and video causing meeting disruptions. Zoom On-Premise Meeting Connector MMR versiones anteriores a 4.8.20220916.131, contiene una vulnerabilidad de control de acceso inapropiado. Como resultado, un actor malicioso en una reunión o seminario web al que está au... • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-284: Improper Access Control •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 0CVE-2022-28759 – Zoom On-Premise Deployments: Improper Access Control
https://notcve.org/view.php?id=CVE-2022-28759
14 Oct 2022 — Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability. As a result, a malicious actor could obtain the audio and video feed of a meeting they were not authorized to join and cause other meeting disruptions. Zoom On-Premise Meeting Connector MMR versiones anteriores a 4.8.20220815.130, contiene una vulnerabilidad de control de acceso inapropiado. Como resultado, un actor malicioso podría obtener la transmisión de audio y vídeo de una reunión a... • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-284: Improper Access Control •
CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0CVE-2022-28760 – Zoom On-Premise Deployments: Improper Access Control
https://notcve.org/view.php?id=CVE-2022-28760
14 Oct 2022 — Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability. As a result, a malicious actor could obtain the audio and video feed of a meeting they were not authorized to join and cause other meeting disruptions. Zoom On-Premise Meeting Connector MMR versiones anteriores a 4.8.20220815.130, contiene una vulnerabilidad de control de acceso inapropiado. Como resultado, un actor malicioso podría obtener la transmisión de audio y vídeo de una reunión a... • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-284: Improper Access Control •
CVSS: 8.5EPSS: 0%CPEs: 1EXPL: 0CVE-2022-28758 – Zoom On-Premise Deployments: Improper Access Control
https://notcve.org/view.php?id=CVE-2022-28758
16 Sep 2022 — Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability. As a result, a malicious actor could obtain the audio and video feed of a meeting they were not authorized to join and cause other meeting disruptions. Zoom On-Premise Meeting Connector MMR versiones anteriores a 4.8.20220815.130, contiene una vulnerabilidad de control de acceso inapropiada. Como resultado, un actor malicioso podría obtener la transmisión de audio y vídeo de una reunión a... • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-284: Improper Access Control •
CVSS: 9.6EPSS: 0%CPEs: 6EXPL: 0CVE-2022-28755 – Improper URL parsing in Zoom Clients
https://notcve.org/view.php?id=CVE-2022-28755
11 Aug 2022 — The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.11.0 are susceptible to a URL parsing vulnerability. If a malicious Zoom meeting URL is opened, the malicious link may direct the user to connect to an arbitrary network address, leading to additional attacks including the potential for remote code execution through launching executables from arbitrary paths. Zoom Client for Meetings (para Android, iOS, Linux, macOS y Windows) versiones anteriores a 5.11.0, es suscep... • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-20: Improper Input Validation CWE-601: URL Redirection to Untrusted Site ('Open Redirect') •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2022-22783 – Process memory exposure in Zoom on-premise Meeting services
https://notcve.org/view.php?id=CVE-2022-22783
28 Apr 2022 — A vulnerability in Zoom On-Premise Meeting Connector Controller version 4.8.102.20220310 and On-Premise Meeting Connector MMR version 4.8.102.20220310 exposes process memory fragments to connected clients, which could be observed by a passive attacker. Una vulnerabilidad en Zoom On-Premise Meeting Connector Controller versión 4.8.102.20220310 y On-Premise Meeting Connector MMR versión 4.8.102.20220310, expone fragmentos de memoria de proceso a clientes conectados, que podrían ser observados por un atacante ... • https://explore.zoom.us/en/trust/security/security-bulletin •
CVSS: 7.9EPSS: 0%CPEs: 4EXPL: 0CVE-2022-22782 – Local privilege escalation in Windows Zoom Clients
https://notcve.org/view.php?id=CVE-2022-22782
28 Apr 2022 — The Zoom Client for Meetings for Windows prior to version 5.9.7, Zoom Rooms for Conference Room for Windows prior to version 5.10.0, Zoom Plugins for Microsoft Outlook for Windows prior to version 5.10.3, and Zoom VDI Windows Meeting Clients prior to version 5.9.6; was susceptible to a local privilege escalation issue during the installer repair operation. A malicious actor could utilize this to potentially delete system level files or folders, causing integrity or availability issues on the user’s host mac... • https://explore.zoom.us/en/trust/security/security-bulletin •
CVSS: 7.5EPSS: 0%CPEs: 50EXPL: 1CVE-2021-34424 – Process memory exposure in Zoom Client and other products
https://notcve.org/view.php?id=CVE-2021-34424
24 Nov 2021 — A vulnerability was discovered in the Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Meetings for Blackberry (for Android and iOS) before version 5.8.1, Zoom Client for Meetings for intune (for Android and iOS) before version 5.8.4, Zoom Client for Meetings for Chrome OS before version 5.0.1, Zoom Rooms for Conference Room (for Android, AndroidBali, macOS, and Windows) before version 5.8.3, Controllers for Zoom Rooms (for Android, iOS, and Window... • https://packetstorm.news/files/id/165419 • CWE-125: Out-of-bounds Read •
CVSS: 9.8EPSS: 1%CPEs: 51EXPL: 1CVE-2021-34423 – Buffer overflow in Zoom client and other products
https://notcve.org/view.php?id=CVE-2021-34423
24 Nov 2021 — A buffer overflow vulnerability was discovered in Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Meetings for Blackberry (for Android and iOS) before version 5.8.1, Zoom Client for Meetings for intune (for Android and iOS) before version 5.8.4, Zoom Client for Meetings for Chrome OS before version 5.0.1, Zoom Rooms for Conference Room (for Android, AndroidBali, macOS, and Windows) before version 5.8.3, Controllers for Zoom Rooms (for Android, iOS... • https://packetstorm.news/files/id/165417 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •