cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score CVE-2025-22503,https://securityvulnerability.io/vulnerability/CVE-2025-22503,Cross-Site Request Forgery in Digital Zoom Studio Admin Debug for WordPress,"A Cross-Site Request Forgery vulnerability exists in the Digital Zoom Studio Admin debug plugin for WordPress. This flaw occurs when the debug mode is enabled, potentially allowing attackers to execute unauthorized commands on behalf of authenticated users. Affected versions range from n/a to 1.0.13, making it crucial for users to take action to secure their installations and prevent exploitation of this vulnerability.",Digital Zoom Studio,Admin Debug WordPress – Enable Debug,4.3,MEDIUM,0.0004299999854993075,false,false,false,false,false,false,false,2025-01-07T14:57:37.736Z,0 CVE-2024-45422,https://securityvulnerability.io/vulnerability/CVE-2024-45422,Unauthenticated Denial of Service Vulnerability in Zoom Apps,Improper input validation in some Zoom Apps before version 6.2.0 may allow an unauthenticated user to conduct a denial of service via network access.,Zoom,"Zoom Workplace Apps, Sdks, Rooms Clients, And Rooms Controllers",6.5,MEDIUM,0.0004299999854993075,false,false,false,false,,false,false,2024-11-19T19:45:25.914Z,0 CVE-2024-45420,https://securityvulnerability.io/vulnerability/CVE-2024-45420,Zoom Apps Denial of Service Vulnerability,"An uncontrolled resource consumption vulnerability in Zoom Apps prior to version 6.2.0 allows authenticated users to exploit network access, potentially leading to denial of service. This can inadvertently impact the service performance and availability for other users, underscoring the importance of timely updates and security measures.",Zoom,"Zoom Workplace Apps, Sdks, Rooms Clients, And Rooms Controllers",4.3,MEDIUM,0.0004299999854993075,false,false,false,false,,false,false,2024-11-19T19:32:02.656Z,0 CVE-2024-45419,https://securityvulnerability.io/vulnerability/CVE-2024-45419,Unauthorized Information Disclosure via Network Access,"The vulnerability results from inadequate input validation within certain Zoom Apps, potentially enabling unauthenticated users to access sensitive information through network exploitation. This can lead to unauthorized data exposure, posing a significant risk to user privacy and security. It is essential for users and administrators to ensure that they are using the latest versions of affected Zoom Apps to mitigate this risk.",Zoom,"Zoom Workplace Apps, Sdks, Rooms Clients, And Rooms Controllers",8.1,HIGH,0.0004299999854993075,false,false,false,false,,false,false,2024-11-19T19:28:48.335Z,0 CVE-2024-51848,https://securityvulnerability.io/vulnerability/CVE-2024-51848,Stored XSS Vulnerability in Digital Zoom Studio Parallaxer,"A vulnerability has been identified in the Digital Zoom Studio Parallaxer plugin, which allows for improper neutralization of input during web page generation, leading to Stored Cross-site Scripting (XSS) attacks. This security flaw affects versions from n/a through 1.00, enabling attackers to inject malicious scripts that may be executed in the context of a user's session, potentially compromising sensitive information and the integrity of web applications.",Digital Zoom Studio,Parallaxer,,,0.0004299999854993075,false,false,false,false,,false,false,2024-11-19T17:15:00.000Z,0 CVE-2024-39818,https://securityvulnerability.io/vulnerability/CVE-2024-39818,Zoom Workplace Apps and SDKs Vulnerability,Protection mechanism failure for some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct information disclosure via network access.,Zoom,Zoom Workplace Apps And Sdks,6.5,MEDIUM,0.0004900000058114529,false,true,false,true,,false,false,2024-08-14T17:15:00.000Z,0 CVE-2024-42434,https://securityvulnerability.io/vulnerability/CVE-2024-42434,Privileged User May Discover Sensitive Information via Network Access,"Sensitive information disclosure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.",Zoom,"Zoom Workplace Apps, Sdks, Rooms Clients, And Rooms Controllers",4.9,MEDIUM,0.0004900000058114529,false,false,false,false,,false,false,2024-08-14T17:15:00.000Z,0 CVE-2024-39824,https://securityvulnerability.io/vulnerability/CVE-2024-39824,Potential Sensitive Information Disclosure in Zoom Workplace Apps,"Sensitive information disclosure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.",Zoom,"Rooms Controller,Rooms,Meeting Software Development Kit,Workplace Virtual Desktop Infrastructure,Workplace Desktop,Workplace",4.9,MEDIUM,0.0004900000058114529,false,false,false,false,,false,false,2024-08-14T17:15:00.000Z,0 CVE-2024-42441,https://securityvulnerability.io/vulnerability/CVE-2024-42441,Zoom Workplace Desktop App for macOS: Privilege Escalation Vulnerability,"Improper privilege management in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privileged user to conduct an escalation of privilege via local access.",Zoom,"Zoom Workplace Desktop App For Mac OS, Zoom Meeting Sdk For Mac OS, Zoom Rooms Client For Mac OS",6.7,MEDIUM,0.0004299999854993075,false,false,false,false,,false,false,2024-08-14T17:15:00.000Z,0 CVE-2024-39823,https://securityvulnerability.io/vulnerability/CVE-2024-39823,Potential Sensitive Information Disclosure in Zoom Workplace Apps,"Sensitive information disclosure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.",Zoom,"Rooms Controller,Rooms,Meeting Software Development Kit,Workplace Virtual Desktop Infrastructure,Workplace Desktop,Workplace",4.9,MEDIUM,0.0004900000058114529,false,false,false,false,,false,false,2024-08-14T17:15:00.000Z,0 CVE-2024-42440,https://securityvulnerability.io/vulnerability/CVE-2024-42440,Escalation of Privilege Vulnerability in Zoom Workplace Desktop App for macOS,"Improper privilege management in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privileged user to conduct an escalation of privilege via local access.",Zoom,"Workplace Desktop,Meeting Software Development Kit,Rooms",6.7,MEDIUM,0.0004299999854993075,false,false,false,false,,false,false,2024-08-14T17:15:00.000Z,0 CVE-2024-42437,https://securityvulnerability.io/vulnerability/CVE-2024-42437,Buffer overflow vulnerability in Zoom Workplace products may lead to denial of service,"Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access.",Zoom,"Rooms Controller,Rooms,Meeting Software Development Kit,Workplace Virtual Desktop Infrastructure,Workplace Desktop,Workplace",6.5,MEDIUM,0.0004400000034365803,false,false,false,false,,false,false,2024-08-14T17:15:00.000Z,0 CVE-2024-42436,https://securityvulnerability.io/vulnerability/CVE-2024-42436,Zoom Buffer Overflow Vulnerability May Lead to Denial of Service,"Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access.",Zoom,"Rooms Controller,Rooms,Meeting Software Development Kit,Workplace Virtual Desktop Infrastructure,Workplace Desktop,Workplace",6.5,MEDIUM,0.0004400000034365803,false,false,false,false,,false,false,2024-08-14T17:15:00.000Z,0 CVE-2024-42435,https://securityvulnerability.io/vulnerability/CVE-2024-42435,Potential Sensitive Information Disclosure in Zoom Workplace Apps,"Sensitive information disclosure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.",Zoom,"Zoom Workplace Apps, Sdks, Rooms Clients, And Rooms Controllers",4.9,MEDIUM,0.0004900000058114529,false,false,false,false,,false,false,2024-08-14T17:15:00.000Z,0 CVE-2024-39825,https://securityvulnerability.io/vulnerability/CVE-2024-39825,Buffer Overflow Vulnerability in Zoom Workplace Apps and Rooms Clients Allows for Escalation of Privilege,"A buffer overflow vulnerability exists in the Zoom Workplace Apps and Rooms Clients that potentially allows an authenticated user to escalate their privileges. This issue can be exploited via network access, posing significant security risks to organizations using these platforms. Users of affected products should ensure they apply security updates immediately to mitigate potential exploitation.",Zoom,Zoom Workplace Apps And Rooms Clients,8.5,HIGH,0.0005000000237487257,false,false,false,false,,false,false,2024-08-14T17:15:00.000Z,0 CVE-2024-39822,https://securityvulnerability.io/vulnerability/CVE-2024-39822,"Sensitive Information Exposure in Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers","Sensitive information exposure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct an information disclosure via network access.",Zoom,"Rooms Controller,Rooms,Meeting Software Development Kit,Workplace,Workplace Desktop",6.5,MEDIUM,0.0004900000058114529,false,false,false,false,,false,false,2024-08-14T17:15:00.000Z,0 CVE-2024-42439,https://securityvulnerability.io/vulnerability/CVE-2024-42439,Privilege Escalation Vulnerability in macOS Workplace Desktop App,Untrusted search path in the installer for Zoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS before 6.1.0 may allow a privileged user to conduct an escalation of privilege via local access.,Zoom,Zoom Workplace Desktop App For Mac OS And Zoom Meeting Sdk For Mac OS,6.5,MEDIUM,0.0004299999854993075,false,false,false,false,,false,false,2024-08-14T17:15:00.000Z,0 CVE-2024-42438,https://securityvulnerability.io/vulnerability/CVE-2024-42438,Buffer Overflow Vulnerability May Lead to Denial of Service,"Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access.",Zoom,"Rooms Controller,Rooms,Meeting Software Development Kit,Workplace Virtual Desktop Infrastructure,Workplace Desktop,Workplace",6.5,MEDIUM,0.0004400000034365803,false,false,false,false,,false,false,2024-08-14T17:15:00.000Z,0 CVE-2024-39819,https://securityvulnerability.io/vulnerability/CVE-2024-39819,Privilege Escalation Vulnerability in Zoom Workplace Apps and SDKs for Windows,Improper privilege management in the installer for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct a privilege escalation via local access.,"Zoom Communications, Inc",Zoom Workplace Apps And Sdk For Windows,6.7,MEDIUM,0.0004299999854993075,false,false,false,false,,false,false,2024-07-15T18:15:00.000Z,0 CVE-2024-39821,https://securityvulnerability.io/vulnerability/CVE-2024-39821,Local Access Race Condition May Lead to Denial of Service Attack,Race condition in the installer for Zoom Workplace App for Windows and Zoom Rooms App for Windows may allow an authenticated user to conduct a denial of service via local access.,Zoom,,,,0.0004299999854993075,false,false,false,false,,false,false,2024-07-15T18:15:00.000Z,0 CVE-2024-27241,https://securityvulnerability.io/vulnerability/CVE-2024-27241,Zoom Apps and SDKs vulnerable to denial of service via network access,"A vulnerability exists in certain Zoom Apps and SDKs due to improper input validation, potentially enabling an authenticated user to execute a denial of service attack. This flaw could be exploited through network access, disrupting normal operations and affecting service availability for other users. It is crucial for organizations utilizing Zoom products to assess their configurations and implement appropriate security measures to mitigate any risks associated with this vulnerability.",Zoom,,,,0.0004299999854993075,false,false,false,false,,false,false,2024-07-15T18:15:00.000Z,0 CVE-2024-39826,https://securityvulnerability.io/vulnerability/CVE-2024-39826,Zoom Workplace Apps and SDKs for Windows Vulnerable to Path Traversal Attacks,Path traversal in Team Chat for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct information disclosure via network access.,Zoom,,,,0.0004299999854993075,false,false,false,false,,false,false,2024-07-15T18:15:00.000Z,0 CVE-2024-27238,https://securityvulnerability.io/vulnerability/CVE-2024-27238,Potential Privilege Escalation Vulnerability in Zoom Installer for Windows,Race condition in the installer for some Zoom Apps and SDKs for Windows before version 6.0.0 may allow an authenticated user to conduct a privilege escalation via local access.,Zoom,,,,0.0004299999854993075,false,false,false,false,,false,false,2024-07-15T18:15:00.000Z,0 CVE-2024-39820,https://securityvulnerability.io/vulnerability/CVE-2024-39820,Uncontrolled Search Path Element in Installer May Cause Denial of Service via Local Access,Uncontrolled search path element in the installer for Zoom Workplace Desktop App for macOS before version 6.0.10 may allow an authenticated user to conduct a denial of service via local access.,"Zoom Communications, Inc",Zoom Workplace Desktop App For Mac OS,6.6,MEDIUM,0.0004299999854993075,false,false,false,false,,false,false,2024-07-15T18:15:00.000Z,0 CVE-2024-39827,https://securityvulnerability.io/vulnerability/CVE-2024-39827,Local Access Denial of Service Vulnerability in Zoom Workplace Desktop App for Windows,Improper input validation in the installer for Zoom Workplace Desktop App for Windows before version 6.0.10 may allow an authenticated user to conduct a denial of service via local access.,Zoom,,,,0.0004299999854993075,false,false,false,false,,false,false,2024-07-15T18:15:00.000Z,0