Overview 67 matches · 1 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 6 public PoC · 0 EPSS ≥ 0.5
67matches
1in Waratek scope1.5%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
6public PoC9.0%
0EPSS ≥ 0.50.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
1
1.5%
Outside Waratek scope
0
0.0%
Not applicable
66
98.5%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
67
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
6
9.0%
Proof of concept only
4
6.0%
Forecast only
0
0.0%
No public exploit
57
85.1%
split by
peak 16 / year
20031
Not applicable1
Medium1
not blocked1
Working exploit published1
20040
20051
Not applicable1
Medium1
not blocked1
Working exploit published1
20063
Not applicable3
Medium3
not blocked3
Working exploit published3
20070
20080
20091
Not applicable1
Medium1
not blocked1
No public exploit1
20100
20110
20120
20130
20143
Not applicable3
Medium3
not blocked3
No public exploit3
20150
20160
20170
20183
Not applicable3
Medium3
not blocked3
No public exploit3
20193
Not applicable3
Medium3
not blocked3
No public exploit3
20200
20218
Not applicable8
Medium8
not blocked8
No public exploit8
20226
Not applicable6
Medium6
not blocked6
Working exploit published1
No public exploit5
202316
Not applicable16
Medium16
not blocked16
Proof of concept only2
No public exploit14
202415
Not applicable15
Medium15
not blocked15
Proof of concept only2
No public exploit13
20255
No exploit published1
Not applicable4
Medium5
not blocked5
No public exploit5
20262
Not applicable2
Medium2
not blocked2
No public exploit2
200420062008201020122014201620182020202220242026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-0998 | Medium | 2026-02-16 | Not applicable | No public exploit | Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 and Mattermost Plugin Zoom versions <=1.11.0 fail to validate user identity and post ownership in the {{/api/v1/askPMI}} endpoint which allows unauthorized users to start Zoom meetings as any user and overwrite arbitrary posts via direct API calls with manipulated user IDs and post data.. Mattermost Advisory ID: MMSA-2025-00534 |
| CVE-2026-0997 | Medium | 2026-02-16 | Not applicable | No public exploit | Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 and Mattermost Plugin Zoom versions <=1.11.0 fail to validate the authenticated user when processing {{/plugins/zoom/api/v1/channel-preference}}, which allows any logged-in user to change Zoom meeting restrictions for arbitrary channels via crafted API requests.. Mattermost Advisory ID: MMSA-2025-00558 |
| CVE-2025-49464 | Medium | 2025-07-10 | Not applicable | No public exploit | Classic buffer overflow in certain Zoom Clients for Windows may allow an authorised user to conduct a denial of service via network access. |
| CVE-2025-49463 | Medium | 2025-07-10 | Not applicable | No public exploit | Insufficient control flow management in certain Zoom Clients for iOS before version 6.4.5 may allow an unauthenticated user to conduct a disclosure of information via network access. |
| CVE-2025-46789 | Medium | 2025-07-10 | Not applicable | No public exploit | Classic buffer overflow in certain Zoom Clients for Windows may allow an authorized user to conduct a denial of service via network access. |
| CVE-2025-0839 | Medium | 2025-04-05 | Not applicable | No public exploit | The ZoomSounds plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 6.91 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. |
| CVE-2025-0142 | Medium | 2025-01-30 | No exploit published | No public exploit | Cleartext storage of sensitive information in the Zoom Jenkins Marketplace plugin before version 1.4 may allow an authenticated user to conduct a disclosure of information via network access. |
| CVE-2024-9934 | Medium | 2024-11-06 | Not applicable | Proof of concept only | The Wp-ImageZoom WordPress plugin through 1.1.0 does not sanitise and escape some parameters before outputting them back in a page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin |
| CVE-2024-9027 | Medium | 2024-09-25 | Not applicable | No public exploit | The WPZOOM Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'box' shortcode in all versions up to, and including, 1.0.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. |
| CVE-2024-8276 | Medium | 2024-08-31 | Not applicable | No public exploit | The WPZOOM Portfolio Lite – Filterable Portfolio Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘align’ attribute within the 'wp:wpzoom-blocks' Gutenberg block in all versions up to, and including, 1.4.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. |
| CVE-2024-5686 | Medium | 2024-06-20 | Not applicable | No public exploit | The WPZOOM Addons for Elementor (Templates, Widgets) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ attribute within the plugin's Team Members widget in all versions up to, and including, 1.1.38 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. |
| CVE-2024-4370 | Medium | 2024-05-15 | Not applicable | No public exploit | The WPZOOM Addons for Elementor (Templates, Widgets) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widget Image Box in all versions up to, and including, 1.1.36 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. |
| CVE-2024-33539 | Medium | 2024-04-29 | Not applicable | No public exploit | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPZOOM WPZOOM Addons for Elementor (Templates, Widgets) allows Stored XSS.This issue affects WPZOOM Addons for Elementor (Templates, Widgets): from n/a through 1.1.35. |
| CVE-2024-27247 | Medium | 2024-04-09 | Not applicable | No public exploit | Improper privilege management in the installer for Zoom Desktop Client for macOS before version 5.17.10 may allow a privileged user to conduct an escalation of privilege via local access. |
| CVE-2024-27242 | Medium | 2024-04-09 | Not applicable | No public exploit | Cross site scripting in Zoom Desktop Client for Linux before version 5.17.10 may allow an authenticated user to conduct a denial of service via network access. |
| CVE-2024-2031 | Medium | 2024-03-12 | Not applicable | No public exploit | The Video Conferencing with Zoom plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'zoom_recordings_by_meeting' shortcode in all versions up to, and including, 4.4.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. |
| CVE-2024-24699 | Medium | 2024-02-14 | Not applicable | No public exploit | Business logic error in some Zoom clients may allow an authenticated user to conduct information disclosure via network access. |
| CVE-2024-24698 | Medium | 2024-02-14 | Not applicable | No public exploit | Improper authentication in some Zoom clients may allow a privileged user to conduct a disclosure of information via local access. |
| CVE-2024-24696 | Medium | 2024-02-14 | Not applicable | No public exploit | Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an authenticated user to conduct a disclosure of information via network access. |
| CVE-2024-24695 | Medium | 2024-02-14 | Not applicable | No public exploit | Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an authenticated user to conduct a disclosure of information via network access. |
| CVE-2024-24690 | Medium | 2024-02-14 | Not applicable | No public exploit | Improper input validation in some Zoom clients may allow an authenticated user to conduct a denial of service via network access. |
| CVE-2022-41619 | Medium | 2024-01-17 | Not applicable | Proof of concept only | Missing Authorization vulnerability in SedLex Image Zoom.This issue affects Image Zoom: from n/a through 1.8.8. |
| CVE-2023-49646 | Medium | 2023-12-13 | Not applicable | No public exploit | Improper authentication in some Zoom clients before version 5.16.5 may allow an authenticated user to conduct a denial of service via network access. |
| CVE-2023-43583 | Medium | 2023-12-13 | Not applicable | No public exploit | Cryptographic issues Zoom Mobile App for Android, Zoom Mobile App for iOS, and Zoom SDKs for Android and iOS before version 5.16.0 may allow a privileged user to conduct a disclosure of information via network access. |
| CVE-2023-43588 | Medium | 2023-11-15 | Not applicable | No public exploit | Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network access. |
| CVE-2023-39205 | Medium | 2023-11-14 | Not applicable | No public exploit | Improper conditions check in Zoom Team Chat for Zoom clients may allow an authenticated user to conduct a denial of service via network access. |
| CVE-2023-39199 | Medium | 2023-11-14 | Not applicable | No public exploit | Cryptographic issues with In-Meeting Chat for some Zoom clients may allow a privileged user to conduct an information disclosure via network access. |
| CVE-2023-39218 | Medium | 2023-08-08 | Not applicable | No public exploit | Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow a privileged user to enable information disclosure via network access. |
| CVE-2023-39209 | Medium | 2023-08-08 | Not applicable | No public exploit | Improper input validation in Zoom Desktop Client for Windows before 5.15.5 may allow an authenticated user to enable an information disclosure via network access. |
| CVE-2023-3947 | Medium | 2023-07-26 | Not applicable | No public exploit | The Video Conferencing with Zoom plugin for WordPress is vulnerable to Sensitive Information Exposure due to hardcoded encryption key on the 'vczapi_encrypt_decrypt' function in versions up to, and including, 4.2.1. This makes it possible for unauthenticated attackers to decrypt and view the meeting id and password. |
| CVE-2023-28600 | Medium | 2023-06-13 | Not applicable | No public exploit | Zoom for MacOSclients prior to 5.14.0 contain an improper access control vulnerability. A malicious user may be able to delete/replace Zoom Client files potentially causing a loss of integrity and availability to the Zoom Client. |
| CVE-2023-28599 | Medium | 2023-06-13 | Not applicable | No public exploit | Zoom clients prior to 5.13.10 contain an HTML injection vulnerability. A malicious user could inject HTML into their display name potentially leading a victim to a malicious website during meeting creation. |
| CVE-2022-40137 | Medium | 2023-01-30 | Not applicable | No public exploit | A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to execute arbitrary code. |
| CVE-2022-40136 | Medium | 2023-01-30 | Not applicable | No public exploit | An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory. |
| CVE-2022-40135 | Medium | 2023-01-30 | Not applicable | No public exploit | An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory. |
| CVE-2022-40134 | Medium | 2023-01-30 | Not applicable | No public exploit | An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory. |
| CVE-2022-4789 | Medium | 2023-01-23 | Not applicable | Proof of concept only | The WPZOOM Portfolio WordPress plugin before 1.2.2 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack. |
| CVE-2022-4578 | Medium | 2023-01-16 | Not applicable | Proof of concept only | The Video Conferencing with Zoom WordPress plugin before 4.0.10 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. |
| CVE-2022-28761 | Medium | 2022-10-14 | Not applicable | No public exploit | Zoom On-Premise Meeting Connector MMR before version 4.8.20220916.131 contains an improper access control vulnerability. As a result, a malicious actor in a meeting or webinar they are authorized to join could prevent participants from receiving audio and video causing meeting disruptions. |
| CVE-2022-28760 | Medium | 2022-10-14 | Not applicable | No public exploit | Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability. As a result, a malicious actor could obtain the audio and video feed of a meeting they were not authorized to join and cause other meeting disruptions. |
| CVE-2021-40149 | Medium | 2022-07-17 | Not applicable | Working exploit published | The web server of the E1 Zoom camera through 3.0.0.716 discloses its SSL private key via the root web server directory. In this way an attacker can download the entire key via the /self.key URI. |
| CVE-2022-25615 | Medium | 2022-04-11 | Not applicable | No public exploit | Cross-Site Request Forgery (CSRF) in StylemixThemes eRoom – Zoom Meetings & Webinar (WordPress plugin) <= 1.3.8 allows cache deletion. |
| CVE-2022-25614 | Medium | 2022-04-11 | Not applicable | No public exploit | Cross-Site Request Forgery (CSRF) in StylemixThemes eRoom – Zoom Meetings & Webinar (WordPress plugin) <= 1.3.7 allows an attacker to Sync with Zoom Meetings. |
| CVE-2022-0384 | Medium | 2022-03-07 | Not applicable | No public exploit | The Video Conferencing with Zoom WordPress plugin before 3.8.17 does not have authorisation in its vczapi_get_wp_users AJAX action, allowing any authenticated users, such as subscriber to download the list of email addresses registered on the blog |
| CVE-2021-34419 | Medium | 2021-11-11 | Not applicable | No public exploit | In the Zoom Client for Meetings for Ubuntu Linux before version 5.1.0, there is an HTML injection flaw when sending a remote control request to a user in the process of in-meeting screen sharing. This could allow meeting participants to be targeted for social engineering attacks. |
| CVE-2021-34418 | Medium | 2021-11-11 | Not applicable | No public exploit | The login routine of the web console in the Zoom On-Premise Meeting Connector before version 4.6.239.20200613, Zoom On-Premise Meeting Connector MMR before version 4.6.239.20200613, Zoom On-Premise Recording Connector before version 3.8.42.20200905, Zoom On-Premise Virtual Room Connector before version 4.4.6344.20200612, and Zoom On-Premise Virtual Room Connector Load Balancer before version 2.5.5492.20200616 fails to validate that a NULL byte was sent while authenticating. This could lead to a crash of the login service. |
| CVE-2021-38400 | Medium | 2021-10-04 | Not applicable | No public exploit | An attacker with physical access to Boston Scientific Zoom Latitude Model 3120 can remove the hard disk drive or create a specially crafted USB to extract the password hash for brute force reverse engineering of the system password. |
| CVE-2021-38398 | Medium | 2021-10-04 | Not applicable | No public exploit | The affected device uses off-the-shelf software components that contain unpatched vulnerabilities. A malicious attacker with physical access to the affected device could exploit these vulnerabilities. |
| CVE-2021-38396 | Medium | 2021-10-04 | Not applicable | No public exploit | The programmer installation utility does not perform a cryptographic authenticity or integrity checks of the software on the flash drive. An attacker could leverage this weakness to install unauthorized software using a specially crafted USB. |
| CVE-2021-38394 | Medium | 2021-10-04 | Not applicable | No public exploit | An attacker with physical access to the device can extract the binary that checks for the hardware key and reverse engineer it, which could be used to create a physical duplicate of a valid hardware key. The hardware key allows access to special settings when inserted. |
| CVE-2021-24447 | Medium | 2021-07-19 | Not applicable | No public exploit | The WP Image Zoom WordPress plugin before 1.47 did not validate its tab parameter before using it in the include_once() function, leading to a local file inclusion issue in the admin dashboard |
| CVE-2021-28133 | Medium | 2021-03-18 | Not applicable | No public exploit | Zoom through 5.5.4 sometimes allows attackers to read private information on a participant's screen, even though the participant never attempted to share the private part of their screen. When a user shares a specific application window via the Share Screen functionality, other meeting participants can briefly see contents of other application windows that were explicitly not shared. The contents of these other windows can (for instance) be seen for a short period of time when they overlay the shared window and get into focus. (An attacker can, of course, use a separate screen-recorder application, unsupported by Zoom, to save all such contents for later replays and analysis.) Depending on the unintentionally shared data, this short exposure of screen contents may be a more or less severe security issue. |
| CVE-2019-16251 | Medium | 2019-10-31 | Not applicable | No public exploit | plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes. |
| CVE-2019-13450 | Medium | 2019-07-09 | Not applicable | No public exploit | In the Zoom Client through 4.4.4 and RingCentral 7.0.136380.0312 on macOS, remote attackers can force a user to join a video call with the video camera active. This occurs because any web site can interact with the Zoom web server on localhost port 19421 or 19424. NOTE: a machine remains vulnerable if the Zoom Client was installed in the past and then uninstalled. Blocking exploitation requires additional steps, such as the ZDisableVideo preference and/or killing the web server, deleting the ~/.zoomus directory, and creating a ~/.zoomus plain file. |
| CVE-2019-13449 | Medium | 2019-07-09 | Not applicable | No public exploit | In the Zoom Client before 4.4.2 on macOS, remote attackers can cause a denial of service (continual focus grabs) via a sequence of invalid launch?action=join&confno= requests to localhost port 19421. |
| CVE-2018-1000510 | Medium | 2018-06-26 | Not applicable | No public exploit | WP Image Zoom version 1.23 contains a Incorrect Access Control vulnerability in AJAX settings that can result in allows anybody to cause denial of service. This attack appear to be exploitable via Can be triggered intentionally (or unintentionally via CSRF) by any logged in user. This vulnerability appears to have been fixed in 1.24. |
| CVE-2017-14014 | Medium | 2018-05-01 | Not applicable | No public exploit | Boston Scientific ZOOM LATITUDE PRM Model 3120 uses a hard-coded cryptographic key to encrypt PHI prior to having it transferred to removable media. CVSS v3 base score: 4.6; CVSS vector string: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. |
| CVE-2017-14012 | Medium | 2018-05-01 | Not applicable | No public exploit | Boston Scientific ZOOM LATITUDE PRM Model 3120 does not encrypt PHI at rest. CVSS v3 base score: 4.6; CVSS vector string: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. |
| CVE-2014-5811 | Medium | 2014-09-09 | Not applicable | No public exploit | The ZOOM Cloud Meetings (aka us.zoom.videomeetings) application @7F060008 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. |
| CVE-2013-3260 | Medium | 2014-03-03 | Not applicable | No public exploit | Heap-based buffer overflow in INMATRIX Zoom Player before 8.7 beta 11 allows remote attackers to execute arbitrary code via a large biClrUsed value in a BMP file. |
| CVE-2013-3259 | Medium | 2014-03-03 | Not applicable | No public exploit | Stack-based buffer overflow in INMATRIX Zoom Player before 8.7 beta 11 allows remote attackers to execute arbitrary code via a large biClrUsed value in a BMP file. |
| CVE-2009-3918 | Medium | 2009-11-09 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in the Zoomify module 5.x before 5.x-2.2 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the node title. |
| CVE-2006-5065 | Medium | 2006-09-28 | Not applicable | Working exploit published | PHP remote file inclusion vulnerability in libs/dbmax/mysql.php in ZoomStats 1.0.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[lib][db][path] parameter. |
| CVE-2006-4634 | Medium | 2006-09-08 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in index.php in VBZooM allows remote attackers to inject arbitrary web script or HTML via the UserID parameter, a different vector than CVE-2006-1133 and CVE-2005-2441. |
| CVE-2006-1133 | Medium | 2006-03-10 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in vbzoom 1.11 allow remote attackers to inject arbitrary web script or HTML via the UserID parameter to (1) comment.php or (2) contact.php. NOTE: the profile.php/UserName vector is already covered by CVE-2005-2441. |
| CVE-2005-2441 | Medium | 2005-08-03 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in VBzoom allow remote attackers to inject arbitrary web script and HTML via the (1) UserName parameter to profile.php or (2) UserID parameter to login.php. |
| CVE-2003-1498 | Medium | 2003-12-31 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in search.php for WRENSOFT Zoom Search Engine 2.0 Build 1018 and earlier allows remote attackers to inject arbitrary web script or HTML via the zoom_query parameter. |