Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
zulip zulip desktop vulnerabilities and exploits
(subscribe to this query)
668
VMScore
CVE-2020-10857
Zulip Desktop prior to 5.0.0 improperly uses shell.openExternal and shell.openItem with untrusted content, leading to remote code execution.
Zulip Zulip Desktop
445
VMScore
CVE-2020-10858
Zulip Desktop prior to 5.0.0 allows malicious users to perform recording via the webcam and microphone due to a missing permission request handler.
Zulip Zulip Desktop
383
VMScore
CVE-2020-24582
Zulip Desktop prior to 5.4.3 allows XSS because string escaping is mishandled during composition of the HTML for the user interface.
Zulipchat Zulip Desktop
668
VMScore
CVE-2020-12637
Zulip Desktop prior to 5.2.0 has Missing SSL Certificate Validation because all validation was inadvertently disabled during an attempt to recognize the ignoreCerts option.
Zulipchat Zulip Desktop
383
VMScore
CVE-2020-9443
Zulip Desktop prior to 4.0.3 loaded untrusted content in an Electron webview with web security disabled, which can be exploited for XSS in a number of ways. This especially affects Zulip Desktop 2.3.82.
Zulipchat Zulip Desktop
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33572
CVE-2024-24919
CVE-2024-0230
CVE-2024-32714
HTML injection
local file inclusion
CVE-2024-31098
CVE-2024-31244
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started