CVE-2018-20338

Zoho ManageEngine OpManager 12.3 before build 123239 allows SQL injection in the Alarms section...

CVE-2018-20338

Zoho ManageEngine OpManager 12.3 before build 123239 allows SQL injection in the Alarms section...

CVE-2018-20339

Zoho ManageEngine OpManager 12.3 before build 123239 allows XSS in the Notes column of the Alarms section...

CVE-2018-20339

Zoho ManageEngine OpManager 12.3 before build 123239 is affected by a stored XSS in the Notes column of the Alarms section. The vulnerability, documented across multiple sources (including CNVD and CVE entries), allows injection of JavaScript in alarms notes which could lead to session theft or e...

CVE-2018-20338

CVE-2018-20338 affects Zoho ManageEngine OpManager 12.3 before build 123239, with a SQL injection in the Alarms section. Root cause indicated as insufficient validation of parameters in HTTP requests, enabling a remote attacker to execute arbitrary SQL and potentially access or alter database inf...

CVE-2018-20339: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine OpManager 12.3 before build 123239 allows XSS in the Notes column of the Alarms section...

CVE-2018-20338: Improper Neutralization of Special Elements used in an SQL Command

Zoho ManageEngine OpManager 12.3 before build 123239 allows SQL injection in the Alarms section...

Zoho ManageEngine OpManager 12.3 Alarms SQL Injection

I. VULNERABILITY ------------------------- Zoho ManageEngine OpManager 12.3 before build 123239 allows SQL injection in the Alarms section II. CVE REFERENCE ------------------------- CVE-2018-20338 III. VENDOR ------------------------- https://www.manageengine.com IV. TIMELINE...

PT-2018-15316

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager version 12.3 before build 123239 Description The issue allows SQL injection in the Alarms section. Recommendations For Zoho ManageEngine OpManager version 12.3 before build 123239, update to a version after build...

PT-2018-15317

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager version 12.3 before build 123239 Description The issue allows for XSS in the Notes column of the Alarms section. Recommendations For Zoho ManageEngine OpManager version 12.3 before build 123239, update to a version...

Zoho ManageEngine OpManager 12.3 Alarms Cross Site Scripting

I. VULNERABILITY ------------------------- Zoho ManageEngine OpManager 12.3 before build 123239 allows XSS in the Notes column of the Alarms section II. CVE REFERENCE ------------------------- CVE-2018-20339 III. VENDOR ------------------------- https://www.manageengine.com IV. TIMELINE...

Veeam Availability Console U1 Cumulative Patch 1850

Challenge Veeam Availability Console U1 Cumulative Patch 1850. This update supersedes Veeam Availability Console U1 Cumulative Patch 1824. Cause Please confirm you are running version 2.0.2.1750 or later prior to installing this cumulative patch 1850. You can check this under Windows Programs and...

[SECURITY] Fedora 29 Update: php-horde-kronolith-4.2.25-1.fc29

Kronolith is the Horde calendar application. It provides web-based calendars backed by a SQL database or a Kolab server. Supported features include Ajax and mobile interfaces, shared calendars, remote calendars, invitation management iCalendar/iTip, free/busy management, resource management,...

Veeam Availability Console U1 Cumulative Patch 1824

Challenge Veeam Availability Console U1 Cumulative Patch 1824. This update supersedes Veeam Availability Console U1 Cumulative Patch 1817. Cause Please confirm you are running version 2.0.2.1750 or later prior to installing this cumulative patch 1824. You can check this under Windows Programs and...

Veeam Availability Console U1 Cumulative Patch 1817

Challenge Veeam Availability Console U1 Cumulative Patch 1817. This update supersedes Veeam Availability Console U1 Cumulative Patch 1807. Cause Please confirm you are running version 2.0.2.1750 or later prior to installing this cumulative patch 1817. You can check this under Windows Programs and...

Veeam Availability Console U1 Cumulative Patch 1807

Challenge Veeam Availability Console U1 Cumulative Patch 1807. Cause Please confirm you are running version 2.0.2.1750 or later prior to installing this cumulative patch 1807. You can check this under Windows Programs and features. After upgrading, your build will be version 2.0.2.1807. Solution...

Breaking up is hard to do… with IoT

Evidence is starting to emerge of former partners stalking their ex through the smart tech in their home. If you have a break up, what steps should you take to protect yourself? Is the very tech that is supposed to protect you actually exposing you to your ex? Smart doorbells I was contacted by a...

SimpliSafe Original Security Bypass Vulnerability

SimpliSafe Original is a home security management system. The system includes video surveillance and intrusion alarms, among other things. A security vulnerability exists in SimpliSafe Original. An attacker in close physical proximity could exploit the vulnerability to bypass security protections...

Authentication flaw

In ATI Systems Emergency Mass Notification Systems HPSS16, HPSS32, MHPSS, and ALERT4000 devices, an improper authentication vulnerability caused by specially crafted malicious radio transmissions may allow an attacker to remotely trigger false alarms...

Code injection

In ATI Systems Emergency Mass Notification Systems HPSS16, HPSS32, MHPSS, and ALERT4000 devices, a missing encryption of sensitive data vulnerability caused by specially crafted malicious radio transmissions may allow an attacker to remotely trigger false alarms...