5175 matches found
Zoho ManageEngine ServiceDesk Plus Authentication Bypass Vulnerability
Zoho ManageEngine ServiceDesk Plus SDP is a web-based IT helpdesk software with integrated asset and project management capabilities, based on the ITIL framework. An authentication bypass vulnerability exists in Zoho ManageEngine ServiceDesk Plus prior to version 11134 during SAML login. No detai...
CVE-2020-35682
Zoho ManageEngine ServiceDesk Plus before 11134 allows an Authentication Bypass only during SAML login...
CVE-2020-35682
Zoho ManageEngine ServiceDesk Plus before 11134 allows an Authentication Bypass only during SAML login...
Authentication flaw
Zoho ManageEngine ServiceDesk Plus before 11134 allows an Authentication Bypass only during SAML login...
CVE-2020-35682
CVE-2020-35682 affects Zoho ManageEngine ServiceDesk Plus prior to version 11134, where an Authentication Bypass can occur during SAML login due to the underlying authorization flaw. Public sources consistently describe an SAML-login bypass leading to elevated access; patches exist to reach versi...
CVE-2020-35682
Zoho ManageEngine ServiceDesk Plus before 11134 allows an Authentication Bypass only during SAML login...
ZOHO ManageEngine ServiceDesk Plus 安全漏洞
Zoho ManageEngine ServiceDesk Plus SDP is a web-based IT helpdesk software with integrated asset and project management capabilities, based on the ITIL framework. An authentication bypass vulnerability exists in Zoho ManageEngine ServiceDesk Plus prior to version 11134 during SAML login. No detai...
Zoho ManageEngine Desktop Central has an unspecified vulnerability
ZOHO ManageEngine Desktop Central DC is a desktop management solution from ZOHO, Inc. The solution includes software distribution, patch management, system configuration, remote control and other functional modules to support the entire lifecycle of desktop and server management.A security...
SolarWinds Hack — New Evidence Suggests Potential Links to Chinese Hackers
A malicious web shell deployed on Windows systems by leveraging a previously undisclosed zero-day in SolarWinds' Orion network monitoring software may have been the work of a possible Chinese threat group. In a report published by Secureworks on Monday, the cybersecurity firm attributed the...
Zoho ManageEngine ADSelfService Plus跨站脚本漏洞
ZOHO ManageEngine ADSelfService Plus, an integrated self-service password management and single sign-on solution for Active Directory and cloud applications from ZOHO, is vulnerable to cross-site scripting. A cross-site scripting vulnerability exists in Zoho ManageEngine ADSelfService Plus, which...
Zoho ManageEngine ADManager Plus Cross-Site Scripting Vulnerability (CNVD-2021-17218)
Zoho ManageEngine ADManager Plus is an easy-to-use Windows Active Directory management and reporting solution. A cross-site scripting vulnerability exists in versions prior to Zoho ManageEngine ADManager Plus 7066. No detailed vulnerability details are provided at this time...
CVE-2020-35594
Zoho ManageEngine ADManager Plus before 7066 allows XSS...
CVE-2020-35594
Zoho ManageEngine ADManager Plus before 7066 allows XSS...
CVE-2020-28050
Zoho ManageEngine Desktop Central before build 10.0.647 allows a single authentication secret from multiple agents to communicate with the server...
CVE-2020-28050
Zoho ManageEngine Desktop Central before build 10.0.647 allows a single authentication secret from multiple agents to communicate with the server...
Cross site scripting
Zoho ManageEngine ADManager Plus before 7066 allows XSS...
Authentication flaw
Zoho ManageEngine Desktop Central before build 10.0.647 allows a single authentication secret from multiple agents to communicate with the server...
CVE-2020-28050
Zoho ManageEngine Desktop Central prior to build 10.0.647 is affected by CVE-2020-28050, where a single authentication secret from multiple agents can be used to communicate with the server. The issue is described as a high-severity vulnerability (CVSS3.1: 9.1, CRITICAL) with network attack vecto...