CVE-2021-41833

Zoho ManageEngine Patch Connect Plus before 90099 is vulnerable to unauthenticated remote code execution...

Remote code execution

Zoho ManageEngine Patch Connect Plus before 90099 is vulnerable to unauthenticated remote code execution...

Sql injection

Zoho ManageEngine Network Configuration Manager before ??125465 is vulnerable to SQL Injection in a hardware details search...

CVE-2021-42002

Affected software: Zoho ManageEngine ADManager Plus up to build 7114 (before 7.1 Build 7115). Vulnerability: A filter bypass enables an unauthenticated, remote attacker to upload a file and achieve remote code execution. Impact: Remote code execution with high severity (per CVE metrics). Root cau...

CVE-2021-42002

Zoho ManageEngine ADManager Plus before 7115 is vulnerable to a filter bypass that leads to file-upload remote code execution...

CVE-2021-41833

Zoho ManageEngine Patch Connect Plus before 90099 is vulnerable to unauthenticated remote code execution...

CVE-2021-41833

Zoho ManageEngine Patch Connect Plus is affected by CVE-2021-41833. The vulnerability exists in Patch Connect Plus versions prior to 90099 and allows unauthenticated remote code execution. The CNVD entry confirms the same issue and notes exploitation by an unauthenticated attacker to achieve remo...

CVE-2021-41081

Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a configuration search...

CVE-2021-41081

ManageEngine Network Configuration Manager (NCM) prior to 12.5.465 is vulnerable to SQL Injection in the configuration search. Root cause is improper input handling in the search functionality. Impact includes potential disclosure/modification of data; CVSS scores in sources indicate high to crit...

CVE-2021-41080

CVE-2021-41080 affects Zoho ManageEngine Network Configuration Manager. Based on connected sources, the vulnerability is a SQL injection in the hardware details search function. The issue occurs in versions prior to 125465. The notable impact is high (CVE metrics show CRITICAL/ HIGH depending on ...

CVE-2021-41080

Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a hardware details search...

Zoho Corporation ADManager Plus 安全漏洞

Zoho ManageEngine ADManager Plus is an easy-to-use Windows Active Directory management and reporting solution. A filter bypass vulnerability exists in Zoho ManageEngine ADManager Plus prior to version 7115, which can be exploited by an attacker to upload files and enable remote code execution...

CVE-2021-41833: Unrestricted Upload of File with Dangerous Type

Zoho ManageEngine Patch Connect Plus before 90099 is vulnerable to unauthenticated remote code execution...

CVE-2021-42847

Zoho ManageEngine ADAudit Plus before 7006 allows attackers to write to, and execute, arbitrary files...

CVE-2021-42847: Undefined Security Weakness

Zoho ManageEngine ADAudit Plus before 7006 allows attackers to write to, and execute, arbitrary files...

PT-2021-23073 · Zoho · Zoho Manageengine Network Configuration Manager

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Network Configuration Manager versions prior to 125465 Description: The issue is related to SQL Injection in the hardware details search function. Recommendations: For versions prior to 125465, update to a version that...

CVE-2021-41081: Improper Neutralization of Special Elements used in an SQL Command

Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a configuration search...

PT-2021-23466

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADManager Plus versions prior to 7115 Description The issue is related to a filter bypass that can lead to remote code execution through file upload. Recommendations For versions prior to 7115, update to version 7115 or later...

PT-2021-23695 · Zoho · Zoho Manageengine Adaudit Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADAudit Plus versions prior to 7006 Description: The issue allows attackers to write to and execute arbitrary files, potentially leading to unauthorized access and malicious activities. Recommendations: For versions prior to...

CVE-2021-41080: Improper Neutralization of Special Elements used in an SQL Command

Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a hardware details search...