ZOHO ManageEngine ADSelfService Plus Information Disclosure (CVE-2010-3272)

An information disclosure vulnerability exists in ZOHO ManageEngine ADSelfService Plus. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Zoho ManageEngine Desktop Central Input Validation Error Vulnerability

ZOHO ManageEngine Desktop Central DC and Desktop Central DC are both products of ZOHO, Inc. ManageEngine Desktop Central is a desktop management solution. ManageEngine Desktop Central is a desktop management solution that includes software distribution, patch management, system configuration,...

ZOHO ManageEngine Applications Manager Authentication Bypass Vulnerability

ZOHO ManageEngine Application Manager is a set of application monitoring and management system of the United States ZhuoHao ZOHO company. The system is mainly used to monitor server and application performance. A security vulnerability exists in Zoho ManageEngine application Manager versions prio...

CVE-2020-10816

Zoho ManageEngine Applications Manager 14780 and before allows a remote unauthenticated attacker to register managed servers via AAMRequestProcessor servlet...

CVE-2020-10816

Zoho ManageEngine Applications Manager 14780 and before allows a remote unauthenticated attacker to register managed servers via AAMRequestProcessor servlet...

Code injection

Zoho ManageEngine Applications Manager 14780 and before allows a remote unauthenticated attacker to register managed servers via AAMRequestProcessor servlet...

CVE-2020-10816

Zoho ManageEngine Applications Manager 14780 and before allows a remote unauthenticated attacker to register managed servers via AAMRequestProcessor servlet...

CVE-2020-10816

Zoho ManageEngine Applications Manager (versions 14780 and earlier) contains an unauthenticated remote-registration flaw in the AAMRequestProcessor servlet that lets an attacker register a managed server. This is evidenced by CVE-2020-10816 entries in NVD and CNVD; the description specifies the v...

CVE-2020-16267

Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp request in the RCA module...

CVE-2020-16267

Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp request in the RCA module...

CVE-2020-15927

Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp request in the SAP module...

Sql injection

Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp request in the RCA module...

Sql injection

Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp request in the SAP module...

CVE-2020-16267

CVE-2020-16267 affects Zoho ManageEngine Applications Manager up to version 14740. The vulnerability is an authenticated SQL Injection in the RCA module triggered by a crafted JSP request, allowing an attacker with valid credentials to influence database queries. The NVD CVSS data shows a high im...

CVE-2020-16267

Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp request in the RCA module...

CVE-2020-15927

Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp request in the SAP module...

CVE-2020-15927

CVE-2020-15927 affects Zoho ManageEngine Applications Manager (v14740 and earlier). An authenticated attacker can trigger an SQL Injection via a crafted JSP request in the SAP module, due to insufficient input handling in that component. Impact is high for confidentiality, integrity, and availabi...

CVE-2020-15589

A design issue was discovered in GetInternetRequestHandle, InternetSendRequestEx and InternetSendRequestByBitrate in the client side of Zoho ManageEngine Desktop Central 10.0.552.W and Remote Access Plus before 10.1.2119.1. By exploiting this issue, an attacker-controlled server can force the...

CVE-2020-24397

An issue was discovered in the client side of Zoho ManageEngine Desktop Central 10.0.0.SP-534. An attacker-controlled server can trigger an integer overflow in InternetSendRequestEx and InternetSendRequestByBitrate that leads to a heap-based buffer overflow and Remote Code Execution with SYSTEM...

CVE-2020-24397

An issue was discovered in the client side of Zoho ManageEngine Desktop Central 10.0.0.SP-534. An attacker-controlled server can trigger an integer overflow in InternetSendRequestEx and InternetSendRequestByBitrate that leads to a heap-based buffer overflow and Remote Code Execution with SYSTEM...