Lucene search
+L

6468 matches found

NVD
NVD
•added 2021/10/13 6:15 p.m.•46 views

CVE-2021-20130

ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in the PasswordExpiry interface...

8.8CVSS0.32515EPSS
SaveExploits0References1
NVD
NVD
•added 2021/10/13 6:15 p.m.•44 views

CVE-2021-20131

ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in the Personalization interface...

8.8CVSS0.16847EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2021/10/13 6:15 p.m.•18 views

CVE-2021-20131

ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in the Personalization interface...

8.8CVSS6.3AI score0.16847EPSS
SaveExploits0References1
Prion
Prion
•added 2021/10/13 6:15 p.m.•25 views

Remote code execution

ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in the Personalization interface...

6.5CVSS8.9AI score0.16847EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2021/10/13 6:15 p.m.•10 views

CVE-2021-20130

ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in the PasswordExpiry interface...

8.8CVSS8.4AI score0.32515EPSS
SaveExploits0References2
Prion
Prion
•added 2021/10/13 6:15 p.m.•28 views

Remote code execution

ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in the PasswordExpiry interface...

6.5CVSS8.9AI score0.32515EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2021/10/13 5:30 p.m.•76 views

CVE-2021-20131

CVE-2021-20131 concerns ManageEngine ADManager Plus Build 7111, where a post-authentication remote code execution flaw exists due to improperly validated file uploads in the Personalization interface. The root cause is inadequate validation of uploaded files, enabling an attacker with valid acces...

8.8CVSS8.8AI score0.16847EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/10/13 5:30 p.m.•48 views

CVE-2021-20131

ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in the Personalization interface...

9.1AI score0.16847EPSS
SaveExploits0References1
CVE
CVE
•added 2021/10/13 5:30 p.m.•89 views

CVE-2021-20130

CVE-2021-20130 : In ManageEngine ADManager Plus (Build 7111), a post-authentication remote code execution vulnerability exists due to improperly validated file uploads in the PasswordExpiry interface. Exploitation would require authenticated access; the exact exploit details are not provided in t...

8.8CVSS8.9AI score0.32515EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/10/13 5:30 p.m.•45 views

CVE-2021-20130

ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in the PasswordExpiry interface...

9.1AI score0.32515EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/13 12:00 a.m.•11 views

CVE-2021-41075: Improper Neutralization of Special Elements used in an SQL Command

The NetFlow Analyzer in Zoho ManageEngine OpManger before 125455 is vulnerable to SQL Injection in the Attacks Module API...

9.8CVSS5.8AI score0.03432EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/10/13 12:00 a.m.•4 views

PT-2021-22899

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager versions prior to 125437 Description The issue concerns a SQL Injection vulnerability in the support diagnostics module. This occurs via the pollingObject parameter of the "getDataCollectionFailureReason API"...

9.8CVSS0.50209EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/10/13 12:00 a.m.•23 views

ZOHO ManageEngine ADManager Plus 代码问题漏洞

Zoho ManageEngine ADManager Plus is an easy-to-use Windows Active Directory management and reporting solution. A remote code execution vulnerability exists in Zoho ManageEngine ADManager Plus Build 7111, which stems from not properly validating file uploads in the Personalization interface and ca...

8.8CVSS6.7AI score0.16847EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/13 12:00 a.m.•10 views

CVE-2021-20130: Unrestricted Upload of File with Dangerous Type

ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in the PasswordExpiry interface...

8.8CVSS6.3AI score0.32515EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/10/13 12:00 a.m.•22 views

ZOHO ManageEngine OpManager SQL注入漏洞

ZOHO ManageEngine OpManager is an end-to-end integrated network management software that enables comprehensive, visual, unified and centralized monitoring and management of IT infrastructure, including network devices, servers, hosts, WAN links, applications and services, within an enterprise...

9.8CVSS6AI score0.03432EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/10/13 12:00 a.m.•22 views

ZOHO ManageEngine OpManager SQL注入漏洞

ZOHO ZOHO ManageEngine OpManager is an end-to-end integrated network management software, which can realize all-round, visualized, unified and centralized monitoring and management of IT infrastructure such as network devices, servers, hosts, WAN links, applications and services within the...

9.8CVSS5.9AI score0.50209EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/13 12:00 a.m.•7 views

CVE-2021-20131: Unrestricted Upload of File with Dangerous Type

ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in the Personalization interface...

8.8CVSS6.3AI score0.16847EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/10/13 12:00 a.m.•4 views

PT-2021-13787

Name of the Vulnerable Software and Affected Versions: ManageEngine ADManager Plus version 7111 Description: The issue is related to a post-authentication remote code execution vulnerability. This vulnerability is caused by improperly validated file uploads in the PasswordExpiry interface...

8.8CVSS0.32515EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/13 12:00 a.m.•10 views

CVE-2021-40493: Improper Neutralization of Special Elements used in an SQL Command

Zoho ManageEngine OpManager before 125437 is vulnerable to SQL Injection in the support diagnostics module. This occurs via the pollingObject parameter of the getDataCollectionFailureReason API...

9.8CVSS5.8AI score0.50209EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/10/13 12:00 a.m.•5 views

PT-2021-13788

Name of the Vulnerable Software and Affected Versions: ManageEngine ADManager Plus version 7111 Description: The issue is related to a post-authentication remote code execution vulnerability. This vulnerability is caused by improperly validated file uploads in the Personalization interface...

8.8CVSS0.16847EPSS
SaveExploits0References4
Rows per page
Query Builder