6469 matches found
PT-2021-21924
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADManager Plus versions 7110 and prior Description: The issue allows for unrestricted file upload, which can lead to remote code execution. Recommendations: For Zoho ManageEngine ADManager Plus versions 7110 and prior, updat...
CVE-2021-37924: Unrestricted Upload of File with Dangerous Type
Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution...
CVE-2021-38298: Improper Restriction of XML External Entity Reference
Zoho ManageEngine ADManager Plus before 7110 is vulnerable to blind XXE...
PT-2021-21913
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADManager Plus versions prior to 7110 Description: The issue allows for unrestricted file upload, which can lead to remote code execution. Recommendations: For Zoho ManageEngine ADManager Plus versions prior to 7110, update ...
PT-2021-21915
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADManager Plus versions prior to 7110 Description: The issue allows for unrestricted file upload, which can lead to remote code execution. Recommendations: For versions prior to 7110, update to a version later than 7110 to...
CVE-2021-37919: Unrestricted Upload of File with Dangerous Type
Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution...
PT-2021-21909
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADManager Plus versions 7110 and prior Description: The issue allows for unrestricted file upload, which can lead to remote code execution. Recommendations: For Zoho ManageEngine ADManager Plus versions 7110 and prior, updat...
Zoho ManageEngine ADManager Plus 代码问题漏洞
ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. ZOHO ManageEngine ADManager Plus 7110 and earlier versions contain a file upload vulnerability that can be exploited by attackers to cause...
PT-2021-21912
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADManager Plus versions 7110 and prior Description: The issue allows for unrestricted file upload, which can lead to remote code execution. Recommendations: For Zoho ManageEngine ADManager Plus versions 7110 and prior, updat...
PT-2021-21916
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADManager Plus versions 7110 and prior Description: The issue allows for unrestricted file upload, which can lead to remote code execution. Recommendations: For Zoho ManageEngine ADManager Plus versions 7110 and prior, updat...
PT-2021-21923
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADManager Plus versions prior to 7111 Description: The issue allows for unrestricted file upload, which can lead to remote code execution. Recommendations: For Zoho ManageEngine ADManager Plus versions prior to 7111, update ...
PT-2021-21910
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADManager Plus versions prior to 7111 Description: The issue allows for unrestricted file upload, which can lead to remote code execution. Recommendations: For Zoho ManageEngine ADManager Plus versions prior to 7111, update ...
ZOHO ManageEngine ADManager Plus 代码问题漏洞
Zoho ManageEngine ADManager Plus is an easy-to-use Windows Active Directory management and reporting solution. A XXE vulnerability exists in Zoho ManageEngine ADManager Plus versions prior to 7110. No detailed vulnerability details are provided at this time...
CVE-2021-37921: Unrestricted Upload of File with Dangerous Type
Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution...
ManageEngine ADAudit Plus Authenticated File Write RCE
This module exploits security issues in ManageEngine ADAudit Plus prior to 7006 that allow authenticated users to execute arbitrary code by creating a custom alert profile and leveraging its custom alert script component. The module first runs a few checks to test the provided credentials, retrie...
CVE-2021-41288
Zoho ManageEngine OpManager version 125466 and below is vulnerable to SQL Injection in the getReportData API...
CVE-2021-41288
Zoho ManageEngine OpManager version 125466 and below is vulnerable to SQL Injection in the getReportData API...
Sql injection
Zoho ManageEngine OpManager version 125466 and below is vulnerable to SQL Injection in the getReportData API...
