6470 matches found
Zoho ManageEngine Remote Access Plus 信任管理问题漏洞
ZOHO ManageEngine Remote Access Plus is a remote access solution from ZOHO, Inc. A trust management issue vulnerability previously existed in Zoho ManageEngine Remote Access Plus 10.1.2121.1, which stems from the fact that the affected product has hard-coded credentials for read-only The...
CVE-2021-41288: Improper Neutralization of Special Elements used in an SQL Command
Zoho ManageEngine OpManager version 125466 and below is vulnerable to SQL Injection in the getReportData API...
Zoho ManageEngine Remote Access Plus 信任管理问题漏洞
ZOHO ManageEngine Remote Access Plus is a remote access solution from ZOHO, Inc. A trust management issue vulnerability previously existed in Zoho ManageEngine Remote Access Plus 10.1.2121.1, which stems from the fact that the affected product has hard-coded credentials associated with resetPWD.x...
PT-2021-23424
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Remote Access Plus versions prior to 10.1.2121.1 Description The issue relies on the application's build number to calculate a certain encryption key. Recommendations For versions prior to 10.1.2121.1, update to version...
CVE-2021-41827: Use of Hard-coded Credentials
Zoho ManageEngine Remote Access Plus before 10.1.2121.1 has hardcoded credentials for read-only access. The credentials are in the source code that corresponds to the DCBackupRestore JAR archive...
PT-2021-23242
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager versions 125466 and below Description The issue concerns SQL Injection in the getReportData API endpoint. This allows for potential exploitation. No information is provided about the estimated number of affected...
PT-2021-23423
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Remote Access Plus versions prior to 10.1.2121.1 Description The issue is related to hardcoded credentials associated with resetPWD.xml. This could potentially allow unauthorized access. Recommendations For versions prior to...
ZOHO ManageEngine Remote Access Plus 安全特征问题漏洞
ZOHO ManageEngine Remote Access Plus is a remote access solution from ZOHO, Inc. A security signature issue vulnerability previously existed in Zoho ManageEngine Remote Access Plus 10.1.2121.1, which stemmed from the affected product relying on the application's internal version number to calcula...
ZOHO ManageEngine ADManager Plus Code Execution Vulnerability
ZOHO ManageEngine ADManager Plus is a Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. The software assists AD administrators and help desk technicians with day-to-day administrative tasks, such as bulk management of user accounts and A...
ZOHO ManageEngine ADManager Plus File Upload Vulnerability
ZOHO ManageEngine ADManager Plus is a set of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. ZOHO ManageEngine ADManager Plus is a file upload vulnerability that can be exploited by attackers to cause remote code execution...
ZOHO ManageEngine ADManager Plus File Upload Vulnerability (CNVD-2021-78737)
ZOHO ManageEngine ADManager Plus is an easy-to-use Windows Active Directory management and reporting solution. A file upload vulnerability exists in ZOHO ManageEngine ADManager Plus prior to version 7111, which can be exploited by an attacker to achieve remote code execution...
CVE-2021-37761
Zoho ManageEngine ADManager Plus version 7110 and prior is vulnerable to unrestricted file upload, leading to remote code execution...
CVE-2021-37761
Zoho ManageEngine ADManager Plus version 7110 and prior is vulnerable to unrestricted file upload, leading to remote code execution...
CVE-2021-37761
Zoho ManageEngine ADManager Plus version 7110 and prior is vulnerable to unrestricted file upload, leading to remote code execution...
CVE-2021-37761
CVE-2021-37761 affects Zoho ManageEngine ADManager Plus (version 7110 and earlier). The issue is an unrestricted file upload vulnerability that can lead to remote code execution . Multiple connected sources confirm the vendor advisory and third-party advisories describe the flaw as a file upload ...
CVE-2021-37539
Zoho ManageEngine ADManager Plus before 7111 is vulnerable to unrestricted file which leads to Remote code execution...
CVE-2021-37539
Zoho ManageEngine ADManager Plus before 7111 is vulnerable to unrestricted file which leads to Remote code execution...
CVE-2021-37539
Zoho ManageEngine ADManager Plus before 7111 is vulnerable to unrestricted file which leads to Remote code execution...
