6469 matches found
PT-2021-21698
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADManager Plus versions prior to 7111 Description The issue is related to an unrestricted file upload, which can lead to remote code execution. Recommendations For versions prior to 7111, update to version 7111 or later to...
CVE-2021-37539: Unrestricted Upload of File with Dangerous Type
Zoho ManageEngine ADManager Plus before 7111 is vulnerable to unrestricted file which leads to Remote code execution...
ZOHO ManageEngine ADManager Plus 代码问题漏洞
ZOHO ManageEngine ADManager Plus is a set of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. ZOHO ManageEngine ADManager Plus is a file upload vulnerability that can be exploited by attackers to cause remote code execution...
CVE-2021-37761: Unrestricted Upload of File with Dangerous Type
Zoho ManageEngine ADManager Plus version 7110 and prior is vulnerable to unrestricted file upload, leading to remote code execution...
ManageEngine ADManager Plus Detection Consolidation
Consolidation of ManageEngine ADManager Plus detections. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...
PT-2021-21866
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADManager Plus versions prior to 7110 Description: The issue allows for unrestricted file upload, which can lead to remote code execution. Recommendations: For versions prior to 7110, update to a version newer than 7110 to...
ManageEngine Log360 Detection
Binary data manageenginelog360detect.nbin...
ZOHO ManageEngine ADManager Plus Licensing Issue Vulnerability
ZOHO ManageEngine ADManager Plus is an Active Directory AD management and reporting solution from Zoho, Inc. ZOHO ManageEngine ADManager Plus 7110 and earlier versions are vulnerable to an authorization issue that could be exploited by an attacker to take over an account via SSO...
ManageEngine Log360 < Build 5229 REST API Restriction Bypass RCE
Binary data manageenginelog360cve-2021-40539.nbin...
CVE-2021-37927
Zoho ManageEngine ADManager Plus version 7110 and prior allows account takeover via SSO...
CVE-2021-37925
Zoho ManageEngine ADManager Plus version 7110 and prior has a Post-Auth OS command injection vulnerability...
CVE-2021-37927
Zoho ManageEngine ADManager Plus version 7110 and prior allows account takeover via SSO...
Command injection
Zoho ManageEngine ADManager Plus version 7110 and prior has a Post-Auth OS command injection vulnerability...
CVE-2021-37927
Zoho ManageEngine ADManager Plus version 7110 and prior allows account takeover via SSO...
CVE-2021-37927
CVE-2021-37927 affects Zoho ManageEngine ADManager Plus
CVE-2021-37925
CVE-2021-37925 affects Zoho ManageEngine ADManager Plus, versions 7110 and earlier. The issue is a Post-Auth OS command injection vulnerability, with Red Hat, NVD, PRION, CVE lists and CNNVD entries corroborating the description. The CVSS calculations indicate a high-impact, critical exposure: CV...
PT-2021-21919
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADManager Plus versions 7110 and prior Description: The issue allows for account takeover via SSO. Recommendations: For Zoho ManageEngine ADManager Plus versions 7110 and prior, update to a version later than 7110 to resolve...
Zoho ManageEngine ADSelfService Plus Domain User Account Takeover Vulnerability
Zoho ManageEngine ADSelfService Plus is a web-based self-service application that enables end-users to perform tasks such as password reset, account unlocking, profile information update, etc. without relying on the help desk. A domain user account takeover vulnerability exists in Zoho ManageEngi...
Vulnerabilities fixed in Zoho ManageEngine ADManager Plus Pro
Vulnerabilities have been fixed in ManageEngine ADManager Plus Pro. The vulnerabilities allow a malicious person to launch attacks execute attacks that result in the following categories of damage: Manipulation of data. Circumvention of security measure Remote code execution User rights Increased...