Lucene search
+L

5174 matches found

CNNVD
CNNVD
added 2024/11/05 12:0 a.m.10 views

ZOHO ManageEngine Exchange Reporter Plus 安全漏洞

ZOHO ManageEngine Exchange Reporter Plus is a Web-based Exchange Server reporting software from ZOHO, Inc. A security vulnerability exists in ZOHO ManageEngine Exchange Reporter Plus 5718 and prior versions that stems from vulnerability to authenticated SQL injection in the reporting module...

8.8CVSS7.6AI score0.02301EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/04 12:16 p.m.36 views

CVE-2024-36485

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in Technician reports option...

8.8CVSS0.01665EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/04 12:16 p.m.6 views

CVE-2024-36485

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in Technician reports option...

8.8CVSS5.8AI score0.01665EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/04 11:15 a.m.17 views

CVE-2024-48878

Zohocorp ManageEngine ADManager Plus versions 7241 and prior are vulnerable to SQL Injection in Archived Audit Report...

8.8CVSS5.8AI score0.01667EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/04 11:13 a.m.15 views

CVE-2024-36485 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in Technician reports option...

8.3CVSS9AI score0.01665EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/04 11:13 a.m.62 views

CVE-2024-36485

The CVE-2024-36485 entry concerns Zohocorp ManageEngine ADAudit Plus. Affected product: ADAudit Plus (ManageEngine) prior to version 8121. Vulnerability: SQL Injection in the Technician reports option, caused by improper handling of input in that feature. Impact: potential unauthorized access to ...

8.8CVSS8.7AI score0.01665EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2024/11/04 10:56 a.m.67 views

CVE-2024-48878

CVE-2024-48878 concerns Zohocorp ManageEngine ADManager Plus, specifically versions 7241 and earlier. Public sources describe an SQL Injection vulnerability in the Archived Audit Report component. The CVE entries and connected feeds consistently identify this affected product and the root cause a...

8.8CVSS8.7AI score0.01667EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/04 10:56 a.m.21 views

CVE-2024-48878 SQL Injection

Zohocorp ManageEngine ADManager Plus versions 7241 and prior are vulnerable to SQL Injection in Archived Audit Report...

8.3CVSS8.4AI score0.01667EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/04 12:0 a.m.35 views

ZOHO ManageEngine ADManager Plus 安全漏洞

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO, Inc. designed for enterprise users using Windows domains. The software assists AD administrators and helpdesk technicians with day-to-day administrative tasks, such as batch management of user...

8.8CVSS7.6AI score0.01667EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/04 12:0 a.m.13 views

PT-2024-33254 · Zohocorp · Zoho Manageengine Admanager Plus

Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine ADManager Plus versions 7241 and prior Description: The issue is related to SQL Injection in the Archived Audit Report. This allows for potential exploitation. Recommendations: For versions 7241 and prior, update to a...

8.8CVSS8.4AI score0.01667EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2024/11/04 12:0 a.m.5 views

ZOHO ManageEngine ADAudit Plus SQL注入漏洞

ZOHO ManageEngine ADAudit Plus is used by ZOHO to simplify auditing, demonstrate compliance and detect threats. A SQL injection vulnerability exists in ZOHO ManageEngine ADAudit Plus, which stems from the Technician reports option containing a SQL injection vulnerability...

8.8CVSS7.9AI score0.01665EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/24 11:42 a.m.32 views

CVE-2024-5608 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in the technician reports feature...

8.3CVSS0.01482EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/24 12:0 a.m.7 views

ZOHO ManageEngine ADAudit Plus 安全漏洞

ZOHO ManageEngine ADAudit Plus is used by ZOHO USA, Inc. to simplify auditing, demonstrate compliance and detect threats. A security vulnerability exists in ZOHO ManageEngine ADAudit Plus prior to version 8121, which stems from vulnerability to SQL injection in the technician reporting feature...

8.3CVSS7.8AI score0.01482EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/10/24 12:0 a.m.8 views

PT-2024-36708 · Zoho · Zoho Manageengine Adaudit Plus

Name of the Vulnerable Software and Affected Versions: ManageEngine ADAudit Plus versions prior to 8121 Description: The issue concerns SQL Injection in the technician reports feature. Recommendations: For versions prior to 8121, update to version 8121 or later to resolve the issue...

8.3CVSS8.5AI score0.01482EPSS
SaveExploits0References5
GithubExploit
GithubExploit
added 2024/10/16 11:23 a.m.256 views

Exploit for Use of Incorrectly-Resolved Name or Reference in Zohocorp Manageengine_Adselfservice_Plus

ADSelfService-Plus-RCE-CVE-2021-40539 ADSelfService Plus RCE...

9.8CVSS7.5AI score0.9896EPSS
SaveExploits8
GithubExploit
GithubExploit
added 2024/10/12 9:9 a.m.461 views

Exploit for Use of Incorrectly-Resolved Name or Reference in Zohocorp Manageengine_Adselfservice_Plus

CVE-2021-40539 CVE-2021-40539: ADSelfService Plus RCE Vuln...

9.8CVSS7.4AI score0.9896EPSS
SaveExploits8
GithubExploit
GithubExploit
added 2024/10/12 9:1 a.m.401 views

Exploit for Use of Incorrectly-Resolved Name or Reference in Zohocorp Manageengine_Adselfservice_Plus

CVE-2021-40539 CVE-2021-40539: ADSelfService Plus RCE Vulner...

9.8CVSS7.4AI score0.9896EPSS
SaveExploits8
BDU FSTEC
BDU FSTEC
added 2024/10/08 12:0 a.m.11 views

The vulnerability in the implementation of the application programming interface for Zoho ManageEngine ServiceDesk Plus, Zoho ManageEngine ServiceDesk Plus MSP, and Zoho ManageEngine SupportCenter Plus allows a attacker to perform XSS attacks.

The vulnerability of the application programming interface for Zoho ManageEngine ServiceDesk Plus, Zoho ManageEngine ServiceDesk Plus MSP, and Zoho ManageEngine SupportCenter Plus is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to...

8.7CVSS5.4AI score0.0107EPSS
SaveExploits0References3Affected Software3
CNNVD
CNNVD
added 2024/10/07 12:0 a.m.9 views

ZOHO ManageEngine ADManager Plus 权限许可和访问控制问题漏洞

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO, Inc. designed for enterprise users using Windows domains. The software assists AD administrators and helpdesk technicians with day-to-day administrative tasks, such as batch management of user...

8.8CVSS6.5AI score0.04378EPSS
SaveExploits1References3
Packet Storm
Packet Storm
added 2024/10/04 12:0 a.m.350 views

ManageEngine ADManager 7183 Password Hash Disclosure

============================================================================================================================================= | Title : ManageEngine ADManager 7183 Password Hash Disclosure Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla...

7.4AI score
SaveExploits0
Rows per page
Query Builder