Lucene search
+L

5173 matches found

Tenable Nessus
Tenable Nessus
added 2024/08/15 12:0 a.m.36 views

ManageEngine ADAudit Plus < Build 8110 Multiple Vulnerabilities

The version of ManageEngine ADAudit Plus installed on the remote host is prior to build 8110. It is, therefore, affected by multiple vulnerabilities. - Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's export option...

8.8CVSS5.9AI score0.04702EPSS
SaveExploits0References6
OSV
OSV
added 2024/08/12 1:38 p.m.5 views

CVE-2024-5527

Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in file auditing configuration...

8.8CVSS5.8AI score0.04702EPSS
SaveExploits0References1
OSV
OSV
added 2024/08/12 1:38 p.m.6 views

CVE-2024-5487

Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's export option...

8.8CVSS5.8AI score0.04702EPSS
SaveExploits0References1
NVD
NVD
added 2024/08/12 1:38 p.m.19 views

CVE-2024-5527

Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in file auditing configuration...

8.8CVSS0.04702EPSS
SaveExploits0References1
OSV
OSV
added 2024/08/12 1:38 p.m.6 views

CVE-2024-36518

Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's dashboard...

5.4CVSS5.8AI score0.03117EPSS
SaveExploits0References1
OSV
OSV
added 2024/08/12 1:38 p.m.5 views

CVE-2024-36035

Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in user session recording...

8.8CVSS5.8AI score0.07373EPSS
SaveExploits0References1
NVD
NVD
added 2024/08/12 1:38 p.m.26 views

CVE-2024-36034

Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in aggregate reports' search option...

8.8CVSS0.07373EPSS
SaveExploits0References1
NVD
NVD
added 2024/08/12 1:38 p.m.16 views

CVE-2024-36035

Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in user session recording...

8.8CVSS0.07373EPSS
SaveExploits0References1
OSV
OSV
added 2024/08/12 1:38 p.m.4 views

CVE-2024-36034

Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in aggregate reports' search option...

8.8CVSS5.8AI score0.07373EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/08/12 7:23 a.m.34 views

CVE-2024-36034 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in aggregate reports' search option...

8.3CVSS0.07373EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/08/12 7:19 a.m.19 views

CVE-2024-36035 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in user session recording...

8.3CVSS0.07373EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/12 7:19 a.m.14 views

CVE-2024-36035 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in user session recording...

8.3CVSS7.9AI score0.07373EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/12 7:13 a.m.24 views

CVE-2024-36518 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's dashboard...

8.3CVSS7.9AI score0.03117EPSS
SaveExploits0References1
CVE
CVE
added 2024/08/12 7:13 a.m.64 views

CVE-2024-36518

ManageEngine ADAudit Plus before build 8110 is affected by authenticated SQL Injection in the attack surface analyzer’s dashboard due to inadequate SQL query protection. The issue could allow an attacker with valid credentials to access or exfiltrate data from the application’s database through t...

8.3CVSS8.6AI score0.03117EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/08/12 5:31 a.m.28 views

CVE-2024-5527 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in file auditing configuration...

8.3CVSS0.04702EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/08/12 12:0 a.m.7 views

ZOHO ManageEngine ADAudit Plus 安全漏洞

ZOHO ManageEngine ADAudit Plus is used by ZOHO USA, Inc. to simplify auditing, prove compliance and detect threats. A security vulnerability exists in ZOHO ManageEngine ADAudit Plus version 8110 and prior versions, which stems from a vulnerability to authenticated SQL injection attacks in the...

8.8CVSS7.6AI score0.04702EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/08/12 12:0 a.m.6 views

ZOHO ManageEngine ADAudit Plus 安全漏洞

ZOHO ManageEngine ADAudit Plus is used by ZOHO to simplify auditing, demonstrate compliance and detect threats. A security vulnerability exists in ZOHO ManageEngine ADAudit Plus version 8003 and prior versions, which arises from vulnerability to authenticated SQL injection attacks in user session...

8.8CVSS7.6AI score0.07373EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/08/12 12:0 a.m.5 views

ZOHO ManageEngine ADAudit Plus 安全漏洞

ZOHO ManageEngine ADAudit Plus is used by ZOHO USA, Inc. to simplify auditing, prove compliance and detect threats. A security vulnerability exists in ZOHO ManageEngine ADAudit Plus prior to version 8110, which stems from the vulnerability to authenticated SQL injection attacks in the Attack...

8.3CVSS7.6AI score0.03117EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/08/02 12:0 a.m.42 views

ManageEngine OpManager SQLi (CVE-2024-6748)

Zohocorp ManageEngine OpManager, OpManager Plus, OpManager MSP and RMM versions 128317 and below are vulnerable to authenticated SQL injection in the URL monitoring. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

8.3CVSS5.7AI score0.23784EPSS
SaveExploits0References2
OSV
OSV
added 2024/08/01 7:15 a.m.13 views

CVE-2024-5678

Zohocorp ManageEngine Applications Manager versions 170900 and below are vulnerable to the authenticated admin-only SQL Injection in the Create Monitor feature...

4.7CVSS5.8AI score0.0255EPSS
SaveExploits0References1
Rows per page
Query Builder