Lucene search
+L

5173 matches found

Positive Technologies
Positive Technologies
added 2024/07/11 12:0 a.m.8 views

PT-2024-7934 · Zohocorp · Manageengine Endpoint Central

Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine EndPoint Central versions 11.3.2416.21 and below Zohocorp ManageEngine EndPoint Central versions 11.3.2428.9 and below Description: The issue is related to arbitrary file deletion in the agent installed machines due to...

7CVSS7.4AI score0.00351EPSS
SaveExploits0References9
VulnCheck KEV
VulnCheck KEV
added 2024/07/01 12:0 a.m.4 views

VulnCheck KEV: CVE-2023-38743

Zoho ManageEngine ADManager Plus before Build 7200 allows admin users to execute commands on the host machine...

7.2CVSS5.9AI score0.11634EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2024/06/27 12:0 a.m.12 views

ManageEngine OpManager XSS (CVE-2024-36038)

A cross-side scripting vulnerability exists in the configured proxy server for ManageEngine OpManager 12.8.234. A attacker can use this vulnerability to alter the intended functionality of the proxy server, potentially leading to credentials disclosure within a trusted session. Note that Nessus h...

6.3CVSS5.4AI score0.01432EPSS
SaveExploits0References2
NVD
NVD
added 2024/06/24 12:15 p.m.28 views

CVE-2024-36038

Zoho ManageEngine ITOM products versions from 128234 to 128248 are affected by the stored cross-site scripting vulnerability in the proxy server option...

6.3CVSS0.01432EPSS
SaveExploits0References1
CVE
CVE
added 2024/06/24 11:45 a.m.60 views

CVE-2024-36038

CVE-2024-36038 relates to a stored cross-site scripting vulnerability in the proxy server option of Zoho ManageEngine ITOM/OpManager. Affected software: OpManager 12.8.234 with proxy server configuration; affected version range cited as 128234–128248. Root cause: stored XSS in the proxy server fu...

6.3CVSS5.9AI score0.01432EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/24 11:45 a.m.35 views

CVE-2024-36038 Stored XSS

Zoho ManageEngine ITOM products versions from 128234 to 128248 are affected by the stored cross-site scripting vulnerability in the proxy server option...

6.3CVSS0.01432EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/06/24 11:45 a.m.16 views

CVE-2024-36038 Stored XSS

Zoho ManageEngine ITOM products versions from 128234 to 128248 are affected by the stored cross-site scripting vulnerability in the proxy server option...

6.3CVSS5.9AI score0.01432EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/06/24 12:0 a.m.6 views

ZOHO ManageEngine ITOM Cross-Site Scripting Vulnerability

ZOHO ManageEngine ITOM is a network management software from ZOHO, Inc. A security vulnerability exists in ZOHO ManageEngine ITOM that stems from a stored cross-site scripting vulnerability...

6.3CVSS6.1AI score0.01432EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/06/14 12:0 a.m.9 views

PT-2024-6547 · Zohocorp · Manageengine Pam360 +1

Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine Password Manager Pro versions before 12431 Zohocorp ManageEngine PAM360 versions before 7001 Description: The issue exists due to the failure to neutralize special elements used in an operating system command, allowing a...

9CVSS8.7AI score0.0304EPSS
SaveExploits0References11
NVD
NVD
added 2024/05/29 11:16 a.m.23 views

CVE-2024-27313

Zoho ManageEngine PAM360 is vulnerable to Stored XSS vulnerability. This vulnerability is applicable only in the version 6610...

6.3CVSS5.9AI score0.01294EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/29 11:16 a.m.5 views

CVE-2024-27313

Zoho ManageEngine PAM360 is vulnerable to Stored XSS vulnerability. This vulnerability is applicable only in the version 6610...

4.6CVSS5.8AI score0.01294EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/05/29 11:1 a.m.19 views

CVE-2024-27313 XSS Vulnerability

Zoho ManageEngine PAM360 is vulnerable to Stored XSS vulnerability. This vulnerability is applicable only in the version 6610...

6.3CVSS5.8AI score0.01294EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/05/29 11:1 a.m.34 views

CVE-2024-27313 XSS Vulnerability

Zoho ManageEngine PAM360 is vulnerable to Stored XSS vulnerability. This vulnerability is applicable only in the version 6610...

6.3CVSS5.9AI score0.01294EPSS
SaveExploits0References1
CVE
CVE
added 2024/05/29 11:1 a.m.73 views

CVE-2024-27313

Zoho ManageEngine PAM360 (v6610) is affected by a Stored XSS vulnerability (CVE-2024-27313). The issue is documented across multiple feeds with the vulnerability described as a stored XSS affecting version 6610; no exploit details or patch/mitigation are provided in the connected documents. The r...

6.3CVSS5.7AI score0.01294EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/05/29 12:0 a.m.6 views

PT-2024-21815

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine PAM360 version 6610 Description The issue is related to a Stored XSS vulnerability. Recommendations For Zoho ManageEngine PAM360 version 6610, at the moment, there is no information about a newer version that contains a fix f...

6.3CVSS5.8AI score0.01294EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/05/29 12:0 a.m.5 views

Zoho ManageEngine PAM360 安全漏洞

ZOHO ManageEngine PAM360 is a complete PAM software from ZOHO, Inc. that provides complete privileged access security for your IT infrastructure. A security vulnerability exists in Zoho ManageEngine PAM360 version 6610, which stems from the presence of a stored cross-site scripting XSS...

6.3CVSS5.8AI score0.01294EPSS
SaveExploits0References2
CNVD
CNVD
added 2024/05/28 12:0 a.m.10 views

ZOHO ManageEngine ADAudit Plus Access Control Error Vulnerability

ZOHO ManageEngine ADAudit Plus is ZOHO's solution for simplifying audits, proving compliance and detecting threats. An access control error vulnerability exists in ZOHO ManageEngine ADAudit Plus, which can be exploited by an attacker to view session logs...

5.5CVSS6.8AI score0.00458EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/05/28 12:0 a.m.41 views

ZOHO ManageEngine ADAudit Plus Security Bypass Vulnerability

ZOHO ManageEngine ADAudit Plus is ZOHO's solution for simplifying audits, proving compliance and detecting threats. A security bypass vulnerability exists in ZOHO ManageEngine ADAudit Plus versions prior to 7270, which can be exploited by an attacker to modify agent configuration...

4.2CVSS6.8AI score0.00374EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/27 6:15 p.m.6 views

CVE-2024-36037

Zoho ManageEngine ADAudit Plus versions 7260 and below allows unauthorized local agent machine users to view the session recordings...

5.5CVSS5.8AI score0.00458EPSS
SaveExploits0References1
NVD
NVD
added 2024/05/27 6:15 p.m.23 views

CVE-2024-27310

Zoho ManageEngine ADSelfService Plus versions below 6401 are vulnerable to the DOS attack due to the malicious LDAP input...

6.5CVSS5.3AI score0.02274EPSS
SaveExploits0References1
Rows per page
Query Builder