Lucene search
+L

6092 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/08 12:00 a.m.•4 views

CVE-2024-24409: Improper Privilege Management

Zohocorp ManageEngine ADManager Plus versions 7203 and prior are vulnerable to Privilege Escalation in the Modify Computers option...

8.8CVSS5.7AI score0.06196EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/08 12:00 a.m.•3 views

CVE-2024-10839: Improper Restriction of XML External Entity Reference

Zohocorp ManageEngine SharePoint Manager Plus versions 4503 and prior are vulnerable to authenticated XML External Entity XXE in the Management option...

8.5CVSS5.8AI score0.02385EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/07 10:15 a.m.•23 views

CVE-2024-10203

Zohocorp ManageEngine EndPoint Central versions 11.3.2416.21 and below, 11.3.2428.9 and below are vulnerable to Arbitrary File Deletion in the agent installed machines...

7.8CVSS0.00448EPSS
SaveExploits0References1
OSV
OSV
•added 2024/11/07 10:15 a.m.•18 views

CVE-2024-10203

Zohocorp ManageEngine EndPoint Central versions 11.3.2416.21 and below, 11.3.2428.9 and below are vulnerable to Arbitrary File Deletion in the agent installed machines...

7.8CVSS5.8AI score0.00448EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/07 9:20 a.m.•21 views

CVE-2024-10203 Agent Arbitrary File Deletion

Zohocorp ManageEngine EndPoint Central versions 11.3.2416.21 and below, 11.3.2428.9 and below are vulnerable to Arbitrary File Deletion in the agent installed machines...

7CVSS6.8AI score0.00448EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/07 9:20 a.m.•33 views

CVE-2024-10203 Agent Arbitrary File Deletion

Zohocorp ManageEngine EndPoint Central versions 11.3.2416.21 and below, 11.3.2428.9 and below are vulnerable to Arbitrary File Deletion in the agent installed machines...

7CVSS0.00448EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/07 9:20 a.m.•102 views

CVE-2024-10203

CVE-2024-10203 affects Zohocorp/ManageEngine Endpoint Central. Vulnerable components are the Endpoint Central agent on Windows machines, with version ranges 11.3.2416.21 and below and 11.3.2428.9 and below. root cause is described as insecure privilege management that enables Arbitrary File Delet...

7.8CVSS6.8AI score0.00448EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/07 12:00 a.m.•3 views

CVE-2024-10203: Improper Privilege Management

Zohocorp ManageEngine EndPoint Central versions 11.3.2416.21 and below, 11.3.2428.9 and below are vulnerable to Arbitrary File Deletion in the agent installed machines...

7.8CVSS6.9AI score0.00448EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2024/11/07 12:00 a.m.•20 views

ManageEngine ADAudit Plus < Build 7250 SQL Injection

The version of ManageEngine ADAudit Plus installed on the remote host is prior to 7.2, Build 7250. It is, therefore, affected by SQL injection vulnerability. - Zohocorp ManageEngine ADManager Plus versions 7241 and prior are vulnerable to SQL Injection in Archived Audit Report. CVE-2024-48878 Not...

8.8CVSS6AI score0.03231EPSS
SaveExploits0References2
OSV
OSV
•added 2024/11/05 6:15 a.m.•12 views

CVE-2024-9459

Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior are vulnerable to authenticated SQL Injection in reports module...

8.8CVSS5.8AI score0.0445EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/05 6:15 a.m.•27 views

CVE-2024-9459

Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior are vulnerable to authenticated SQL Injection in reports module...

8.8CVSS0.0445EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/05 5:44 a.m.•82 views

CVE-2024-9459

CVE-2024-9459 affects Zoho ManageEngine Exchange Reporter Plus up through version 5718 and earlier. The security issue is described as an authenticated SQL Injection in the reports module. The connected sources specifically list the affected software and version range, with remediation guidance r...

8.8CVSS8.6AI score0.0445EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/11/05 5:44 a.m.•32 views

CVE-2024-9459 SQL Injection

Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior are vulnerable to authenticated SQL Injection in reports module...

8.3CVSS8.2AI score0.0445EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/05 5:44 a.m.•36 views

CVE-2024-9459 SQL Injection

Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior are vulnerable to authenticated SQL Injection in reports module...

8.3CVSS0.0445EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/05 12:00 a.m.•22 views

ZOHO ManageEngine Exchange Reporter Plus 安全漏洞

ZOHO ManageEngine Exchange Reporter Plus is a Web-based Exchange Server reporting software from ZOHO, Inc. A security vulnerability exists in ZOHO ManageEngine Exchange Reporter Plus 5718 and prior versions that stems from vulnerability to authenticated SQL injection in the reporting module...

8.8CVSS7.6AI score0.0445EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/05 12:00 a.m.•2 views

CVE-2024-9459: Improper Neutralization of Special Elements used in an SQL Command

Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior are vulnerable to authenticated SQL Injection in reports module...

8.8CVSS5.8AI score0.0445EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/04 12:16 p.m.•44 views

CVE-2024-36485

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in Technician reports option...

8.8CVSS0.03227EPSS
SaveExploits0References1
OSV
OSV
•added 2024/11/04 12:16 p.m.•16 views

CVE-2024-36485

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in Technician reports option...

8.8CVSS5.8AI score0.03227EPSS
SaveExploits0References1
OSV
OSV
•added 2024/11/04 11:15 a.m.•25 views

CVE-2024-48878

Zohocorp ManageEngine ADManager Plus versions 7241 and prior are vulnerable to SQL Injection in Archived Audit Report...

8.8CVSS5.8AI score0.03231EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/04 11:13 a.m.•17 views

CVE-2024-36485 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in Technician reports option...

8.3CVSS9AI score0.03227EPSS
SaveExploits0References1
Rows per page
Query Builder