Lucene search
+L

6092 matches found

NVD
NVD
•added 2024/08/30 6:15 p.m.•44 views

CVE-2024-38868

Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability while isolating the devices.This issue affects Endpoint Central: before 11.3.2406.08 and before 11.3.2400.15...

8.3CVSS0.00795EPSS
SaveExploits0References1
OSV
OSV
•added 2024/08/30 6:15 p.m.•18 views

CVE-2024-38868

Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability while isolating the devices.This issue affects Endpoint Central: before 11.3.2406.08 and before 11.3.2400.15...

8.3CVSS5.8AI score0.00795EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/08/30 5:44 p.m.•44 views

CVE-2024-38868 Incorrect Authorization

Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability while isolating the devices.This issue affects Endpoint Central: before 11.3.2406.08 and before 11.3.2400.15...

7.6CVSS0.00795EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/08/30 5:44 p.m.•20 views

CVE-2024-38868 Incorrect Authorization

Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability while isolating the devices.This issue affects Endpoint Central: before 11.3.2406.08 and before 11.3.2400.15...

7.6CVSS7.6AI score0.00795EPSS
SaveExploits0References1
CVE
CVE
•added 2024/08/30 5:44 p.m.•110 views

CVE-2024-38868

CVE-2024-38868 affects Zohocorp ManageEngine Endpoint Central. The issue is an Incorrect authorization vulnerability when isolating devices . Affected versions are before 11.3.2406.08 and before 11.3.2400.15, respectively. The available documents describe the vulnerability and list remediation gu...

8.3CVSS7.8AI score0.00795EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2024/08/30 5:15 p.m.•34 views

CVE-2024-6204

Zohocorp ManageEngine Exchange Reporter Plus versions before 5715 are vulnerable to SQL Injection in the reports module...

8.3CVSS0.01958EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/08/30 5:10 p.m.•34 views

CVE-2024-6204 SQL injection

Zohocorp ManageEngine Exchange Reporter Plus versions before 5715 are vulnerable to SQL Injection in the reports module...

8.3CVSS7.3AI score0.01958EPSS
SaveExploits0References1
CVE
CVE
•added 2024/08/30 5:10 p.m.•77 views

CVE-2024-6204

Product affected: Zohocorp ManageEngine Exchange Reporter Plus. Vulnerability: SQL Injection in the reports module. Affected versions: before 5715. Root cause / details: SQL injection vulnerability in the reports module (no further technical specifics provided in the cited documents). Impact (as ...

8.3CVSS8.3AI score0.01958EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/08/30 5:10 p.m.•40 views

CVE-2024-6204 SQL injection

Zohocorp ManageEngine Exchange Reporter Plus versions before 5715 are vulnerable to SQL Injection in the reports module...

8.3CVSS0.01958EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/08/30 12:00 a.m.•30 views

ZOHO ManageEngine Endpoint Central 安全漏洞

ZOHO ManageEngine Endpoint Central is a desktop management system from ZOHO, Inc. A security vulnerability exists in ZOHO ManageEngine Endpoint Central that stems from an incorrect authorization vulnerability when isolating devices...

8.3CVSS6.7AI score0.00795EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/30 12:00 a.m.•5 views

CVE-2024-38868: Incorrect Authorization

Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability while isolating the devices.This issue affects Endpoint Central: before 11.3.2406.08 and before 11.3.2400.15...

8.3CVSS5.8AI score0.00795EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/08/30 12:00 a.m.•18 views

ZOHO ManageEngine Exchange Reporter Plus SQL注入漏洞

ZOHO ManageEngine Exchange Reporter Plus is a Web-based Exchange Server reporting software from ZOHO, Inc. A SQL injection vulnerability exists in ZOHO ManageEngine Exchange Reporter Plus versions prior to 5715, which stems from susceptibility to SQL injection attacks...

8.3CVSS7.8AI score0.01958EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/08/30 12:00 a.m.•16 views

PT-2024-37449 · Zohocorp · Zoho Manageengine Exchange Reporter Plus

Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine Exchange Reporter Plus versions before 5715 Description: The issue is related to SQL Injection in the reports module of the software. This allows for potential exploitation. No information is provided about the estimated...

8.3CVSS8.2AI score0.01958EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/30 12:00 a.m.•3 views

CVE-2024-6204: Improper Neutralization of Special Elements used in an SQL Command

Zohocorp ManageEngine Exchange Reporter Plus versions before 5715 are vulnerable to SQL Injection in the reports module...

8.3CVSS5.7AI score0.01958EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/08/30 12:00 a.m.•20 views

PT-2024-28246 · Zohocorp · Manageengine Endpoint Central

Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine Endpoint Central versions prior to 11.3.2406.08 Zohocorp ManageEngine Endpoint Central versions prior to 11.3.2400.15 Description: The issue is related to an incorrect authorization vulnerability when isolating devices i...

8.3CVSS7.2AI score0.00795EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2024/08/29 12:00 a.m.•70 views

ManageEngine Password Manager Pro < 12.4 Build 12431 SQLi

The remote host is running a version of ManageEngine Password Manager Pro prior to 12.4 Build 12431. It is, therefore, affected by a SQL injection vulnerability. An unauthenticated, remote attacker can exploit this to inject or manipulate SQL queries in the back-end database, resulting in the...

8.8CVSS6AI score0.0304EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/08/29 12:00 a.m.•28 views

ManageEngine PAM360 < 7.0 Build 7001 SQLi

The remote host is running a version of ManageEngine PAM360 prior to 7.0 Build 7001. It is, therefore, affected by a SQL injection vulnerability. An unauthenticated, remote attacker can exploit this to inject or manipulate SQL queries in the back-end database, resulting in the disclosure or...

8.8CVSS6AI score0.0304EPSS
SaveExploits0References2
NVD
NVD
•added 2024/08/28 9:15 a.m.•46 views

CVE-2024-5546

Zohocorp ManageEngine Password Manager Pro versions before 12431 and ManageEngine PAM360 versions before 7001 are affected by authenticated SQL Injection vulnerability via a global search option...

8.8CVSS0.0304EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/08/28 8:44 a.m.•50 views

CVE-2024-5546 SQL Injection

Zohocorp ManageEngine Password Manager Pro versions before 12431 and ManageEngine PAM360 versions before 7001 are affected by authenticated SQL Injection vulnerability via a global search option...

8.3CVSS0.0304EPSS
SaveExploits0References1
CVE
CVE
•added 2024/08/28 8:44 a.m.•93 views

CVE-2024-5546

CVE-2024-5546 affects Zoho ManageEngine Password Manager Pro prior to 12.4 Build 12431 and ManageEngine PAM360 prior to 7.0 Build 7001. The issue is an authenticated SQL injection caused by improper input handling in the global search option, enabling an attacker to execute SQL queries on the bac...

8.8CVSS8.6AI score0.0304EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder