6457 matches found
CVE-2021-20136
ManageEngine Log360 Builds 5235 are affected by an improper access control vulnerability allowing database configuration overwrite. An unauthenticated remote attacker can send a specially crafted message to Log360 to change its backend database to an attacker-controlled database and to force Log3...
CVE-2021-20136
CVE-2021-20136 affects ManageEngine Log360 builds before 5235. The flaw is an improper access control that lets an unauthenticated attacker send crafted messages to overwrite the backend database configuration and force Log360 to restart. This can enable remote code execution by replacing startup...
CVE-2021-20136: Missing Authentication for Critical Function
ManageEngine Log360 Builds 5235 are affected by an improper access control vulnerability allowing database configuration overwrite. An unauthenticated remote attacker can send a specially crafted message to Log360 to change its backend database to an attacker-controlled database and to force Log3...
ZOHO ManageEngine Log360 访问控制错误漏洞
ZOHO ManageEngine Log360 is an integrated log management and Active Directory auditing and alerting solution from ZOHO USA. The solution helps you mitigate security threats, detect persistent attack attempts, detect suspicious user activity, and comply with regulatory requirements.ZOHO ManageEngi...
PT-2021-13793
Name of the Vulnerable Software and Affected Versions: ManageEngine Log360 versions prior to 5235 Description: The issue is related to improper access control, allowing an unauthenticated remote attacker to send a specially crafted message to change the backend database to an attacker-controlled...
Zoho ManageEngine Applications Manager Server-Side Request Forgery Vulnerability
Zoho ManageEngine Applications Manager is an application performance monitoring and management solution for various business monitoring and management needs of enterprises. A server-side request forgery vulnerability exists in Zoho ManageEngine Applications Manager build 15200. No details of the...
CVE-2021-35512
An SSRF issue was discovered in Zoho ManageEngine Applications Manager build 15200...
CVE-2021-35512
An SSRF issue was discovered in Zoho ManageEngine Applications Manager build 15200...
Server side request forgery (ssrf)
An SSRF issue was discovered in Zoho ManageEngine Applications Manager build 15200...
CVE-2021-35512
CVE-2021-35512 describes a Server-Side Request Forgery (SSRF) in Zoho ManageEngine Applications Manager build 15200. The connected documents confirm the component is affected, but do not provide further technical details, exploit specifics, or remediation. The exact root cause, impact scope, and ...
CVE-2021-35512
An SSRF issue was discovered in Zoho ManageEngine Applications Manager build 15200...
Zoho ManageEngine Applications Manager 代码问题漏洞
Zoho ManageEngine Applications Manager is an application performance monitoring and management solution for various business monitoring and management needs of enterprises. A server-side request forgery vulnerability exists in Zoho ManageEngine Applications Manager build 15200. No details of the...
CVE-2021-35512: Server-Side Request Forgery (SSRF)
An SSRF issue was discovered in Zoho ManageEngine Applications Manager build 15200...
PT-2021-20948
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Applications Manager version 15200 Description: A Server-Side Request Forgery SSRF issue was discovered. SSRF is a type of security vulnerability that allows an attacker to manipulate a server into making unauthorized...
The vulnerability of the ManageEngine ADSelfService Plus password reset software lies in the lack of authentication procedures, which allows attackers to bypass the authentication process.
The vulnerability of the ManageEngine ADSelfService Plus password reset software lies in the absence of an authentication process. Exploiting this vulnerability could allow a malicious actor to bypass the authentication process remotely...
Zoho ManageEngine ADManager Plus Remote Code Execution Vulnerability (CNVD-2021-88238)
Zoho ManageEngine ADManager Plus is an easy-to-use Windows Active Directory management and reporting solution. A remote code execution vulnerability exists in Zoho ManageEngine ADManager Plus Build 7111, which stems from not properly validating file uploads in the PasswordExpiry interface and can...
Zoho ManageEngine OpManager SQL Injection Vulnerability (CNVD-2021-88240)
ZOHO ZOHO ManageEngine OpManager is an end-to-end integrated network management software, which can realize all-round, visualized, unified and centralized monitoring and management of IT infrastructure such as network devices, servers, hosts, WAN links, applications and services within the...
Zoho ManageEngine ADManager Plus Remote Code Execution Vulnerability (CNVD-2021-88239)
Zoho ManageEngine ADManager Plus is an easy-to-use Windows Active Directory management and reporting solution. A remote code execution vulnerability exists in Zoho ManageEngine ADManager Plus Build 7111, which stems from not properly validating file uploads in the Personalization interface and ca...
Zoho ManageEngine OpManager SQL Injection Vulnerability (CNVD-2021-88241)
ZOHO ManageEngine OpManager is an end-to-end integrated network management software that enables comprehensive, visual, unified and centralized monitoring and management of IT infrastructure, including network devices, servers, hosts, WAN links, applications and services, within an enterprise...