6460 matches found
CVE-2021-33617
Affected software: Zoho ManageEngine Password Manager Pro. Vulnerability: username enumeration through AjaxResponse.jsp?RequestType=GetUserDomainName&userName= occurs because a failed login response is null only when the username is invalid. Impact: information disclosure via login behavior. Root...
ZOHO ManageEngine Password Manager Pro 安全漏洞
A security vulnerability exists in ZOHO ManageEngine Password Manager Pro, a password manager from ZOHO USA, which stems from the fact that Zoho ManageEngine Password Manager Pro allows login/AjaxResponse.jsp?RequestType=GetUserDomainName & userName= Username enumeration, because the response to ...
CVE-2021-33617: Undefined Security Weakness
Zoho ManageEngine Password Manager Pro before 11.2 11200 allows login/AjaxResponse.jsp?RequestType=GetUserDomainName&userName= username enumeration, because the response to a failed login request is null only when the username is invalid...
PT-2021-20232
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Password Manager Pro versions prior to 11.2 11200 Description: The issue allows for username enumeration due to the response to a failed login request being null only when the username is invalid. This can be exploited throu...
ManageEngine OpManager SumPDU Java Deserialization
An HTTP endpoint used by the Manage Engine OpManager Smart Update Manager component can be leveraged to deserialize an arbitrary Java object. This can be abused by an unauthenticated remote attacker to execute OS commands in the context of the OpManager application NT AUTHORITY\SYSTEM on Windows ...
ManageEngine ServiceDesk Plus Command Injection (CVE-2021-20081)
A command injection vulnerability exists in ManageEngine ServiceDesk Plus. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Zoho ManageEngine ADManager Plus Remote Code Execution Vulnerability
Zoho ManageEngine ADManager Plus is a Microsoft Active Directory management software designed for enterprise users using Windows domains from ZOHO, Inc. A security vulnerability exists in Zoho ManageEngine ADManager Plus that could be exploited by attackers to execute remote code...
ZOHO ManageEngine ADManager Plus Cross-Site Scripting Vulnerability (CNVD-2021-60538)
ZOHO ManageEngine ADManager Plus is a set of Microsoft Active Directory management software designed for enterprise users using Windows domains from ZOHO USA.ZOHO ManageEngine ADManager Plus has a security vulnerability, no details of the vulnerability are available...
ZOHO ManageEngine ADManager Plus Cross-Site Scripting Vulnerability (CNVD-2021-60537)
ZOHO ManageEngine ADManager Plus is a set of Microsoft Active Directory management software designed for enterprise users using Windows domains from ZOHO USA.ZOHO ManageEngine ADManager Plus has a security vulnerability, no details of the vulnerability are available...
ZOHO ManageEngine AssetExplorer 安全漏洞
ZOHO ManageEngine AssetExplorer is a suite of asset management software from ZOHO USA. The software provides asset tracking, scanning of IT assets and asset ownership tracking. A security vulnerability exists in ZOHO ManageEngine AssetExplorer Agent version 1.0.34, which originates when the progr...
PT-2021-3766
Name of the Vulnerable Software and Affected Versions ManageEngine AssetExplorer affected versions not specified Description The issue is related to the Asset Explorer agent not validating HTTPS certificates, allowing an attacker on the network to send a NEWSCAN request to a listening agent and...
CVE-2021-33911
Zoho ManageEngine ADManager Plus before 7110 allows remote code execution...
CVE-2021-36771
Zoho ManageEngine ADManager Plus before 7110 allows reflected XSS...
CVE-2021-36772
Zoho ManageEngine ADManager Plus before 7110 allows stored XSS...
CVE-2021-36771
Zoho ManageEngine ADManager Plus before 7110 allows reflected XSS...
CVE-2021-33911
Zoho ManageEngine ADManager Plus before 7110 allows remote code execution...
Cross site scripting
Zoho ManageEngine ADManager Plus before 7110 allows reflected XSS...
CVE-2021-36772
Zoho ManageEngine ADManager Plus before 7110 allows stored XSS...