Lucene search
+L

605 matches found

Prion
Prion
added 2022/08/10 8:16 p.m.16 views

Remote code execution

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 2022-07-29 through 2022-07-30 125658, 126003, 126105, and 126120 allow authenticated users to make database changes that lead to remote code execution...

6.5CVSS8.9AI score0.78326EPSS
SaveExploits0References1Affected Software7
Cvelist
Cvelist
added 2022/08/10 2:17 p.m.53 views

CVE-2022-36923

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils before 2022-07-27 through 2022-07-28 125657, 126002, 126104, and 126118 allow unauthenticated attackers to obtain a user's API key, and then access external...

7.7AI score0.08206EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/08/10 2:17 p.m.2 views

CVE-2022-36923

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils before 2022-07-27 through 2022-07-28 125657, 126002, 126104, and 126118 allow unauthenticated attackers to obtain a user's API key, and then access external...

7.2AI score0.08206EPSS
SaveExploits0References1
CVE
CVE
added 2022/08/10 2:17 p.m.466 views

CVE-2022-36923

CVE-2022-36923 affects Zoho ManageEngine products (OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils) with an authentication bypass that allows an unauthenticated attacker to retrieve a user’s API key and use external APIs. T...

7.5CVSS7.3AI score0.08206EPSS
SaveIn wildExploits0References1Affected Software7
CNNVD
CNNVD
added 2022/08/10 12:0 a.m.8 views

多款ZOHO ManageEngine产品安全漏洞

ZOHO ManageEngine OpManager and others are products of ZOHO India.ZOHO ManageEngine OpManager is a suite of network, server and virtualization monitoring software.ZOHO ManageEngine OpManager Plus is an IT operations management solution for Windows and Linux systems. ZOHO ManageEngine OpManager Pl...

8.8CVSS8.6AI score0.78326EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/08/10 12:0 a.m.14 views

多款ZOHO ManageEngine产品安全漏洞

ZOHO ManageEngine OpManager etc. are products of ZOHO India.ZOHO ManageEngine OpManager is a comprehensive network monitoring software.ZOHO ManageEngine OpManager Plus is an IT operations management solution for Windows and Linux systems. ZOHO ManageEngine OpManager Plus is an IT operations...

7.5CVSS7.2AI score0.08206EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/08/10 12:0 a.m.8 views

PT-2022-23689

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager versions before 2022-07-27 through 2022-07-28 Zoho ManageEngine OpManager Plus versions before 2022-07-27 through 2022-07-28 Zoho ManageEngine OpManager MSP versions before 2022-07-27 through 2022-07-28 Zoho...

7.5CVSS7.5AI score0.08206EPSS
SaveExploits0References13
Cvelist
Cvelist
added 2022/08/09 3:15 p.m.40 views

CVE-2022-37024

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 2022-07-29 through 2022-07-30 125658, 126003, 126105, and 126120 allow authenticated users to make database changes that lead to remote code execution...

9.2AI score0.78326EPSS
SaveExploits0References1
CVE
CVE
added 2022/08/09 3:15 p.m.76 views

CVE-2022-37024

Summary (CVE-2022-37024) : Multiple Zoho ManageEngine products (OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, OpUtils) prior to 2022-07-29 are affected by a remote code execution flaw. The root cause is insufficient input validation in the getDNSResolv...

8.8CVSS8.9AI score0.78326EPSS
SaveExploits0References1Affected Software7
OSV
OSV
added 2022/07/18 1:15 p.m.7 views

CVE-2022-35404

ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable to unauthorized file and directory creation on a server machine...

8.2CVSS7.3AI score0.02798EPSS
SaveExploits0References2
NVD
NVD
added 2022/07/18 1:15 p.m.14 views

CVE-2022-35404

ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable to unauthorized file and directory creation on a server machine...

8.2CVSS0.02798EPSS
SaveExploits0References2
Prion
Prion
added 2022/07/18 1:15 p.m.18 views

Design/Logic Flaw

ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable to unauthorized file and directory creation on a server machine...

6.4CVSS8AI score0.02798EPSS
SaveExploits0References2Affected Software4
CVE
CVE
added 2022/07/18 12:25 p.m.82 views

CVE-2022-35404

The CVE-2022-35404 entry affects ManageEngine Password Manager Pro (versions 12100 and prior) and OPManager (126100 and prior). The vulnerability enables unauthorized file and directory creation on a server machine, indicating a local impact on availability. Public details in connected documents ...

8.2CVSS8AI score0.02798EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/07/18 12:25 p.m.41 views

CVE-2022-35404

ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable to unauthorized file and directory creation on a server machine...

8.3AI score0.02798EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/07/18 12:0 a.m.9 views

ZOHO ManageEngine Password Manager Pro 输入验证错误漏洞

ZOHO ManageEngine Password Manager Pro is a password manager from ZOHO, Inc. An input validation error vulnerability exists in ZOHO ManageEngine Password Manager Pro 12100 and earlier and OPManager 126100 and earlier, which originates from a vulnerability that allows the creation of a large numbe...

8.2CVSS7.8AI score0.02798EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/07/18 12:0 a.m.6 views

PT-2022-22806 · Zoho · Manageengine Opmanager +1

Name of the Vulnerable Software and Affected Versions: ManageEngine Password Manager Pro versions 12100 and prior ManageEngine OPManager versions 126100 and prior Description: The issue allows for unauthorized file and directory creation on a server machine. Recommendations: For ManageEngine...

8.2CVSS8.1AI score0.02798EPSS
SaveExploits0References5
Check Point Advisories
Check Point Advisories
added 2022/07/03 12:0 a.m.27 views

Zoho ManageEngine OPManager SQL Injection (CVE-2022-29535)

An SQL injection vulnerability exists in Zoho ManageEngine OPManager. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

7.5CVSS5.5AI score0.93084EPSS
SaveExploits0
CNVD
CNVD
added 2022/05/09 12:0 a.m.50 views

ZOHO ManageEngine OpManager SQL Injection Vulnerability (CNVD-2022-68819)

ZOHO ManageEngine OpManager is a network, server, and virtualization monitoring software from ZOHO, Inc. A SQL injection vulnerability exists in ZOHO ManageEngine OpManager version 125588 and prior versions, which can be exploited by remote attackers to perform SQL injection via some default...

7.5CVSS4.5AI score0.93084EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/05/05 11:15 p.m.3 views

CVE-2022-29535

Zoho ManageEngine OPManager through 125588 allows SQL Injection via a few default reports...

9.8CVSS6AI score0.93084EPSS
SaveExploits0References3
OSV
OSV
added 2022/05/05 11:15 p.m.9 views

CVE-2022-29535

Zoho ManageEngine OPManager through 125588 allows SQL Injection via a few default reports...

9.8CVSS5.8AI score0.93084EPSS
SaveExploits0References2
Rows per page
Query Builder