222 matches found
Design/Logic Flaw
In Zoho ManageEngine Password Manager Pro before 11.1 build 11104, attackers are able to retrieve credentials via a browser extension for non-website resource types...
CVE-2021-31857
The CVE-2021-31857 entry affects Zoho ManageEngine Password Manager Pro prior to 11.1 build 11104. The issue allows credential retrieval via a browser extension for non-website resource types, as described in multiple sources (NVD, Red Hat entry). The underlying cause is not explicitly detailed b...
CVE-2021-31857
In Zoho ManageEngine Password Manager Pro before 11.1 build 11104, attackers are able to retrieve credentials via a browser extension for non-website resource types...
ZOHO ManageEngine Password Manager Pro 安全漏洞
ZOHO ManageEngine Password Manager Pro is a password manager from ZOHO USA. Additional vulnerabilities exist in Zoho ManageEngine Password Manager Pro. An attacker can use this vulnerability to obtain credentials for non-website resource types via a browser extension...
ZOHO ManageEngine Password Manager Pro Cross-Site Request Forgery Vulnerability
ZOHO ManageEngine Password Manager Pro is a password manager from ZOHO USA. A cross-site request forgery vulnerability exists in Zoho ManageEngine Password Manager Pro 10.4 and earlier versions, which stems from the program's failure to protect against cross-site request forgery attacks. An...
ZOHO ManageEngine Password Manager Pro Injection Vulnerability
Zoho ManageEngine Password Manager Pro is a password management software for storing, sharing and resetting passwords. A security vulnerability exists in Zoho ManageEngine Password Manager Pro. The vulnerability stems from improper handling of specially crafted names in the "Export Passwords"...
CVE-2020-9346
Zoho ManageEngine Password Manager Pro 10.4 and prior has no protection against Cross-site Request Forgery CSRF attacks, as demonstrated by changing a user's role...
CVE-2020-9346
Zoho ManageEngine Password Manager Pro 10.4 and prior has no protection against Cross-site Request Forgery CSRF attacks, as demonstrated by changing a user's role...
Design/Logic Flaw
Zoho ManageEngine Password Manager Pro through 10.x has a CSV Excel Macro Injection vulnerability via a crafted name that is mishandled by the Export Passwords feature. NOTE: the vendor disputes the significance of this report because they expect CSV risk mitigation to be provided by an external...
CVE-2020-9347
Zoho ManageEngine Password Manager Pro (versions up to 10.x; vendor notes no CSV constraints planned) contains a CSV Excel Macro Injection vulnerability. The issue arises when a crafted name is mishandled by the Export Passwords feature, enabling potential macro injection via CSV exports. Red Hat...
CVE-2020-9347
Zoho ManageEngine Password Manager Pro through 10.x has a CSV Excel Macro Injection vulnerability via a crafted name that is mishandled by the Export Passwords feature. NOTE: the vendor disputes the significance of this report because they expect CSV risk mitigation to be provided by an external...
CVE-2020-9346
CVE-2020-9346 concerns Zoho ManageEngine Password Manager Pro (versions 10.4 and earlier). The issue is a lack of protection against Cross-site Request Forgery (CSRF) that can be demonstrated by changing a user’s role, implying an access/privilege modification via forged requests. Exploitation st...
CVE-2020-9346
Zoho ManageEngine Password Manager Pro 10.4 and prior has no protection against Cross-site Request Forgery CSRF attacks, as demonstrated by changing a user's role...
PT-2020-20601 · Zoho · Manageengine Password Manager Pro
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Password Manager Pro versions 10.4 and prior Description: The issue concerns a lack of protection against Cross-site Request Forgery CSRF attacks. This can be demonstrated by an attacker changing a user's role...
PT-2020-20602 · Zoho · Manageengine Password Manager Pro
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Password Manager Pro versions prior to 11.x Description: The issue is related to a CSV Excel Macro Injection vulnerability. It occurs when a crafted name is mishandled by the Export Passwords feature. The vendor has expresse...
CVE-2016-1159
In ZOHO Password Manager Pro PMP 8.3.0 Build 8303 and 8.4.0 Build 8400,8401,8402, underprivileged users can obtain sensitive information entry password history via a vulnerable hidden service...
CVE-2016-1159
In ZOHO Password Manager Pro PMP 8.3.0 Build 8303 and 8.4.0 Build 8400,8401,8402, underprivileged users can obtain sensitive information entry password history via a vulnerable hidden service...
ManageEngine Password Manager Pro Multiple XSS Vulnerabilities (Dec 2017)
ManageEngine Password Manager Pro is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...
ZOHO ManageEngine Password Manager Pro Cross-Site Scripting Vulnerability
ZOHO ManageEngine Password Manager Pro PMP is a set of password management software from ZOHO. The software can record general password information, website login passwords, software registration codes and Email account passwords. A cross-site scripting vulnerability exists in the SearchResult.ec...