CVE-2024-36035 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in user session recording...

CVE-2024-36518 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's dashboard...

CVE-2024-36518 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's dashboard...

CVE-2024-36518

ManageEngine ADAudit Plus before build 8110 is affected by authenticated SQL Injection in the attack surface analyzer’s dashboard due to inadequate SQL query protection. The issue could allow an attacker with valid credentials to access or exfiltrate data from the application’s database through t...

CVE-2024-5487

CVE-2024-5487 affects Zohocorp ManageEngine ADAudit Plus versions below 8110. It is an authenticated SQL Injection vulnerability in the attack surface analyzer’s export option, with CVSS: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (NVD) and base score 8.8 HIGH. Red Hat and other feeds corroborate the is...

CVE-2024-5487 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's export option...

CVE-2024-5487 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's export option...

CVE-2024-5527 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in file auditing configuration...

CVE-2024-5527 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in file auditing configuration...

CVE-2024-5527

CVE-2024-5527 affects Zohocorp ManageEngine ADAudit Plus versions below 8110. The vulnerability is an authenticated SQL Injection in the file auditing configuration, caused by unsafe handling of input in that configuration. Impact is described as high for confidentiality, integrity, and availabil...

ZOHO ManageEngine ADAudit Plus 安全漏洞

ZOHO ManageEngine ADAudit Plus is used by ZOHO USA, Inc. to simplify auditing, demonstrate compliance and detect threats. A security vulnerability exists in ZOHO ManageEngine ADAudit Plus version 8003 and prior versions, which stems from a search option in summary reports that is susceptible to...

PT-2024-26856 · Zohocorp · Zoho Manageengine Adaudit Plus

Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine ADAudit Plus versions below 8003 Description: The issue is related to an authenticated SQL Injection vulnerability in user session recording. Recommendations: For Zohocorp ManageEngine ADAudit Plus versions below 8003,...

ZOHO ManageEngine ADAudit Plus 安全漏洞

ZOHO ManageEngine ADAudit Plus is used by ZOHO USA, Inc. to simplify auditing, prove compliance and detect threats. A security vulnerability exists in ZOHO ManageEngine ADAudit Plus version 8110 and prior versions, which stems from a vulnerability to authenticated SQL injection attacks in the...

ZOHO ManageEngine ADAudit Plus 安全漏洞

ZOHO ManageEngine ADAudit Plus is used by ZOHO to simplify auditing, demonstrate compliance and detect threats. A security vulnerability exists in ZOHO ManageEngine ADAudit Plus version 8110 and prior versions, which stems from vulnerability to authenticated SQL injection attacks in a file audit...

PT-2024-26855 · Zohocorp · Zoho Manageengine Adaudit Plus

Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine ADAudit Plus versions below 8003 Description: The issue concerns an authenticated SQL Injection vulnerability in the aggregate reports' search option. This allows attackers to inject malicious SQL code, potentially leadi...

ZOHO ManageEngine ADAudit Plus 安全漏洞

ZOHO ManageEngine ADAudit Plus is used by ZOHO USA, Inc. to simplify auditing, prove compliance and detect threats. A security vulnerability exists in ZOHO ManageEngine ADAudit Plus prior to version 8110, which stems from the vulnerability to authenticated SQL injection attacks in the Attack...

ZOHO ManageEngine ADAudit Plus 安全漏洞

ZOHO ManageEngine ADAudit Plus is used by ZOHO to simplify auditing, demonstrate compliance and detect threats. A security vulnerability exists in ZOHO ManageEngine ADAudit Plus version 8003 and prior versions, which arises from vulnerability to authenticated SQL injection attacks in user session...

WordPress Gutenberg Blocks with AI by Kadence WP plugin < 3.2.39 - Contributor+ Stored XSS via "Days Label" vulnerability

Contributor+ Stored XSS via "Days Label" vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Gutenberg Blocks by Kadence Blocks versions 3.2.39...

Apple Security Update: iOS 16.7.10 and iPadOS 16.7.10

Apple recommends to install security update iOS 16.7.10 and iPadOS 16.7.10 on devices iPhone 8, iPhone 8 Plus, iPhone X, iPad 5th generation, iPad Pro 9.7-inch, and iPad Pro 12.9-inch 1st generation...

Apple Security Update: iOS 16.7.10 and iPadOS 16.7.10

Apple recommends to install security update iOS 16.7.10 and iPadOS 16.7.10 on devices iPhone 8, iPhone 8 Plus, iPhone X, iPad 5th generation, iPad Pro 9.7-inch, and iPad Pro 12.9-inch 1st generation...