10693 matches found
WordPress Swift Framework plugin < 2024.04.30 - Contributor+ Stored XSS vulnerability
Contributor+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin Swift Framework Page Builder versions 2024.04.30...
WordPress Remote Content Shortcode plugin <= 1.5 - Authenticated (Contributor+) Server-Side Request Forgery vulnerability
Authenticated Contributor+ Server-Side Request Forgery vulnerability discovered by Francesco Carlucci in WordPress Plugin Remote Content Shortcode versions = 1.5...
The vulnerability of the Zohocorp ManageEngine Exchange Reporter Plus software, which is related to the lack of measures taken to protect the SQL query structure, allows attackers to execute arbitrary SQL queries against the database.
The vulnerability of the monitoring, analysis, and reporting software Zohocorp ManageEngine Exchange Reporter Plus is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries against the database...
WordPress Slider by 10Web plugin < 1.2.57 - Editor+ Stored XSS vulnerability
Editor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Slider by 10Web versions 1.2.57...
The vulnerability of the Windows Active Directory management and reporting software Zoho ManageEngine ADAudit Plus, related to information disclosure, allows a malicious individual to gain unauthorized access to protected information or modify the configuration of the software.
The vulnerability of the Windows Active Directory management and reporting software Zoho ManageEngine ADAudit Plus relates to information disclosure. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or alter the configuration of the softwa...
The vulnerability of the Custom Actions component in the software support services of Zoho ManageEngine ServiceDesk Plus, Zoho ManageEngine ServiceDesk Plus MSP, and Zoho ManageEngine SupportCenter Plus allows a attacker to execute XSS attacks.
The vulnerability of the Custom Actions component in the software support services of Zoho ManageEngine ServiceDesk Plus, Zoho ManageEngine ServiceDesk Plus MSP, and Zoho ManageEngine SupportCenter Plus exists due to the lack of protective measures for the website structure. Exploiting this...
The vulnerability of the Windows Active Directory management and reporting software Zoho ManageEngine ADAudit Plus, related to access control deficiencies, allows a perpetrator to view data recorded by other users’ sessions.
The vulnerability of the Windows Active Directory AD management and reporting software Zoho ManageEngine ADAudit Plus is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to view data recorded by other users’ sessions...
WordPress Zephyr Project Manager plugin < 3.3.99 - Editor+ stored XSS vulnerability
Editor+ stored XSS vulnerability discovered by Adrian Peña Barragan in WordPress Plugin Zephyr Project Manager versions 3.3.99...
CVE-2024-6748
Zohocorp ManageEngine OpManager, OpManager Plus, OpManager MSP and RMM versions 128317 and below are vulnerable to authenticated SQL injection in the URL monitoring...
CVE-2024-6748
CVE-2024-6748 affects Zohocorp ManageEngine OpManager, OpManager Plus, OpManager MSP and RMM (versions 128317 and below). The vulnerability is an authenticated SQL injection in the URL monitoring component. Connected sources confirm affected products/versions and the authentication requirement; n...
ZOHO多款产品 安全漏洞
ZOHO ManageEngine OpManager and others are products of ZOHO Corporation.ZOHO ManageEngine OpManager is a comprehensive network monitoring software.ZOHO ManageEngine OpManager Plus is an IT operations management solution for Windows and Linux systems. ZOHO ManageEngine OpManager Plus is an IT...
CVE-2024-6703
The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘description’ and 'btntxt' parameters in all versions up to, and including, 5.1.19 due to insufficient input sanitization and output...
CVE-2024-38871
Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the reports module...
CVE-2024-38872
Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the monitoring module...
CVE-2024-38872
Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the monitoring module...
CVE-2024-38872 SQL Injection
Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the monitoring module...
CVE-2024-38872
CVE-2024-38872 concerns Zohocorp ManageEngine Exchange Reporter Plus, with affected versions 5717 and below. The issue arises in the monitoring module, where the SQL query structure is not properly protected, enabling an authenticated SQL injection vulnerability. Exploitation would require valid ...
CVE-2024-38872 SQL Injection
Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the monitoring module...
CVE-2024-38871
CVE-2024-38871 affects ManageEngine Exchange Reporter Plus; versions 5717 and below are vulnerable to an authenticated SQL injection in the reports module. The root cause is a lack of protection against SQL query structure attacks in that component, enabling an attacker with valid credentials to ...