Lucene search
+L

237 matches found

CVE
CVE
added 2022/01/12 1:35 p.m.68 views

CVE-2021-44650

Zoho ManageEngine M365 Manager Plus (before Build 4419) contains a command-injection vulnerability in the ProxySettings update flow (Admin ProxySettings and Tenant ProxySettings). This allows remote command execution. Affected versions are prior to Build 4419; remediation is to upgrade to Build 4...

7.2CVSS7.2AI score0.04794EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2022/01/12 12:00 a.m.14 views

Zoho ManageEngine M365 Manager Plus 安全漏洞

Zoho ManageEngine M365 Manager Plus is an extensive Microsoft 365 tool from Zoho India. Used to report, manage, monitor, audit and create alerts for critical activities. Zoho ManageEngine M365 Manager Plus Build 4419 Prior versions of Zoho ManageEngine M365 Manager Plus have a command injection...

7.2CVSS6AI score0.04794EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/08/31 12:00 a.m.56 views

ZOHO ManageEngine Cloud Security Plus Code Injection Vulnerability

ZOHO ManageEngine Cloud Security Plus is a log management and monitoring tool for the public cloud platform from ZOHO, Inc. A code injection vulnerability exists in ZOHO ManageEngine Cloud Security Plus, which originates from Zoho ManageEngine Cloud Security Plus before Build 4117, which can be...

8.8CVSS2AI score0.00994EPSS
SaveExploits0References1
OSV
OSV
added 2021/08/29 8:15 p.m.9 views

CVE-2021-40173

Zoho ManageEngine Cloud Security Plus before Build 4117 allows a CSRF attack on the server proxy settings...

8.8CVSS5.8AI score0.00994EPSS
SaveExploits0References1
NVD
NVD
added 2021/08/29 8:15 p.m.33 views

CVE-2021-40173

Zoho ManageEngine Cloud Security Plus before Build 4117 allows a CSRF attack on the server proxy settings...

8.8CVSS0.00994EPSS
SaveExploits0References1
OSV
OSV
added 2021/08/29 8:15 p.m.17 views

CVE-2021-40172

Zoho ManageEngine Log360 before Build 5219 allows a CSRF attack on proxy settings...

8.8CVSS5.8AI score0.00994EPSS
SaveExploits0References1
NVD
NVD
added 2021/08/29 8:15 p.m.52 views

CVE-2021-40172

Zoho ManageEngine Log360 before Build 5219 allows a CSRF attack on proxy settings...

8.8CVSS0.00994EPSS
SaveExploits0References1
Prion
Prion
added 2021/08/29 8:15 p.m.24 views

Cross site request forgery (csrf)

Zoho ManageEngine Cloud Security Plus before Build 4117 allows a CSRF attack on the server proxy settings...

6.8CVSS8.6AI score0.00994EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/08/29 8:15 p.m.9 views

CVE-2021-40173

Zoho ManageEngine Cloud Security Plus before Build 4117 allows a CSRF attack on the server proxy settings...

8.8CVSS7.3AI score0.00994EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/08/29 8:15 p.m.8 views

CVE-2021-40172

Zoho ManageEngine Log360 before Build 5219 allows a CSRF attack on proxy settings...

8.8CVSS7.3AI score0.00994EPSS
SaveExploits0References2
CVE
CVE
added 2021/08/29 7:18 p.m.56 views

CVE-2021-40172

Zoho ManageEngine Log360 is vulnerable to a CSRF on proxy settings in builds prior to 5219. The CVE-2021-40172 entry documents a cross-site request forgery issue affecting the proxy configuration functionality, with published references indicating that updating to Build 5219 or later mitigates th...

8.8CVSS8.7AI score0.00994EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/08/29 7:18 p.m.57 views

CVE-2021-40172

Zoho ManageEngine Log360 before Build 5219 allows a CSRF attack on proxy settings...

8.9AI score0.00994EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/08/29 12:00 a.m.35 views

ZOHO ManageEngine Log360 跨站请求伪造漏洞

ZOHO ManageEngine Log360 is an integrated log management and Active Directory auditing and alerting solution from ZOHO USA. The solution helps you mitigate security threats, detect persistent attack attempts, detect suspicious user activity and comply with regulatory requirements.A code injection...

8.8CVSS5.8AI score0.00994EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/08/29 12:00 a.m.10 views

ZOHO ManageEngine Cloud Security Plus 跨站请求伪造漏洞

ZOHO ManageEngine Cloud Security Plus is a log management and monitoring tool for the public cloud platform from ZOHO, Inc. A code injection vulnerability exists in ZOHO ManageEngine Cloud Security Plus, which originates from Zoho ManageEngine Cloud Security Plus before Build 4117, which can be...

8.8CVSS5.8AI score0.00994EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/08/16 12:00 a.m.12 views

Shopware 操作系统操作系统命令注入漏洞

Shopware is a suite of open source e-commerce software from the German company Shopware. versions of Shopware prior to 6.4.3.1 have a command injection vulnerability in the mail proxy settings. No detailed vulnerability details are currently available...

9.8CVSS5.7AI score0.02359EPSS
SaveExploits0References2
Citrix
Citrix
added 2020/11/09 12:00 a.m.13 views

Cloud Connector Connectivity Check Utility

NOTE: You can download the required file from the Citrix downloads website by visiting the following link:https://www.citrix.com/downloads/citrix-tools Deprecated - Jan 21, 2025 The Citrix Cloud Connector Connectivity Check Utility has been replaced by the Connectivity Check tool built into the...

6.9AI score
SaveExploits0
OpenVAS
OpenVAS
added 2020/10/06 12:00 a.m.12 views

Fedora: Security Advisory for libproxy (FEDORA-2020-941b563a80)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS9.6AI score0.03556EPSS
SaveExploits0References2
Fedora
Fedora
added 2020/10/04 1:26 a.m.32 views

[SECURITY] Fedora 31 Update: libproxy-0.4.15-15.fc31

libproxy offers the following features: extremely small core footprint 35K no external dependencies within libproxy core libproxy plugins may have dependencies only 3 functions in the stable external API dynamic adjustment to changing network topology a standard way of dealing with proxy settings...

7.5CVSS1.3AI score0.04367EPSS
SaveExploits1
Veracode
Veracode
added 2020/10/01 3:53 a.m.36 views

Configuration Issues

webkitgtk4 has configuration issues. The vulnerability exists as it failed to properly apply configured HTTP proxy settings when downloading livestream video of HLS, DASH, or Smooth Streaming...

5.3CVSS0.9AI score0.03294EPSS
SaveExploits0References14Affected Software1
OpenVAS
OpenVAS
added 2020/09/26 12:00 a.m.19 views

Fedora: Security Advisory for libproxy (FEDORA-2020-f92d372cf1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS8.7AI score0.04367EPSS
SaveExploits1References2
Rows per page
Query Builder