Lucene search
+L

3555 matches found

CNNVD
CNNVD
added 2021/07/17 12:00 a.m.12 views

Zoho managengine ADManager Plus 跨站脚本漏洞

ZOHO ManageEngine ADManager Plus is a set of Microsoft Active Directory management software designed for enterprise users using Windows domains from ZOHO USA.ZOHO ManageEngine ADManager Plus has a security vulnerability, no details of the vulnerability are available...

6.1CVSS5.5AI score0.0094EPSS
SaveExploits0References2
CNVD
CNVD
added 2021/07/05 12:00 a.m.19 views

Zoho ManageEngine ADSelfService Plus Information Disclosure Vulnerability

Zoho ManageEngine ADSelfService Plus is a web-based self-service application that enables end-users to perform tasks such as password reset, account unlocking, profile information update, etc. without relying on the help desk. An information disclosure vulnerability exists in Zoho ManageEngine...

5.9CVSS6.1AI score0.04294EPSS
SaveExploits1References1
NVD
NVD
added 2021/07/02 6:15 p.m.38 views

CVE-2021-31874

Zoho ManageEngine ADSelfService Plus before 6104, in rare situations, allows attackers to obtain sensitive information about the password-sync database application...

5.9CVSS0.04294EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2021/07/02 5:13 p.m.47 views

CVE-2021-31874

Zoho ManageEngine ADSelfService Plus before 6104, in rare situations, allows attackers to obtain sensitive information about the password-sync database application...

5.7AI score0.04294EPSS
SaveExploits1References2
CVE
CVE
added 2021/07/02 5:13 p.m.89 views

CVE-2021-31874

CVE-2021-31874 affects Zoho ManageEngine ADSelfService Plus prior to version 6104. In rare situations, it allows attackers to obtain sensitive information about the password-sync database. The provided documents describe the disclosure impact but do not include concrete exploit details, affected ...

5.9CVSS5.4AI score0.04294EPSS
SaveExploits1References2Affected Software1
CNVD
CNVD
added 2021/07/02 12:00 a.m.54 views

ZOHO ManageEngine Applications Manager Cross-Site Scripting Vulnerability (CNVD-2021-78743)

ZOHO ManageEngine Applications Manager is an IT operations management solution from ZOHO, Inc. ZOHO ManageEngine Applications Manager is vulnerable to a cross-site scripting vulnerability that could be exploited to execute malicious JavaScript...

5.4CVSS2.1AI score0.78268EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/07/02 12:00 a.m.8 views

zoho manageengine adselfservice plus 安全漏洞

Zoho ManageEngine ADSelfService Plus is a web-based self-service application that enables end-users to perform tasks such as password reset, account unlocking, profile information update, etc. without relying on the help desk. An information disclosure vulnerability exists in Zoho ManageEngine...

5.9CVSS5.6AI score0.04294EPSS
SaveExploits1References3
NVD
NVD
added 2021/07/01 12:15 p.m.28 views

CVE-2021-31813

Zoho ManageEngine Applications Manager before 15130 is vulnerable to Stored XSS while importing malicious user details e.g., a crafted user name from AD...

5.4CVSS0.78268EPSS
SaveExploits1References2
Prion
Prion
added 2021/07/01 12:15 p.m.18 views

Cross site scripting

Zoho ManageEngine Applications Manager before 15130 is vulnerable to Stored XSS while importing malicious user details e.g., a crafted user name from AD...

3.5CVSS5.2AI score0.78268EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2021/07/01 11:58 a.m.34 views

CVE-2021-31813

Zoho ManageEngine Applications Manager before 15130 is vulnerable to Stored XSS while importing malicious user details e.g., a crafted user name from AD...

5.3AI score0.78268EPSS
SaveExploits1References2
CVE
CVE
added 2021/07/01 11:58 a.m.75 views

CVE-2021-31813

CVE-2021-31813 affects Zoho ManageEngine Applications Manager prior to 15130. The vulnerability is a Stored XSS flaw that occurs when importing malicious user details (e.g., a crafted user name) from Active Directory. Multiple sources (NVD entry, Red Hat advisory, CNVD/CNNVD entries) describe thi...

5.4CVSS5.1AI score0.78268EPSS
SaveExploits1References2Affected Software1
CNVD
CNVD
added 2021/06/30 12:00 a.m.17 views

Zoho ManageEngine ServiceDesk Plus MSP Improper Access Control Vulnerability

Zoho ManageEngine ServiceDesk Plus MSP is a web-based ITSM suite designed for managed service providers. An improper access control vulnerability exists in versions prior to Zoho ManageEngine ServiceDesk Plus MSP 10521. An attacker could exploit the vulnerability to access internal data...

7.5CVSS6.7AI score0.03517EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/06/30 12:00 a.m.13 views

Zoho ManageEngine ServiceDesk Plus MSP Server-Side Request Forgery Vulnerability

Zoho ManageEngine ServiceDesk Plus MSP is a web-based ITSM suite designed for managed service providers. A server-side request forgery vulnerability exists in versions prior to Zoho ManageEngine ServiceDesk Plus MSP 10521. No detailed vulnerability details are provided at this time...

9.8CVSS6.8AI score0.0237EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/06/30 12:00 a.m.15 views

Zoho ManageEngine ServiceDesk Plus MSP Information Disclosure Vulnerability

Zoho ManageEngine ServiceDesk Plus MSP is a web-based ITSM suite designed for managed service providers. An information disclosure vulnerability exists in versions prior to Zoho ManageEngine ServiceDesk Plus MSP 10522. No detailed vulnerability details are provided at this time...

7.5CVSS6.3AI score0.02776EPSS
SaveExploits0References1
OSV
OSV
added 2021/06/29 2:15 p.m.7 views

CVE-2021-31530

Zoho ManageEngine ServiceDesk Plus MSP before 10522 is vulnerable to Information Disclosure...

7.5CVSS5.8AI score0.02776EPSS
SaveExploits0References3
NVD
NVD
added 2021/06/29 2:15 p.m.27 views

CVE-2021-31530

Zoho ManageEngine ServiceDesk Plus MSP before 10522 is vulnerable to Information Disclosure...

7.5CVSS0.02776EPSS
SaveExploits0References3
NVD
NVD
added 2021/06/29 2:15 p.m.22 views

CVE-2021-31160

Zoho ManageEngine ServiceDesk Plus MSP before 10521 allows an attacker to access internal data...

7.5CVSS0.03517EPSS
SaveExploits0References3
NVD
NVD
added 2021/06/29 2:15 p.m.15 views

CVE-2021-31531

Zoho ManageEngine ServiceDesk Plus MSP before 10521 is vulnerable to Server-Side Request Forgery SSRF...

9.8CVSS0.0237EPSS
SaveExploits0References3
Prion
Prion
added 2021/06/29 2:15 p.m.29 views

Information disclosure

Zoho ManageEngine ServiceDesk Plus MSP before 10522 is vulnerable to Information Disclosure...

5CVSS7.5AI score0.02776EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2021/06/29 2:15 p.m.19 views

Code injection

Zoho ManageEngine ServiceDesk Plus MSP before 10521 allows an attacker to access internal data...

5CVSS7.5AI score0.03517EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder