3542 matches found
CVE-2017-11685
Affected product: Zoho ManageEngine Event Log Analyzer (versions 11.4 and 11.5). Vulnerability type / vector: Cross-site scripting (XSS) in the search and display of event data, exploitable via the fName parameter. Root cause (as stated): Multiple reflective XSS vulnerabilities enable remote atta...
CVE-2017-11686
Zoho ManageEngine Event Log Analyzer 11.4 and 11.5 allows remote attackers to obtain an authenticated user's password via XSS vulnerabilities or sniffing non-SSL traffic on the network, because the password is represented in a cookie with a reversible encoding method...
CVE-2017-11686
Zoho ManageEngine Event Log Analyzer (versions 11.4 and 11.5) is affected by a cross-site scripting/vulnerable cookie handling issue that allows a remote attacker to obtain an authenticated user’s password. The root cause is that the password is represented in a cookie with reversible encoding, e...
CVE-2017-11346
Zoho ManageEngine Desktop Central before build 100092 allows remote attackers to execute arbitrary code via vectors involving the upload of help desk videos...
Design/Logic Flaw
Zoho ManageEngine Desktop Central before build 100092 allows remote attackers to execute arbitrary code via vectors involving the upload of help desk videos...
Zoho ManageEngine Desktop Central Arbitrary Code Execution Vulnerability
Zoho ManageEngine Desktop Central DC is a desktop management solution from Zoho. The solution includes software distribution, patch management, system configuration, remote control and other functional modules to support the entire lifecycle of desktop and server management. A security...
CVE-2017-11346
Zoho ManageEngine Desktop Central before build 100092 allows remote attackers to execute arbitrary code via vectors involving the upload of help desk videos...
CVE-2017-11346
This CVE affects ManageEngine Desktop Central, where the FileUploadServlet allows remote code execution due to insufficient validation of the user-supplied fileName parameter during file uploads (notably for HelpDesk_video and related actions). The vulnerability enables an attacker to place a mal...
Zoho Chat - Team Communication - Customized SSL, Exported components, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Zoho Chat - Team Communication published at the 'play' market has multiple vulnerabilities...
Zoho Desk - Corrupted files, Exported components, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Zoho Desk published at the 'play' market has multiple vulnerabilities...
Zoho Mail Admin - Corrupted files, Customized SSL, Exported components vulnerabilities
HackApp vulnerability scanner discovered that application Zoho Mail Admin published at the 'play' market has multiple vulnerabilities...
Design/Logic Flaw
Zoho ManageEngine Desktop Central before build 100082 allows remote attackers to obtain control over all connected active desktops via unspecified vectors...
CVE-2017-7213
Zoho ManageEngine Desktop Central before build 100082 allows remote attackers to obtain control over all connected active desktops via unspecified vectors...
CVE-2017-7213
CVE-2017-7213 affects Zoho ManageEngine Desktop Central. In builds before 100082, an unauthenticated, remote attacker can obtain control over all connected active desktops via unspecified vectors. Multiple sources describe a remote elevation/privilege scenario enabling remote control of managed d...
CVE-2017-7213
Zoho ManageEngine Desktop Central before build 100082 allows remote attackers to obtain control over all connected active desktops via unspecified vectors...
CVE-2016-4890
ZOHO ManageEngine ServiceDesk Plus before 9.2 uses an insecure method for generating cookies, which makes it easier for attackers to obtain sensitive password information by leveraging access to a cookie...
Cross site scripting
Cross-site scripting XSS vulnerability in ZOHO ManageEngine ServiceDesk Plus before 9.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-4889
ZOHO ManageEngine ServiceDesk Plus before 9.0 allows remote authenticated guest users to have unspecified impact by leveraging failure to restrict access to unknown functions...
