Lucene search
K

16 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 8:59 a.m.7 views

CVE-2023-49330

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while getting aggregate report data...

8.8CVSS8.2AI score0.00939EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-52826

Malicious code in bioql PyPI...

9.8CVSS9.1AI score0.08622EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 4:42 a.m.5 views

CVE-2023-48793

Zoho ManageEngine ADAudit Plus through 7250 allows SQL Injection in the aggregate report feature...

9.8CVSS8.2AI score0.08622EPSS
Exploits0
OSV
OSV
added 2024/05/20 1:15 p.m.0 views

CVE-2023-49330

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while getting aggregate report data...

8.8CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2024/05/20 1:15 p.m.11 views

CVE-2023-49330

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while getting aggregate report data...

8.8CVSS8.8AI score0.00939EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/05/20 12:19 p.m.19 views

CVE-2023-49330

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while getting aggregate report data...

8.3CVSS8.2AI score0.00939EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/05/20 12:19 p.m.12 views

CVE-2023-49330

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while getting aggregate report data...

8.3CVSS8.8AI score0.00939EPSS
Exploits0References1
CVE
CVE
added 2024/05/20 12:19 p.m.54 views

CVE-2023-49330

CVE-2023-49330 concerns Zoho ManageEngine ADAudit Plus. Affected versions are those below build 7271, where the issue enables SQL injection when fetching aggregated report data. The root cause is unsafely handling aggregate-report data that allows injection, leading to potential data disclosure o...

8.8CVSS8.1AI score0.00939EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2024/02/02 2:15 a.m.32 views

CVE-2023-48793

Zoho ManageEngine ADAudit Plus through 7250 allows SQL Injection in the aggregate report feature...

9.8CVSS10AI score0.08622EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/02/02 12:0 a.m.2 views

ZOHO ManageEngine ADAudit Plus SQL Injection Vulnerability

ZOHO ManageEngine ADAudit Plus is used by ZOHO to simplify auditing, demonstrate compliance and detect threats. A SQL injection vulnerability exists in ZOHO ManageEngine ADAudit Plus prior to Build 7271, which stems from a vulnerability in the aggregate report feature that is susceptible to SQL...

9.8CVSS7.9AI score0.08622EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/02/02 12:0 a.m.16 views

CVE-2023-48793

Zoho ManageEngine ADAudit Plus through 7250 allows SQL Injection in the aggregate report feature...

8.1AI score0.08622EPSS
Exploits0References2
Veracode
Veracode
added 2021/04/27 6:25 a.m.16 views

Denial Of Service(DoS)

OpenDMARC is vulnerable to denial of service. An insecure null termination in the function opendmarcxmlparse can result in a one-byte heap overflow in opendmarcxml which allows an attacker to parse a specially crafted DMARC aggregate report...

9.8CVSS9AI score0.14593EPSS
Exploits1References11Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/04/27 12:0 a.m.27 views

Debian DLA-2639-1 : opendmarc security update

It was discovered that OpenDMARC, a milter implementation of DMARC, has improper null termination in the function opendmarcxmlparse that can result in a one-byte heap overflow in opendmarcxml when parsing a specially crafted DMARC aggregate report. This can cause remote memory corruption when a...

9.8CVSS8.1AI score0.14593EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2020/11/03 12:0 a.m.25 views

GLSA-202011-02 : OpenDMARC: Heap-based buffer overflow

The remote host is affected by the vulnerability described in GLSA-202011-02 OpenDMARC: Heap-based buffer overflow It was found that OpenDMARC did not properly handle DMARC aggregate reports. Impact : A remote attacker, by sending a specially crafted DMARC aggregate report, could possibly cause a...

9.8CVSS8.7AI score0.14593EPSS
Exploits1References2
Prion
Prion
added 2020/07/27 11:15 p.m.15 views

Design/Logic Flaw

OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 has improper null termination in the function opendmarcxmlparse that can result in a one-byte heap overflow in opendmarcxml when parsing a specially crafted DMARC aggregate report. This can cause remote memory corruption when a '\0' byte...

7.5CVSS9.6AI score0.14593EPSS
Exploits1References7Affected Software3
OSV
OSV
added 2020/07/27 11:15 p.m.0 views

UBUNTU-CVE-2020-12460

OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 has improper null termination in the function opendmarcxmlparse that can result in a one-byte heap overflow in opendmarcxml when parsing a specially crafted DMARC aggregate report. This can cause remote memory corruption when a '\0' byte...

9.8CVSS7.4AI score0.14593EPSS
Exploits1References5
Rows per page
Query Builder