Zoho ManageEngine O365 Manager Plus Remote Code Execution Vulnerability

A security vulnerability exists in Zoho ManageEngine O365 Manager Plus, a software for auditing, monitoring and managing Office 365 from ZOHO, Inc. prior to Build 4416, which stems from an external input data during the construction of a code segment, and the network system or product fails to...

CVE-2021-44652

Zoho ManageEngine O365 Manager Plus before Build 4416 allows remote code execution via BCP file overwrite through the ChangeDBAPI component...

Remote code execution

Zoho ManageEngine O365 Manager Plus before Build 4416 allows remote code execution via BCP file overwrite through the ChangeDBAPI component...

CVE-2021-44652

CVE-2021-44652 affects Zoho ManageEngine O365 Manager Plus prior to Build 4416. The vulnerability enables remote code execution via a BCP file overwrite in the ChangeDBAPI component. Exploitation could occur locally to compromise affected installations; CVSS metrics indicate high impact on confid...

CVE-2021-44652

Zoho ManageEngine O365 Manager Plus before Build 4416 allows remote code execution via BCP file overwrite through the ChangeDBAPI component...

CVE-2021-44652: Undefined Security Weakness

Zoho ManageEngine O365 Manager Plus before Build 4416 allows remote code execution via BCP file overwrite through the ChangeDBAPI component...

PT-2022-12194

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine O365 Manager Plus versions prior to Build 4416 Description The issue allows remote code execution via BCP file overwrite through the ChangeDBAPI component. Recommendations For versions prior to Build 4416, update to Build 441...

ZOHO ManageEngine Log360 code issue vulnerability

ZzOHO ManageEngine Log360 is an integrated log management and Active Directory auditing and alerting solution from ZOHO USA. The solution helps you mitigate security threats, detect persistent attack attempts, detect suspicious user activity, and comply with regulatory requirements.A code issue...

CVE-2021-40177

Zoho ManageEngine Log360 before Build 5225 allows remote code execution via BCP file overwrite...

Design/Logic Flaw

Zoho ManageEngine Log360 before Build 5225 allows remote code execution via BCP file overwrite...

CVE-2021-40177

Zoho ManageEngine Log360 before Build 5225 allows remote code execution via BCP file overwrite...

CVE-2021-40177

CVE-2021-40177 affects Zoho ManageEngine Log360 prior to Build 5225. The vulnerability enables remote code execution by overwriting BCP files, due to a flaw that allows system paths to be overwritten via BCP file processing. Impact per sources: potential remote execution with high severity on net...

CVE-2021-40177: Undefined Security Weakness

Zoho ManageEngine Log360 before Build 5225 allows remote code execution via BCP file overwrite...

PT-2021-22835

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Log360 versions prior to Build 5225 Description The issue allows remote code execution via BCP file overwrite. Recommendations For versions prior to Build 5225, update to Build 5225 or later to resolve the issue...

Phoenix Contact Automationworx BCP File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Phoenix Contact Automationworx. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PT-2021-20189

Name of the Vulnerable Software and Affected Versions Phoenix Contact Classic Automation Worx Software Suite versions 1.87 and below Description The issue concerns a remote code execution vulnerability. Manipulated PC Worx or Config+ projects could lead to remote code execution when unallocated...

CVE-2021-33542: Access of Uninitialized Pointer

Phoenix Contact Classic Automation Worx Software Suite in Version 1.87 and below is affected by a remote code execution vulnerability. Manipulated PC Worx or Config+ projects could lead to a remote code execution when unallocated memory is freed because of incompletely initialized data. The...

CVE-2020-28852

A flaw was found in golang.org. In x/text, a "slice bounds out of range" panic occurs in language.ParseAcceptLanguage while processing a BCP 47 tag...

CVE-2020-28852

In x/text in Go before v0.3.5, a "slice bounds out of range" panic occurs in language.ParseAcceptLanguage while processing a BCP 47 tag. x/text/language is supposed to be able to parse an HTTP Accept-Language header...

CVE-2020-28852

In x/text in Go before v0.3.5, a "slice bounds out of range" panic occurs in language.ParseAcceptLanguage while processing a BCP 47 tag. x/text/language is supposed to be able to parse an HTTP Accept-Language header...