Lucene search
+L

5683 matches found

Tenable Nessus
Tenable Nessus
added 2022/01/18 12:00 a.m.113 views

ManageEngine Desktop Central < 10.1.2137.9 Authentication Bypass (CVE-2021-44757)

The ManageEngine Desktop Central application running on the remote host is affected by an authentication bypass vulnerability which allows an adversary to bypass authentication and read unauthorized data or write an arbitrary zip file on the Desktop Central server. Note that Nessus has not tested...

9.1CVSS8.8AI score0.24195EPSS
SaveExploits0References3
CNVD
CNVD
added 2022/01/14 12:00 a.m.38 views

ZOHO ManageEngine Desktop Central MSP Information Disclosure Vulnerability

ZOHO ManageEngine Desktop Central MSP is a suite of desktop and mobile device management software for MSPs Managed Service Providers from ZOHO USA. The software enables MSPs to remotely manage desktops, servers, and mobile devices in their customer networks, and provides differentiated management...

6.5CVSS3.1AI score0.02759EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/01/14 12:00 a.m.39 views

ZOHO ManageEngine Desktop Central MSP has an unspecified vulnerability

ZOHO ManageEngine Desktop Central MSP is a suite of desktop and mobile device management software for MSPs Managed Service Providers from ZOHO. A security vulnerability exists in versions prior to Zoho ManageEngine Desktop Central 10.0.662, which is caused by a program that launches an executable...

7.8CVSS2.6AI score0.00469EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2022/01/12 11:27 p.m.27 views

Security Bulletin: Rational Asset Analyzer (RAA) is vulnerable to arbitrary code execution due to Apache Log4j (CVE-2021-4104)

Summary A vulnerability in Apache Log4j CVE-2021-4104 affects WebSphere Application Server WAS Liberty which is used by RAA. The vulnerability was addressed by removing Apache Log4j from WAS Liberty. Vulnerability Details CVEID: CVE-2021-4104 DESCRIPTION: Apache Log4j could allow a remote attacke...

7.5CVSS2.4AI score0.81147EPSS
SaveExploits9Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/01/12 12:00 a.m.13 views

The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses lies in improper code generation, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted request...

7.2CVSS7.9AI score0.02157EPSS
SaveExploits0References4
OSV
OSV
added 2022/01/10 2:11 p.m.7 views

CVE-2021-46166

Zoho ManageEngine Desktop Central before 10.0.662 allows authenticated users to obtain sensitive information from the database by visiting the Reports page...

6.5CVSS6.6AI score0.02759EPSS
SaveExploits0References1
NVD
NVD
added 2022/01/10 2:11 p.m.22 views

CVE-2021-46166

Zoho ManageEngine Desktop Central before 10.0.662 allows authenticated users to obtain sensitive information from the database by visiting the Reports page...

6.5CVSS0.02759EPSS
SaveExploits0References1
OSV
OSV
added 2022/01/10 2:11 p.m.9 views

CVE-2021-46165

Zoho ManageEngine Desktop Central before 10.0.662, during startup, launches an executable file from the batch files, but this file's path might not be properly defined...

7.8CVSS7.1AI score0.00469EPSS
SaveExploits0References1
NVD
NVD
added 2022/01/10 2:11 p.m.30 views

CVE-2021-46165

Zoho ManageEngine Desktop Central before 10.0.662, during startup, launches an executable file from the batch files, but this file's path might not be properly defined...

7.8CVSS0.00469EPSS
SaveExploits0References1
NVD
NVD
added 2022/01/10 2:11 p.m.26 views

CVE-2021-46164

Zoho ManageEngine Desktop Central before 10.0.662 allows remote code execution by an authenticated user who has complete access to the Reports module...

8.8CVSS0.07136EPSS
SaveExploits0References1
OSV
OSV
added 2022/01/10 2:11 p.m.10 views

CVE-2021-46164

Zoho ManageEngine Desktop Central before 10.0.662 allows remote code execution by an authenticated user who has complete access to the Reports module...

8.8CVSS7.8AI score0.07136EPSS
SaveExploits0References1
Prion
Prion
added 2022/01/10 2:11 p.m.18 views

Remote code execution

Zoho ManageEngine Desktop Central before 10.0.662 allows remote code execution by an authenticated user who has complete access to the Reports module...

6.5CVSS8.8AI score0.07136EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2022/01/10 2:11 p.m.26 views

Design/Logic Flaw

Zoho ManageEngine Desktop Central before 10.0.662, during startup, launches an executable file from the batch files, but this file's path might not be properly defined...

4.6CVSS7.6AI score0.00469EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2022/01/10 2:11 p.m.20 views

Information disclosure

Zoho ManageEngine Desktop Central before 10.0.662 allows authenticated users to obtain sensitive information from the database by visiting the Reports page...

4CVSS6.1AI score0.02759EPSS
SaveExploits0References1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/01/10 12:57 p.m.127 views

Security Bulletin: Vulnerability in Apache Log4j (CVE-2021-44228) affects Power HMC

Summary Log4j is used by IBM Power Hardware Management Console HMC for logging system/application events for diagnostics. This bulletin provides a remediation for the vulnerability, CVE-2021-44228 by upgrading IBM Power Hardware Management Console HMC respective PTF and thus addressing the exposu...

10CVSS0.8AI score0.99999EPSS
SaveExploits364Affected Software2
CNNVD
CNNVD
added 2022/01/10 12:00 a.m.9 views

ZOHO ManageEngine Desktop Central MSP 信息泄露漏洞

ZOHO ManageEngine Desktop Central MSP is a suite of desktop and mobile device management software for MSPs Managed Service Providers from ZOHO USA. The software enables MSPs to remotely manage desktops, servers, and mobile devices in their customer networks, and provides differentiated management...

6.5CVSS5.6AI score0.02759EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/01/10 12:00 a.m.13 views

ZOHO ManageEngine Desktop Central 安全漏洞

ZOHO ManageEngine Desktop Central DC is a desktop management solution from ZOHO, Inc. The solution includes software distribution, patch management, system configuration, remote control, and other functional modules to support the entire lifecycle of desktop and server management. properly...

8.8CVSS5.8AI score0.07136EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/01/10 12:00 a.m.10 views

ZOHO ManageEngine Desktop Central MSP 安全漏洞

ZOHO ManageEngine Desktop Central MSP is a suite of desktop and mobile device management software for MSPs Managed Service Providers from ZOHO. A security vulnerability exists in versions prior to Zoho ManageEngine Desktop Central 10.0.662, which is caused by a program that launches an executable...

7.8CVSS5.5AI score0.00469EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/01/09 12:26 a.m.37 views

CVE-2021-46164

Zoho ManageEngine Desktop Central before 10.0.662 allows remote code execution by an authenticated user who has complete access to the Reports module...

9.2AI score0.07136EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/01/09 12:26 a.m.14 views

CVE-2021-46164

Zoho ManageEngine Desktop Central before 10.0.662 allows remote code execution by an authenticated user who has complete access to the Reports module...

8.8CVSS8.4AI score0.07136EPSS
SaveExploits0References2
Rows per page
Query Builder