5663 matches found
CVE-2018-5340
CVE-2018-5340 affects Zoho ManageEngine Desktop Central versions 10.0.124 and 10.0.184. The issue is that a superuser account (with permission to write to the filesystem via SQL queries) can access the database and potentially perform write operations to the filesystem. The CNVD entry explicitly ...
CVE-2018-5340
An issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: database access using a superuser account specifically, an account with permission to write to the filesystem via SQL queries...
CVE-2018-5341
An issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: a missing server-side check on the file type/extension when uploading and modifying scripts...
CVE-2018-5341
CVE-2018-5341 affects Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184. The issue is a missing server-side check on the file type/extension when uploading and modifying scripts, as described in the NVD entry. This incomplete validation could enable an attacker to upload or modify scripts w...
CVE-2018-5338
CVE-2018-5338 affects Zoho ManageEngine Desktop Central versions 10.0.124 and 10.0.184, where the database query mechanism lacks proper authentication/authorization, allowing bypass of security restrictions. This is described across multiple sources (NVD entry notes missing auth for the database ...
holidaycottages.net XSS vulnerability
Open Bug Bounty ID: OBB-602034 Description| Value ---|--- Affected Website:| holidaycottages.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
tenniscentral.net XSS vulnerability
Open Bug Bounty ID: OBB-600963 Description| Value ---|--- Affected Website:| tenniscentral.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Man-in-the-Middle (MitM)
given-http-report is vulnerable to man-in-the-middle MitM attacks. The vulnerability exists due to the usage of http:// protocol when downloading a jar from central.maven.org, allowing attackers to hijack the connection and replacing the jar that could contain a malicious intent...
ManageEngine Desktop Central 9 < Build 92027 Multiple Vulnerabilities
The ManageEngine Desktop Central application running on the remote host is version 9 prior to build 92027. It is, therefore, affected by multiple vulnerabilities including a remote code execution and three cross-site scripting vulnerabilities. Note that Nessus has not attempted to exploit these...
evento.centralfordpr.com XSS vulnerability
Open Bug Bounty ID: OBB-585445 Description| Value ---|--- Affected Website:| evento.centralfordpr.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
ManageEngine Desktop Central <= 9.1.099 Multiple XSS Vulnerabilities
ManageEngine Desktop Central is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...
Cross site scripting
Zoho ManageEngine Desktop Central version 9.1.0 build 91099 has multiple XSS issues that were fixed in build 92026...
CVE-2018-8722
Zoho ManageEngine Desktop Central version 9.1.0 build 91099 has multiple XSS issues that were fixed in build 92026...
CVE-2018-8722
Zoho ManageEngine Desktop Central version 9.1.0 build 91099 has multiple XSS issues that were fixed in build 92026...
CVE-2018-8722
Zoho ManageEngine Desktop Central version 9.1.0 build 91099 has multiple XSS issues that were fixed in build 92026...
CVE-2018-8722
Zoho ManageEngine Desktop Central version 9.1.0 build 91099 has multiple XSS issues that were fixed in build 92026...
CVE-2018-8722
CVE-2018-8722 concerns Zoho ManageEngine Desktop Central 9.1.0 build 91099, which is affected by multiple cross-site scripting (XSS) vulnerabilities. The issue is resolved in build 92026. Several connected sources (NVD entry, vulnerability databases, and vendor/IDS references) consistently descri...
Zoho ManageEngine Desktop Central Cross-Site Scripting Vulnerability
ZOHO ManageEngine Desktop Central DC is a desktop management solution from ZOHO. The solution includes software distribution, patch management, system configuration, remote control and other functional modules to support the entire lifecycle of desktop and server management. A cross-site scriptin...
Cross site scripting
In SAP Business Objects Business Intelligence Platform, 4.00, 4.10, 4.20, 4.30, the Central Management Console CMC does not sufficiently encode user controlled inputs which results in Cross-Site Scripting...
CVE-2018-2397
In SAP Business Objects Business Intelligence Platform, 4.00, 4.10, 4.20, 4.30, the Central Management Console CMC does not sufficiently encode user controlled inputs which results in Cross-Site Scripting...