30 matches found
Zoho ManageEngine OpManager SQL Injection Vulnerability (CNVD-2021-88240)
ZOHO ZOHO ManageEngine OpManager is an end-to-end integrated network management software, which can realize all-round, visualized, unified and centralized monitoring and management of IT infrastructure such as network devices, servers, hosts, WAN links, applications and services within the...
CVE-2021-40493
Zoho ManageEngine OpManager before 125437 is vulnerable to SQL Injection in the support diagnostics module. This occurs via the pollingObject parameter of the getDataCollectionFailureReason API...
CVE-2021-40493
Zoho ManageEngine OpManager before 125437 is vulnerable to SQL Injection in the Support Diagnostics module via the pollingObject parameter of the getDataCollectionFailureReason API. The issue arises from insufficient validation of HTTP request parameters processed by that method, as described in ...
CVE-2006-1036
Multiple unspecified vulnerabilities in the Oracle Diagnostics module 2.2 and earlier have unknown impact and attack vectors, related to "permissions."...
CVE-2006-1035
Unspecified vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to access diagnostics tests via unknown attack vectors...
Design/Logic Flaw
Multiple unspecified vulnerabilities in the Oracle Diagnostics module 2.2 and earlier have unknown impact and attack vectors, related to "permissions."...
Design/Logic Flaw
Unspecified vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to access diagnostics tests via unknown attack vectors...
CVE-2006-1037
The CVE affects the Oracle Diagnostics module (versions up to 2.2) where a SQL injection vulnerability allows remote attackers to execute arbitrary SQL commands via unknown attack vectors. This is evidenced by the CVE entry and corroborating records (NVD/NVD-derived data). The connected documents...
