6469 matches found
Code injection
Zoho ManageEngine ADAudit Plus before 7006 allows attackers to write to, and execute, arbitrary files...
Remote code execution
Zoho ManageEngine ADManager Plus before 7115 is vulnerable to a filter bypass that leads to file-upload remote code execution...
Sql injection
Zoho ManageEngine Network Configuration Manager before ??125465 is vulnerable to SQL Injection in a configuration search...
CVE-2021-42002
Zoho ManageEngine ADManager Plus before 7115 is vulnerable to a filter bypass that leads to file-upload remote code execution...
CVE-2021-42847
Zoho ManageEngine ADAudit Plus before 7006 allows attackers to write to, and execute, arbitrary files...
CVE-2021-41833
Zoho ManageEngine Patch Connect Plus before 90099 is vulnerable to unauthenticated remote code execution...
Remote code execution
Zoho ManageEngine Patch Connect Plus before 90099 is vulnerable to unauthenticated remote code execution...
Sql injection
Zoho ManageEngine Network Configuration Manager before ??125465 is vulnerable to SQL Injection in a hardware details search...
CVE-2021-42002
Zoho ManageEngine ADManager Plus before 7115 is vulnerable to a filter bypass that leads to file-upload remote code execution...
CVE-2021-42002
Affected software: Zoho ManageEngine ADManager Plus up to build 7114 (before 7.1 Build 7115). Vulnerability: A filter bypass enables an unauthenticated, remote attacker to upload a file and achieve remote code execution. Impact: Remote code execution with high severity (per CVE metrics). Root cau...
CVE-2021-41833
Zoho ManageEngine Patch Connect Plus before 90099 is vulnerable to unauthenticated remote code execution...
CVE-2021-41833
Zoho ManageEngine Patch Connect Plus is affected by CVE-2021-41833. The vulnerability exists in Patch Connect Plus versions prior to 90099 and allows unauthenticated remote code execution. The CNVD entry confirms the same issue and notes exploitation by an unauthenticated attacker to achieve remo...
CVE-2021-41081
ManageEngine Network Configuration Manager (NCM) prior to 12.5.465 is vulnerable to SQL Injection in the configuration search. Root cause is improper input handling in the search functionality. Impact includes potential disclosure/modification of data; CVSS scores in sources indicate high to crit...
CVE-2021-41081
Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a configuration search...
CVE-2021-41080
CVE-2021-41080 affects Zoho ManageEngine Network Configuration Manager. Based on connected sources, the vulnerability is a SQL injection in the hardware details search function. The issue occurs in versions prior to 125465. The notable impact is high (CVE metrics show CRITICAL/ HIGH depending on ...
CVE-2021-41080
Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a hardware details search...
Zoho Corporation ADManager Plus 安全漏洞
Zoho ManageEngine ADManager Plus is an easy-to-use Windows Active Directory management and reporting solution. A filter bypass vulnerability exists in Zoho ManageEngine ADManager Plus prior to version 7115, which can be exploited by an attacker to upload files and enable remote code execution...
CVE-2021-41833: Unrestricted Upload of File with Dangerous Type
Zoho ManageEngine Patch Connect Plus before 90099 is vulnerable to unauthenticated remote code execution...