6476 matches found
ManageEngine OpManager SumPDU Java Deserialization
An HTTP endpoint used by the Manage Engine OpManager Smart Update Manager component can be leveraged to deserialize an arbitrary Java object. This can be abused by an unauthenticated remote attacker to execute OS commands in the context of the OpManager application NT AUTHORITY\SYSTEM on Windows ...
ManageEngine ServiceDesk Plus Command Injection (CVE-2021-20081)
A command injection vulnerability exists in ManageEngine ServiceDesk Plus. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
ZOHO ManageEngine ADManager Plus Cross-Site Scripting Vulnerability (CNVD-2021-60538)
ZOHO ManageEngine ADManager Plus is a set of Microsoft Active Directory management software designed for enterprise users using Windows domains from ZOHO USA.ZOHO ManageEngine ADManager Plus has a security vulnerability, no details of the vulnerability are available...
Zoho ManageEngine ADManager Plus Remote Code Execution Vulnerability
Zoho ManageEngine ADManager Plus is a Microsoft Active Directory management software designed for enterprise users using Windows domains from ZOHO, Inc. A security vulnerability exists in Zoho ManageEngine ADManager Plus that could be exploited by attackers to execute remote code...
ZOHO ManageEngine ADManager Plus Cross-Site Scripting Vulnerability (CNVD-2021-60537)
ZOHO ManageEngine ADManager Plus is a set of Microsoft Active Directory management software designed for enterprise users using Windows domains from ZOHO USA.ZOHO ManageEngine ADManager Plus has a security vulnerability, no details of the vulnerability are available...
PT-2021-3766
Name of the Vulnerable Software and Affected Versions ManageEngine AssetExplorer affected versions not specified Description The issue is related to the Asset Explorer agent not validating HTTPS certificates, allowing an attacker on the network to send a NEWSCAN request to a listening agent and...
ZOHO ManageEngine AssetExplorer security vulnerabilities
ZOHO ManageEngine AssetExplorer is a suite of asset management software from ZOHO USA. The software provides asset tracking, scanning of IT assets and asset ownership tracking. A security vulnerability exists in ZOHO ManageEngine AssetExplorer Agent version 1.0.34, which originates when the progr...
CVE-2021-36772
Zoho ManageEngine ADManager Plus before 7110 allows stored XSS...
CVE-2021-33911
Zoho ManageEngine ADManager Plus before 7110 allows remote code execution...
CVE-2021-33911
Zoho ManageEngine ADManager Plus before 7110 allows remote code execution...
CVE-2021-36771
Zoho ManageEngine ADManager Plus before 7110 allows reflected XSS...
CVE-2021-36771
Zoho ManageEngine ADManager Plus before 7110 allows reflected XSS...
CVE-2021-33911
Zoho ManageEngine ADManager Plus before 7110 allows remote code execution...
Remote code execution
Zoho ManageEngine ADManager Plus before 7110 allows remote code execution...
Cross site scripting
Zoho ManageEngine ADManager Plus before 7110 allows stored XSS...
CVE-2021-36772
Zoho ManageEngine ADManager Plus before 7110 allows stored XSS...
Cross site scripting
Zoho ManageEngine ADManager Plus before 7110 allows reflected XSS...
CVE-2021-36771
Zoho ManageEngine ADManager Plus before 7110 allows reflected XSS...
CVE-2021-33911
CVE-2021-33911 affects Zoho ManageEngine ADManager Plus prior to build 7110, which enables remote code execution. The issue is confirmed across multiple feeds (NVD entry and Red Hat CVE page) with a high-severity impact (CVSS v3.1 base score 9.8; network, no authentication, user interaction not r...
