10673 matches found
CVE-2025-3835
Zohocorp ManageEngine Exchange Reporter Plus versions 5721 and prior are vulnerable to Remote code execution in the Content Search module...
The vulnerability of the Service Account Auditing service of the Windows Active Directory management and reporting software Zoho ManageEngine ADAudit Plus allows a perpetrator to execute arbitrary code.
The vulnerability of the Service Account Auditing service in the Windows Active Directory management and reporting software Zoho ManageEngine ADAudit Plus is related to the lack of security measures for the SQL query structure. Exploitation of this vulnerability could allow a malicious actor to...
The vulnerability of the notification module of the Windows Active Directory management and reporting software Zoho ManageEngine ADAudit Plus allows a perpetrator to execute arbitrary code.
The vulnerability of the notification module of the Windows Active Directory management and reporting software Zoho ManageEngine ADAudit Plus relates to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...
The vulnerability of the AT+MMNAME command in the microprogramming software of Microhard IPn4Gii-NA2 and BulletLTE-NA2 allows a hacker to enhance their privileges.
The vulnerability of the AT+MMNAME command in the microprogramming software of Microhard IPn4Gii-NA2 and BulletLTE-NA2 lies in the implementation or modification of certain arguments. Exploiting this vulnerability can allow attackers to enhance their privileges...
TOTOLINK N302R Plus service_type parameter buffer overflow vulnerability
The TOTOLINK N300R Plus is a wireless router. The TOTOLINK N302R Plus buffer overflow vulnerability, which stems from a misuse of the parameter servicetype, can be exploited by an attacker to execute arbitrary code...
CVE-2025-41444
Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the alerts module...
CVE-2025-41444
Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the alerts module...
CVE-2025-36528
Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in Service Account Auditing reports...
CVE-2025-36528
Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in Service Account Auditing reports...
CVE-2025-3835
Zohocorp ManageEngine Exchange Reporter Plus versions 5721 and prior are vulnerable to Remote code execution in the Content Search module...
CVE-2025-3835
Zohocorp ManageEngine Exchange Reporter Plus versions 5721 and prior are vulnerable to Remote code execution in the Content Search module...
CVE-2025-27709
Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the Service Account Auditing reports...
CVE-2025-27709
Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the Service Account Auditing reports...
CVE-2025-41444 SQL Injection
Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the alerts module...
CVE-2025-41444
CVE-2025-41444 affects Zohocorp ManageEngine ADAudit Plus (versions 8510 and prior). The vulnerability is an authenticated SQL injection in the alerts module, with CVSSv3.1 base metrics showing HIGH impact on confidentiality and integrity, LOW impact on availability, and an overall base score of ...
CVE-2025-41444 SQL Injection
Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the alerts module...
CVE-2025-36528 SQL Injection
Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in Service Account Auditing reports...
CVE-2025-36528
CVE-2025-36528 affects Zohocorp ManageEngine ADAudit Plus versions 8510 and earlier. The issue is an authenticated SQL injection in the Service Account Auditing reports, caused by vulnerable query handling in that reporting path. Per connected sources, exploitation could impact confidentiality an...
CVE-2025-27709
Affected product: Zohocorp ManageEngine ADAudit Plus, versions 8510 and prior. Description: authenticated SQL injection in the Service Account Auditing reports (root cause per sources). Impact: CVSSv3.1 base score 8.3 (HIGH) with confidentiality and integrity impacts; exploitation details not pro...