CVE-2025-41444

CVE-2025-41444 affects Zohocorp ManageEngine ADAudit Plus (versions 8510 and prior). The vulnerability is an authenticated SQL injection in the alerts module, with CVSSv3.1 base metrics showing HIGH impact on confidentiality and integrity, LOW impact on availability, and an overall base score of ...

CVE-2025-41444 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the alerts module...

CVE-2025-41444 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the alerts module...

CVE-2025-36528

CVE-2025-36528 affects Zohocorp ManageEngine ADAudit Plus versions 8510 and earlier. The issue is an authenticated SQL injection in the Service Account Auditing reports, caused by vulnerable query handling in that reporting path. Per connected sources, exploitation could impact confidentiality an...

CVE-2025-36528 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in Service Account Auditing reports...

CVE-2025-27709 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the Service Account Auditing reports...

CVE-2025-27709 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the Service Account Auditing reports...

CVE-2025-27709

Affected product: Zohocorp ManageEngine ADAudit Plus, versions 8510 and prior. Description: authenticated SQL injection in the Service Account Auditing reports (root cause per sources). Impact: CVSSv3.1 base score 8.3 (HIGH) with confidentiality and integrity impacts; exploitation details not pro...

CVE-2025-3835 Remote Code Execution

Zohocorp ManageEngine Exchange Reporter Plus versions 5721 and prior are vulnerable to Remote code execution in the Content Search module...

CVE-2025-3835

CVE-2025-3835 affects Zohocorp ManageEngine Exchange Reporter Plus versions 5721 and earlier, with a Remote Code Execution vulnerability in the Content Search module. Public notes from multiple sources (NVD/Red Hat/Nessus entry) confirm the affected product and version range and describe RCE in t...

CVE-2025-3835 Remote Code Execution

Zohocorp ManageEngine Exchange Reporter Plus versions 5721 and prior are vulnerable to Remote code execution in the Content Search module...

ZOHO ManageEngine ADAudit Plus 安全漏洞

ZOHO ManageEngine ADAudit Plus is used by ZOHO USA, Inc. to simplify auditing, demonstrate compliance and detect threats. A security vulnerability exists in ZOHO ManageEngine ADAudit Plus 8510 and prior versions, which stems from an authenticated SQL injection in the Alerts module...

ZOHO ManageEngine Exchange Reporter Plus 安全漏洞

ZOHO ManageEngine Exchange Reporter Plus is a Web-based Exchange Server reporting software from ZOHO, Inc. A security vulnerability exists in ZOHO ManageEngine Exchange Reporter Plus 5721 and prior versions that originates from remote code execution in the Content Search module...

ZOHO ManageEngine ADAudit Plus 安全漏洞

ZOHO ManageEngine ADAudit Plus is used by ZOHO USA, Inc. to simplify auditing, demonstrate compliance and detect threats. A security vulnerability exists in ZOHO ManageEngine ADAudit Plus 8510 and prior versions that stems from vulnerability to SQL injection attacks...

CVE-2025-41444: Improper Neutralization of Special Elements used in an SQL Command

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the alerts module...

CVE-2025-3835: Unrestricted Upload of File with Dangerous Type

Zohocorp ManageEngine Exchange Reporter Plus versions 5721 and prior are vulnerable to Remote code execution in the Content Search module...

CVE-2025-36528: Improper Neutralization of Special Elements used in an SQL Command

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in Service Account Auditing reports...

CVE-2025-27709: Improper Neutralization of Special Elements used in an SQL Command

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the Service Account Auditing reports...

ZOHO ManageEngine ADAudit Plus 安全漏洞

ZOHO ManageEngine ADAudit Plus is used by ZOHO USA, Inc. to simplify auditing, demonstrate compliance and detect threats. A security vulnerability exists in ZOHO ManageEngine ADAudit Plus 8510 and prior versions, which stems from an authenticated SQL injection in service account audit reports...

CVE-2025-30957

Missing Authorization vulnerability in BuddyDev Activity Plus Reloaded for BuddyPress bp-activity-plus-reloaded allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Activity Plus Reloaded for BuddyPress: from n/a through = 1.1.2...