3560 matches found
CVE-2021-42956
CVE-2021-42956 affects Zoho ManageEngine Remote Access Plus Server for Windows, up to version 10.1.2132.6. Root cause: improper privilege management causes the server process to run as the logged-in user, enabling memory dump by non-admins. Impact: attacker could remotely dump sensitive informati...
CVE-2021-42956
Zoho Remote Access Plus Server Windows Desktop Binary fixed in 10.1.2132.6 is affected by a sensitive information disclosure vulnerability. Due to improper privilege management, the process launches as the logged in user, so memory dump can be done by non-admin also. Remotely, an attacker can dum...
ZOHO ManageEngine Remote Access Plus 安全漏洞
ZOHO ManageEngine Remote Access Plus is a remote access solution from ZOHO, Inc. An access control error vulnerability exists in versions of ZOHO ManageEngine Remote Access Plus Server prior to 10.1.2121.1, which stems from a faulty access control. An attacker could use this vulnerability to...
ZOHO ManageEngine Remote Access Plus 安全漏洞
ZOHO ManageEngine Remote Access Plus, a remote access solution from ZOHO, Inc. is vulnerable to a password reset vulnerability in ZOHO ManageEngine Remote Access Plus Server prior to version 10.1.2132, which stems from an unauthorized password reset mechanism. An attacker could use this...
A week in security (Nov 8 – Nov 14)
Last week on Malwarebytes Labs Multiple video games break after domain name snafu How to remove adware on an Android phone Smart TV adverts put a wrinkle in your programming Are cybercriminals turning away from the US and targeting Europe instead? Patch now! Microsoft plugs actively exploited...
Zoho ManageEngine ADSelfService Plus Authentication Bypass (CVE-2021-40539)
An authentication bypass vulnerability exists in Zoho ManageEngine ADSelfService Plus. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...
Zoho ManageEngine ADAudit Plus Arbitrary File Write Vulnerability
Zoho ManageEngine ADAudit Plus is a web-based Active Directory change auditing and reporting solution. An arbitrary file write vulnerability exists in Zoho ManageEngine ADAudit Plus versions prior to 7006, which can be exploited by an attacker to write and execute arbitrary files on the system...
Zoho ManageEngine Patch Connect Plus Remote Code Execution Vulnerability
Zoho ManageEngine Patch Connect Plus is a tool that leverages existing Microsoft System Center Configuration Manager servers to help deploy patches to over 250 third-party applications e.g., Adobe applications, Java and WinRAR. A remote code execution vulnerability exists in Zoho ManageEngine Pat...
Zoho ManageEngine ADManager Plus Filter Bypass Vulnerability
Zoho ManageEngine ADManager Plus is an easy-to-use Windows Active Directory management and reporting solution. A filter bypass vulnerability exists in Zoho ManageEngine ADManager Plus prior to version 7115, which can be exploited by an attacker to upload files and enable remote code execution...
Zoho ManageEngine Network Configuration Manager SQL Injection Vulnerability (CNVD-2021-88231)
Zoho ManageEngine Network Configuration Manager is a network change and configuration management tool for managing the configuration of switches, routers and firewalls. A SQL injection vulnerability exists in the hardware details search in Zoho ManageEngine Network Configuration Manager. No...
CVE-2021-41081
Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a configuration search...
CVE-2021-42002
Zoho ManageEngine ADManager Plus before 7115 is vulnerable to a filter bypass that leads to file-upload remote code execution...
CVE-2021-41833
Zoho ManageEngine Patch Connect Plus before 90099 is vulnerable to unauthenticated remote code execution...
CVE-2021-42847
Zoho ManageEngine ADAudit Plus before 7006 allows attackers to write to, and execute, arbitrary files...
CVE-2021-42002
Zoho ManageEngine ADManager Plus before 7115 is vulnerable to a filter bypass that leads to file-upload remote code execution...
CVE-2021-41081
Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a configuration search...
CVE-2021-41080
Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a hardware details search...
Remote code execution
Zoho ManageEngine Patch Connect Plus before 90099 is vulnerable to unauthenticated remote code execution...