Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: zohocorp'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2023-23076 9.8 OS Command injection vulnerability in Support Center Plus 11 via Executor in Action when creating new schedules. 2025-03-27 15:15:43
CVE-2023-23075 6.1 Cross Site Scripting (XSS) vulnerability in Zoho Asset Explorer 6.9 via the credential name when creating a new Assets Workstation. 2025-03-27 15:15:43
CVE-2023-23074 6.1 Cross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via embedding videos in the language component. 2025-03-27 15:15:43
CVE-2023-23073 6.1 Cross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via PO in the purchase component. 2025-03-27 15:15:43
CVE-2024-50053 6.3 Zohocorp ManageEngine ServiceDesk Plus versions below 14920 , ServiceDesk Plus MSP and SupportCentre Plus versions below 14910 are vulnerable to Stored XSS in the task feature. 2025-03-27 13:10:43
CVE-2023-0169 5.4 The Zoho Forms WordPress plugin before 3.0.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform 2025-03-21 18:15:28
CVE-2022-48362 8.8 Zoho ManageEngine Desktop Central and Desktop Central MSP before 10.1.2137.2 allow directory traversal via computerName to AgentLogUploadServlet. A remote, authenticated attacker could upload arbitrary code that would be executed when Desktop Central 2025-03-11 21:15:39
CVE-2023-38333 6.1 Zoho ManageEngine Applications Manager through 16530 allows reflected XSS while logged in. 2025-03-07 19:15:35
CVE-2023-26600 6.5 ManageEngine ServiceDesk Plus through 14104, ServiceDesk Plus MSP through 14000, Support Center Plus through 14000, and Asset Explorer through 6987 allow privilege escalation via query reports. 2025-03-06 16:15:40
CVE-2023-6105 5.5 An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user with access to the host where an affected ManageEngine product is installed can view and use t 2025-02-13 18:16:03
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/54
Zapisa po stranici: