Rezultati pretraživanja za 'Proizvođač: zohocorp'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2019-12252 | 4.0 | In Zoho ManageEngine ServiceDesk Plus through 10.5, users with the lowest privileges (guest) can view an arbitrary post by appending its number to the SDNotify.do?notifyModule=Solution&mode=E-Mail¬ifyTo=SOLFORWARD&id= substring. | 2023-03-01 16:06:00 | 2019-05-21 18:29:00 |
| CVE-2019-12597 | 4.3 | An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via ResourcesAttachments.jsp with the parameter pageName. | 2023-03-01 16:02:00 | 2019-07-11 14:15:00 |
| CVE-2019-12596 | 4.3 | An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via SoftwareListView.do with the parameter swType or swComplianceType. | 2023-03-01 16:01:00 | 2019-07-11 14:15:00 |
| CVE-2019-12595 | 4.3 | An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via the RCSettings.do rdsName parameter. | 2023-03-01 16:01:00 | 2019-07-11 14:15:00 |
| CVE-2019-12537 | 4.3 | An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via the SearchN.do search field. | 2023-03-01 16:01:00 | 2019-07-11 14:15:00 |
| CVE-2019-19774 | 4.0 | An issue was discovered in Zoho ManageEngine EventLog Analyzer 10.0 SP1 before Build 12110. By running "select hostdetails from hostdetails" at the /event/runquery.do endpoint, it is possible to bypass the security restrictions that prevent even admi | 2023-02-15 02:32:00 | 2019-12-13 18:15:00 |
| CVE-2019-19034 | 6.5 | Zoho ManageEngine Asset Explorer 6.5 does not validate the System Center Configuration Manager (SCCM) database username when dynamically generating a command to schedule scans for SCCM. This allows an attacker to execute arbitrary commands on the Ass | 2023-02-03 19:38:00 | 2020-03-23 17:15:00 |
| CVE-2019-15510 | 4.3 | ManageEngine_DesktopCentral.exe in Zoho ManageEngine Desktop Central 10 allows HTML injection on the user administration page via the description of a role. | 2023-02-03 19:25:00 | 2020-03-23 14:15:00 |
| CVE-2019-19649 | 7.5 | Zoho ManageEngine Applications Manager before 13620 allows a remote unauthenticated SQL injection via the SyncEventServlet eventid parameter to the SyncEventServlet.java doGet function. | 2023-02-02 02:25:00 | 2019-12-11 18:16:00 |
| CVE-2019-19475 | 9.0 | An issue was discovered in ManageEngine Applications Manager 14 with Build 14360. Integrated PostgreSQL which is built-in in Applications Manager is prone to attack due to lack of file permission security. The malicious users who are in “Authenticate | 2023-02-01 17:04:00 | 2020-01-10 22:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/54
Zapisa po stranici: