Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: zohocorp'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2021-44650 6.5 Zoho ManageEngine M365 Manager Plus before Build 4419 allows remote command execution when updating proxy settings through the Admin ProxySettings and Tenant ProxySettings components. 2022-01-24 20:52:00
CVE-2020-28679 6.5 A vulnerability in the showReports module of Zoho ManageEngine Applications Manager before build 14550 allows authenticated attackers to execute a SQL injection via a crafted request. 2022-01-19 19:17:00
CVE-2021-46165 4.6 Zoho ManageEngine Desktop Central before 10.0.662, during startup, launches an executable file from the batch files, but this file's path might not be properly defined. 2022-01-14 01:57:00
CVE-2021-46164 6.5 Zoho ManageEngine Desktop Central before 10.0.662 allows remote code execution by an authenticated user who has complete access to the Reports module. 2022-01-14 01:56:00
CVE-2021-46166 4.0 Zoho ManageEngine Desktop Central before 10.0.662 allows authenticated users to obtain sensitive information from the database by visiting the Reports page. 2022-01-13 20:04:00
CVE-2021-20147 5.0 ManageEngine ADSelfService Plus below build 6116 contains an observable response discrepancy in the UMCP operation of the ChangePasswordAPI. This allows an unauthenticated remote attacker to determine whether a Windows domain user exists. 2022-01-13 16:12:00
CVE-2021-44675 7.5 Zoho ManageEngine ServiceDesk Plus MSP before 10.5 Build 10534 is vulnerable to unauthenticated remote code execution due to a filter bypass in which authentication is not required. 2022-01-03 20:21:00
CVE-2019-20474 4.0 An issue was discovered in Zoho ManageEngine Remote Access Plus 10.0.447. The service to test the mail-server configuration suffers from an authorization issue allowing a user with the Guest role (read-only access) to use and abuse it. One of the abu 2022-01-01 19:54:00
CVE-2021-37414 5.0 Zoho ManageEngine DesktopCentral before 10.0.709 allows anyone to get a valid user's APIKEY without authentication. 2021-12-20 22:30:00
CVE-2021-44514 7.5 OpUtils in Zoho ManageEngine OpManager 12.5 before 125490 mishandles authentication for a few audit directories. 2021-12-15 14:53:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/54
Zapisa po stranici: