Rezultati pretraživanja za 'Proizvođač: zohocorp'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2019-16962 | 3.5 | Zoho ManageEngine Desktop Central 10.0.430 allows HTML injection via a modified Report Name in a New Custom Report. | 2021-07-21 11:39:00 | 2021-01-06 17:15:00 |
| CVE-2020-24397 | 9.0 | An issue was discovered in the client side of Zoho ManageEngine Desktop Central 10.0.0.SP-534. An attacker-controlled server can trigger an integer overflow in InternetSendRequestEx and InternetSendRequestByBitrate that leads to a heap-based buffer o | 2021-07-21 11:39:00 | 2020-10-02 20:15:00 |
| CVE-2020-13154 | 4.0 | Zoho ManageEngine Service Plus before 11.1 build 11112 allows low-privilege authenticated users to discover the File Protection password via a getFileProtectionSettings call to AjaxServlet. | 2021-07-21 11:39:00 | 2020-05-18 22:15:00 |
| CVE-2020-11532 | 10.0 | Zoho ManageEngine DataSecurity Plus prior to 6.0.1 uses default admin credentials to communicate with a DataEngine Xnode server. This allows an attacker to bypass authentication for this server and execute all operations in the context of admin user. | 2021-07-21 11:39:00 | 2020-05-08 21:15:00 |
| CVE-2020-12116 | 5.0 | Zoho ManageEngine OpManager Stable build before 124196 and Released build before 125125 allows an unauthenticated attacker to read arbitrary files on the server by sending a crafted request. | 2021-07-21 11:39:00 | 2020-05-07 20:15:00 |
| CVE-2020-11527 | 5.0 | In Zoho ManageEngine OpManager before 12.4.181, an unauthenticated remote attacker can send a specially crafted URI to read arbitrary files. | 2021-07-21 11:39:00 | 2020-04-04 17:15:00 |
| CVE-2020-10541 | 7.5 | Zoho ManageEngine OpManager before 12.4.179 allows remote code execution via a specially crafted Mail Server Settings v1 API request. This was fixed in 12.5.108. | 2021-07-21 11:39:00 | 2020-03-13 06:15:00 |
| CVE-2020-8540 | 7.5 | An XML external entity (XXE) vulnerability in Zoho ManageEngine Desktop Central before the 07-Mar-2020 update allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XM | 2021-07-21 11:39:00 | 2020-03-11 17:15:00 |
| CVE-2019-19800 | 5.0 | Zoho ManageEngine Applications Manager 14 before 14520 allows a remote unauthenticated attacker to disclose OS file names via FailOverHelperServlet. | 2021-07-21 11:39:00 | 2020-02-06 17:15:00 |
| CVE-2021-31159 | 5.0 | Zoho ManageEngine ServiceDesk Plus MSP before 10519 is vulnerable to a User Enumeration bug due to improper error-message generation in the Forgot Password functionality, aka SDPMSP-15732. | 2021-07-09 12:49:00 | 2021-06-16 13:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/54
Zapisa po stranici: