Rezultati pretraživanja za 'Proizvođač: zohocorp'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2018-18949 | 7.5 | Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings. | 2021-05-04 15:07:00 | 2018-11-05 09:29:00 |
| CVE-2018-18716 | 4.3 | Zoho ManageEngine OpManager 12.3 before 123219 has a Self XSS Vulnerability. | 2021-05-04 15:06:00 | 2018-11-20 19:29:00 |
| CVE-2018-18715 | 4.3 | Zoho ManageEngine OpManager 12.3 before 123219 has stored XSS. | 2021-05-04 15:06:00 | 2018-11-20 19:29:00 |
| CVE-2018-18475 | 7.5 | Zoho ManageEngine OpManager before 12.3 build 123214 allows Unrestricted Arbitrary File Upload. | 2021-05-04 15:06:00 | 2018-10-23 21:30:00 |
| CVE-2018-18262 | 4.3 | Zoho ManageEngine OpManager 12.3 before build 123214 has XSS. | 2021-05-04 15:06:00 | 2018-10-17 14:29:00 |
| CVE-2019-17602 | 7.5 | An issue was discovered in Zoho ManageEngine OpManager before 12.4 build 124089. The OPMDeviceDetailsServlet servlet is prone to SQL injection. Depending on the configuration, this vulnerability could be exploited unauthenticated or authenticated. | 2021-05-04 14:34:00 | 2019-10-15 21:15:00 |
| CVE-2019-17421 | 7.2 | Incorrect file permissions on the packaged Nipper executable file in Zoho ManageEngine OpManager 12.4.072 and Firewall Analyzer 12.4.072 allow local users to elevate privileges to root by overwriting this file with a malicious payload. | 2021-04-29 18:17:00 | 2019-11-21 15:15:00 |
| CVE-2018-13412 | 7.2 | An issue was discovered in the Self Service Portal in Zoho ManageEngine Desktop Central before 10.0.282. A clickable company logo in a window running as SYSTEM can be abused to escalate privileges. In cloud, the issue is fixed in 10.0.470 agent versi | 2021-04-21 17:15:00 | 2018-09-12 16:29:00 |
| CVE-2018-13411 | 9.0 | An issue was discovered in Zoho ManageEngine Desktop Central before 10.0.282. A clickable company logo in a window running as SYSTEM can be abused to escalate privileges. In cloud, the issue is fixed in 10.0.470 agent version. | 2021-04-21 17:15:00 | 2018-09-12 16:29:00 |
| CVE-2021-20080 | 4.3 | Insufficient output sanitization in ManageEngine ServiceDesk Plus before version 11200 and ManageEngine AssetExplorer before version 6800 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS) attacks by uploading | 2021-04-19 18:49:00 | 2021-04-09 18:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/54
Zapisa po stranici: