Rezultati pretraživanja za 'Proizvođač: zohocorp'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-15521 | 4.3 | Zoho ManageEngine Applications Manager before 14 build 14730 has no protection against jsp/header.jsp Cross-site Scripting (XSS) . | 2020-09-30 14:37:00 | 2020-09-25 07:15:00 |
| CVE-2020-15394 | 7.5 | The REST API in Zoho ManageEngine Applications Manager before build 14740 allows an unauthenticated SQL Injection via a crafted request, leading to Remote Code Execution. | 2020-09-30 14:37:00 | 2020-09-25 07:15:00 |
| CVE-2018-16364 | 9.3 | A serialization vulnerability in Zoho ManageEngine Applications Manager before build 13740 allows for remote code execution on Windows via a payload on an SMB share. | 2020-09-29 19:12:00 | 2018-09-26 21:29:00 |
| CVE-2020-14008 | 6.5 | Zoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user to upload a vulnerable jar in a specific location, which leads to remote code execution. | 2020-09-16 14:38:00 | 2020-09-04 15:15:00 |
| CVE-2019-11361 | 6.5 | Zoho ManageEngine Remote Access Plus 10.0.258 does not validate user permissions properly, allowing for privilege escalation and eventually a full application takeover. | 2020-08-24 17:37:00 | 2020-03-19 17:15:00 |
| CVE-2019-15106 | 7.5 | An issue was discovered in Zoho ManageEngine OpManager in builds before 14310. One can bypass the user password requirement and execute commands on the server. The "username+'@opm' string is used for the password. For example, if the username is admi | 2020-08-24 17:37:00 | 2019-08-16 03:15:00 |
| CVE-2019-12876 | 8.5 | Zoho ManageEngine ADManager Plus 6.6.5, ADSelfService Plus 5.7, and DesktopCentral 10.0.380 have Insecure Permissions, leading to Privilege Escalation from low level privileges to System. | 2020-08-24 17:37:00 | 2019-07-17 20:15:00 |
| CVE-2019-12133 | 7.2 | Multiple Zoho ManageEngine products suffer from local privilege escalation due to improper permissions for the %SYSTEMDRIVE%\ManageEngine directory and its sub-folders. Moreover, the services associated with said products try to execute binaries such | 2020-08-24 17:37:00 | 2019-06-18 22:15:00 |
| CVE-2019-12476 | 7.2 | An authentication bypass vulnerability in the password reset functionality in Zoho ManageEngine ADSelfService Plus before 5.0.6 allows an attacker with physical access to gain a shell with SYSTEM privileges via the restricted thick client browser. Th | 2020-08-24 17:37:00 | 2019-06-17 18:15:00 |
| CVE-2019-10273 | 4.0 | Information leakage vulnerability in the /mc login page in ManageEngine ServiceDesk Plus 9.3 software allows authenticated users to enumerate active users. Due to a flaw within the way the authentication is handled, an attacker is able to login and v | 2020-08-24 17:37:00 | 2019-04-04 16:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/54
Zapisa po stranici: