Rezultati pretraživanja za 'Proizvođač: zohocorp'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2019-8395 | 7.5 | An Insecure Direct Object Reference (IDOR) vulnerability exists in Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10007 via an attachment to a request. | 2020-08-24 17:37:00 | 2019-02-17 04:29:00 |
| CVE-2018-19118 | 5.0 | Zoho ManageEngine ADAudit before 5.1 build 5120 allows remote attackers to cause a denial of service (stack-based buffer overflow) via the 'Domain Name' field when adding a new domain. | 2020-08-24 17:37:00 | 2018-12-13 19:29:00 |
| CVE-2018-10803 | 4.3 | Cross-site scripting (XSS) vulnerability in the add credentials functionality in Zoho ManageEngine NetFlow Analyzer v12.3 before 12.3.125 (build 123125) allows remote attackers to inject arbitrary web script or HTML via a crafted description value. T | 2020-08-24 17:37:00 | 2018-05-10 14:29:00 |
| CVE-2020-11552 | 10.0 | An elevation of privilege vulnerability exists in ManageEngine ADSelfService Plus before build 6003 because it does not properly enforce user privileges associated with a Certificate dialog. This vulnerability could allow an unauthenticated attacker | 2020-08-13 20:08:00 | 2020-08-11 16:15:00 |
| CVE-2017-11738 | 6.8 | In Zoho ManageEngine Application Manager prior to 14.6 Build 14660, the 'haid' parameter of the '/auditLogAction.do' module is vulnerable to a Time-based Blind SQL Injection attack. | 2020-07-27 17:15:00 | 2019-05-23 16:29:00 |
| CVE-2018-15740 | 4.3 | Zoho ManageEngine ADManager Plus 6.5.7 has XSS on the "Workflow Delegation" "Requester Roles" screen. | 2020-07-15 17:03:00 | 2018-08-28 19:29:00 |
| CVE-2020-14048 | 5.0 | Zoho ManageEngine ServiceDesk Plus before 11.1 build 11115 allows remote unauthenticated attackers to change the installation status of deployed agents. | 2020-06-17 18:16:00 | 2020-06-12 02:15:00 |
| CVE-2019-15083 | 4.3 | Default installations of Zoho ManageEngine ServiceDesk Plus 10.0 before 10500 are vulnerable to XSS injected by a workstation local administrator. Using the installed program names of the computer as a vector, the local administrator can execute code | 2020-05-19 16:33:00 | 2020-05-14 14:15:00 |
| CVE-2020-11531 | 6.5 | The DataEngine Xnode Server application in Zoho ManageEngine DataSecurity Plus prior to 6.0.1 does not validate the database schema name when handling a DR-SCHEMA-SYNC request. This allows an authenticated attacker to execute code in the context of t | 2020-05-18 12:15:00 | 2020-05-08 21:15:00 |
| CVE-2020-10859 | 4.0 | Zoho ManageEngine Desktop Central before 10.0.484 allows authenticated arbitrary file writes during ZIP archive extraction via Directory Traversal in a crafted AppDependency API request. | 2020-05-12 14:43:00 | 2020-05-05 21:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/54
Zapisa po stranici: