VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

Severity

严重高危中危低危Exploited in the wild (KEV)

Language / ecosystem

JavaScript / TypeScript (npm)Python (PyPI)PHP (Packagist)Java / Kotlin (Maven)GoRuby (RubyGems).NET (NuGet)

Stack

JavaScript / Node.js

Next.jsNuxtReactAngularSvelte / SvelteKitAstroRemixViteExpressNestJSFastifyNode.jsaxios

PHP

LaravelSymfonyPHP

Python

DjangoFlaskFastAPI / Starlette

Ruby

Ruby on Rails

Java

Spring

GinFiber

CMS

WordPressWooCommerceDrupalGhostStrapi

Servers & databases

nginxApache HTTP ServerMySQLPostgreSQLRedis

Vendor1

zohocorporacleibmgoogleadobemicrosoftmozillaciscoapacheappleredhatjenkinshpAll vendors →

zohocorp products

manageengine applications manager 56manageengine opmanager 54manageengine admanager plus 53manageengine adaudit plus 52manageengine adselfservice plus 51manageengine servicedesk plus 50manageengine desktop central 47manageengine supportcenter plus 31manageengine exchange reporter plus 28manageengine assetexplorer 26manageengine servicedesk plus msp 26

402,405 vulnerabilities · 1,766 actively exploited (CISA KEV)

zohocorp ✕Clear filters

542 results

ID	Severity	Summary	Published
CVE-2024-5586	高危8.8	Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in extranet lockouts report option.	23/08/2024
CVE-2024-5556	高危8.8	Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in reports module.	23/08/2024
CVE-2024-5490	高危8.8	Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in aggregate reports option.	23/08/2024
CVE-2024-5467	高危8.8	Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in account lockout report.