CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 27/05/2024 |
| CVE-2024-21791 | 高危7.2 | Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection in lockout history option.
Note: Non-admin users cannot exploit this vulnerability. | 22/05/2024 |
| CVE-2023-49335 | 高危8.8 | Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while getting file server details. | 20/05/2024 |
| CVE-2023-49334 | 高危8.8 | Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while exporting a full summary report. | 20/05/2024 |
| CVE-2023-49333 | 高危8.8 | Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the dashboard graph feature. | 20/05/2024 |
| CVE-2023-49332 | 高危8.8 | Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while adding file shares. | 20/05/2024 |
| CVE-2023-49331 | 高危8.8 | Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the aggregate reports search option. | 20/05/2024 |
| CVE-2024-27312 | 高危8.1 | Zohocorp ManageEngine PAM360 version 6601 is vulnerable to authorization vulnerability which allows a low-privileged user to perform admin actions.
Note: This vulnerability affects only the PAM360 6600 version. No other versions are applicable to this vulnerability. | 20/05/2024 |
| CVE-2023-49330 | 高危8.8 | Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while getting aggregate report data. | 20/05/2024 |
| CVE-2024-21775 | 高危8.8 | Zoho ManageEngine Exchange Reporter Plus versions 5714 and below are vulnerable to the Authenticated SQL injection in report exporting feature. | 16/02/2024 |
| CVE-2024-0269 | 高危8.8 | ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in File-Summary DrillDown. This issue has been fixed and released in version 7271. | 02/02/2024 |
| CVE-2024-0253 | 高危8.8 | ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in home Graph-Data. | 02/02/2024 |
| CVE-2023-48793 | 严重9.8 | Zoho ManageEngine ADAudit Plus through 7250 allows SQL Injection in the aggregate report feature. | 02/02/2024 |
| CVE-2023-48792 | 严重9.8 | Zoho ManageEngine ADAudit Plus through 7250 is vulnerable to SQL Injection in the report export option. | 02/02/2024 |
| CVE-2023-50785 | 低危2.7 | Zoho ManageEngine ADAudit Plus before 7270 allows admin users to view names of arbitrary directories via path traversal. | 25/01/2024 |
| CVE-2023-49943 | 中危5.4 | Zoho ManageEngine ServiceDesk Plus MSP before 14504 allows stored XSS (by a low-privileged technician) via a task's name in a time sheet. | 18/01/2024 |
| CVE-2024-0252 | 高危8.8 | ManageEngine ADSelfService Plus versions 6401 and below are vulnerable to the remote code execution due to the improper handling in the load balancer component. Authentication is required in order to exploit this vulnerability. | 11/01/2024 |