Skip to content
OpenAdvisories

Archive

29 August 2021

Vulnerabilities first published on this day (UTC), newest first.

8 results · Feed

  • Unscored —

    Zoho ManageEngine Log360 before Build 5219 allows a CSRF attack on proxy settings.

  • Unscored —

    Zoho ManageEngine Cloud Security Plus before Build 4117 allows a CSRF attack on the server proxy settings.

  • Unscored —

    Zoho ManageEngine Log360 before Build 5224 allows a CSRF attack for disabling the logon security settings.

  • Unscored —

    Zoho ManageEngine Log360 before Build 5219 allows unrestricted file upload with resultant remote code execution.

  • Unscored —

    Zoho ManageEngine Log360 before Build 5225 allows stored XSS.

  • Unscored —

    Zoho ManageEngine Log360 before Build 5225 allows remote code execution via BCP file overwrite.

  • Unscored —

    Zoho ManageEngine Log360 before Build 5224 allows stored XSS via the LOGO_PATH key value in the logon settings.

  • Unscored —

    Certain Canon devices manufactured in 2012 through 2020 (such as imageRUNNER ADVANCE iR-ADV C5250), when Catwalk Server…