A vulnerability, which was classified as critical, has been found in Zoho ManageEngine ManageEngine up to 125140. This issue affects the function getDataCollectionFailureReason of the component Support Diagnostics Module. Upgrading to version 125437 or 125453 eliminates this vulnerability.
Zoho ManageEngine up to 125140 Support Diagnostics Module getDataCollectionFailureReason pollingObject sql injection
- Virtual Patching
- October 14, 2021
- 7:08 am
- Virtual Patching
- October 14, 2021
- 7:08 am
Common Vulnerabilityies and Exposures
Contact us to get started
CVE-2024-29204 : IVANTI AVALANCHE UP TO 6.4.2 WLAVALANCHESERVICE HEAP-BASED OVERFLOW
Description A Heap Overflow vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows a remote unauthenticated attacker to execute
CVE-2024-31869 : APACHE AIRFLOW UP TO 2.8.4 CONFIGURATION UI PAGE INFORMATION DISCLOSURE
Description Airflow versions 2.7.0 through 2.8.4 have a vulnerability that allows an authenticated user to see sensitive provider configuration via
CVE-2024-24856 : LINUX KERNEL UP TO 6.8 ACPI_ALLOCATE_ZEROED NULL POINTER DEREFERENCE
Description The memory allocation function ACPI_ALLOCATE_ZEROED does not guarantee a successful allocation, but the subsequent code directly dereferences the pointer