CVE-2021-46165

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Zoho ManageEngine Desktop Central before 10.0.662, during startup, launches an executable file from the batch files, but this file's path might not be properly defined.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published: Jan 10, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-461666.5Zoho ManageEngine Desktop Central before 10.0.662 allows authenticated users to obtain sensitive information from the database by visiting t CVE-2021-461677.8An access control issue in the authentication module of wizplat PD065 v1.19 allows attackers to access sensitive data and cause a Denial of CVE-2021-461685.5Spin v6.5.1 was discovered to contain an out-of-bounds write in lex() at spinlex.c.CVE-2021-461695.5Modex v2.11 was discovered to contain an Use-After-Free vulnerability via the component tcache.CVE-2021-461707.5An issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in lexer_compare_identifier_to_string in js-lexer.c file.CVE-2021-461715.5Modex v2.11 was discovered to contain a NULL pointer dereference in set_create_id() at xtract.c.CVE-2021-461747.5Heap-based Buffer Overflow in function bfd_getl32 in Binutils objdump 3.37.CVE-2021-461796.5Reachable Assertion vulnerability in upx before 4.0.0 allows attackers to cause a denial of service via crafted file passed to the the readx CVE-2021-461955.5GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnerability allows attacke CVE-2021-461989.8An SQL Injection vulnerability exists in Sourceodester Courier Management System 1.0 via the email parameter in /cms/ajax.php app.CVE-2021-462009.8An SQL Injection vulnerability exists in Sourcecodester Simple Music Clour Community System 1.0 via the email parameter in /music/ajax.php.CVE-2021-462019.8An SQL Injection vulnerability exists in Sourcecodester Online Resort Management System 1.0 via the id parameterv in /orms/ node.