https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 19:33:18 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-53262 EUVD-2026-53262 https://cve.radiocsirt.org/vuln/euvd-2026-53262 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10008 <p>Zoho ManageEngine ServiceDesk 9.3 allows session hijacking and privilege escalation because an established guest session is automatically converted into an established administrator session when the guest user enters the administrator username, with an arbitrary incorrect password, in an mc/ login attempt within a different browser tab.</p> <p>Zoho ManageEngine ServiceDesk 9.3 allows session hijacking and privilege escalation because an established guest session is automatically converted into an established administrator session when the guest user enters the administrator username, with an arbitrary incorrect password, in an mc/ login attempt within a different browser tab.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-10008 https://cve.radiocsirt.org/vuln/ghsa-xpc7-m273-pggq <p>Zoho ManageEngine ServiceDesk 9.3 allows session hijacking and privilege escalation because an established guest session is automatically converted into an established administrator session when the guest user enters the administrator username, with an arbitrary incorrect password, in an mc/ login attempt within a different browser tab.</p> <p>Zoho ManageEngine ServiceDesk 9.3 allows session hijacking and privilege escalation because an established guest session is automatically converted into an established administrator session when the guest user enters the administrator username, with an arbitrary incorrect password, in an mc/ login attempt within a different browser tab.</p> https://cve.radiocsirt.org/vuln/ghsa-xpc7-m273-pggq https://cve.radiocsirt.org/vuln/gsd-2019-10008 gsd-2019-10008 https://cve.radiocsirt.org/vuln/gsd-2019-10008