deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-27647
Published: 2021-03-12
Description: Out-of-bounds Read vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via crafted web requests.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125, CWE-125
References: https://www.synology.com/security/advisory/Synology_SA_20_26; https://www.zerodayinitiative.com/advisories/ZDI-21-339/; https://www.synology.com/security/advisory/Synology_SA_20_26
CVE: CVE-2021-28305
Published: 2021-03-12
Description: An issue was discovered in the diesel crate before 1.4.6 for Rust. There is a use-after-free in the SQLite backend because the semantics of sqlite3_column_name are not followed.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://rustsec.org/advisories/RUSTSEC-2021-0037.html; https://rustsec.org/advisories/RUSTSEC-2021-0037.html
CVE: CVE-2021-28306
Published: 2021-03-12
Description: An issue was discovered in the fltk crate before 0.15.3 for Rust. There is a NULL pointer dereference during attempted use of a multi label type if the image is nonexistent.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://rustsec.org/advisories/RUSTSEC-2021-0038.html; https://rustsec.org/advisories/RUSTSEC-2021-0038.html
CVE: CVE-2021-28307
Published: 2021-03-12
Description: An issue was discovered in the fltk crate before 0.15.3 for Rust. There is a NULL pointer dereference during attempted use of a non-raster image for a window icon.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://rustsec.org/advisories/RUSTSEC-2021-0038.html; https://rustsec.org/advisories/RUSTSEC-2021-0038.html
CVE: CVE-2021-28308
Published: 2021-03-12
Description: An issue was discovered in the fltk crate before 0.15.3 for Rust. There is an out-of bounds read because the pixmap constructor lacks pixmap input validation.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://rustsec.org/advisories/RUSTSEC-2021-0038.html; https://rustsec.org/advisories/RUSTSEC-2021-0038.html
CVE: CVE-2021-23354
Published: 2021-03-12
Description: The package printf before 0.6.1 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex string /\%(?:\(([\w_.]+)\)|([1-9]\d*)\$)?([0 +\-\]*)(\*|\d+)?(\.)?(\*|\d+)?[hlL]?([\%bscdeEfFgGioOuxX])/g in lib/printf.js. The vulnerable regular expression has cubic worst-case time complexity.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1333
References: https://github.com/adaltas/node-printf/issues/31; https://github.com/adaltas/node-printf/pull/32; https://snyk.io/vuln/SNYK-JS-PRINTF-1072096
CVE: CVE-2021-28302
Published: 2021-03-12
Description: A stack overflow in pupnp before version 1.14.5 can cause the denial of service through the Parser_parseDocument() function. ixmlNode_free() will release a child node recursively, which will consume stack space and lead to a crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/pupnp/pupnp/issues/249; https://github.com/pupnp/pupnp/releases/tag/release-1.14.5; https://github.com/pupnp/pupnp/issues/249
CVE: CVE-2020-4831
Published: 2021-03-12
Description: IBM DataPower Gateway 10.0.0.0 through 10.0.1.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 189965.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/189965; https://www.ibm.com/support/pages/node/6398744; https://exchange.xforce.ibmcloud.com/vulnerabilities/189965
CVE: CVE-2021-21366
Published: 2021-03-12
Description: xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. xmldom versions 0.4.0 and older do not correctly preserve system identifiers, FPIs or namespaces when repeatedly parsing and serializing maliciously crafted documents. This may lead to unexpected syntactic changes during XML processing in some downstream applications. This is fixed in version 0.5.0. As a workaround downstream applications can validate the input and reject the maliciously crafted documents.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-115, CWE-436, CWE-436
References: https://github.com/xmldom/xmldom/commit/d4201b9dfbf760049f457f9f08a3888d48835135; https://github.com/xmldom/xmldom/releases/tag/0.5.0; https://github.com/xmldom/xmldom/security/advisories/GHSA-h6q6-9hqw-rwfv
CVE: CVE-2021-21367
Published: 2021-03-12
Description: Switchboard Bluetooth Plug for elementary OS from version 2.3.0 and before version version 2.3.5 has an incorrect authorization vulnerability. When the Bluetooth plug is running (in discoverable mode), Bluetooth service requests and pairing requests are automatically accepted, allowing physically proximate attackers to pair with a device running an affected version of switchboard-plug-bluetooth without the active consent of the user. By default, elementary OS doesn't expose any services via Bluetooth that allow information to be extracted by paired Bluetooth devices. However, if such services (i.e. contact list sharing software) have been installed, it's possible that attackers have been able to extract data from such services without authorization. If no such services have been installed, attackers are only able to pair with a device running an affected version without authorization and then play audio out of the device or possibly present a HID device (keyboard, mouse, etc...) to control the device. As such, users should check the list of trusted/paired devices and remove any that are not 100% confirmed to be genuine. This is fixed in version 2.3.5. To reduce the likelihood of this vulnerability on an unpatched version, only open the Bluetooth plug for short intervals when absolutely necessary and preferably not in crowded public areas. To mitigate the risk entirely with unpatched versions, do not open the Bluetooth plug within switchboard at all, and use a different method for pairing devices if necessary (e.g. `bluetoothctl` CLI).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://github.com/elementary/switchboard-plug-bluetooth/commit/86500e645a907538abafe5225b67cc12c03e7645; https://github.com/elementary/switchboard-plug-bluetooth/releases/tag/2.3.5; https://github.com/elementary/switchboard-plug-bluetooth/security/advisories/GHSA-5p3g-j69g-w2mq
CVE: CVE-2021-21368
Published: 2021-03-12
Description: msgpack5 is a msgpack v5 implementation for node.js and the browser. In msgpack5 before versions 3.6.1, 4.5.1, and 5.2.1 there is a "Prototype Poisoning" vulnerability. When msgpack5 decodes a map containing a key "__proto__", it assigns the decoded value to __proto__. Object.prototype.__proto__ is an accessor property for the receiver's prototype. If the value corresponding to the key __proto__ decodes to an object or null, msgpack5 sets the decoded object's prototype to that value. An attacker who can submit crafted MessagePack data to a service can use this to produce values that appear to be of other types; may have unexpected prototype properties and methods (for example length, numeric properties, and push et al if __proto__'s value decodes to an Array); and/or may throw unexpected exceptions when used (for example if the __proto__ value decodes to a Map or Date). Other unexpected behavior might be produced for other types. There is no effect on the global prototype. This "prototype poisoning" is sort of a very limited inversion of a prototype pollution attack. Only the decoded value's prototype is affected, and it can only be set to msgpack5 values (though if the victim makes use of custom codecs, anything could be a msgpack5 value). We have not found a way to escalate this to true prototype pollution (absent other bugs in the consumer's code). This has been fixed in msgpack5 version 3.6.1, 4.5.1, and 5.2.1. See the referenced GitHub Security Advisory for an example and more details.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-915, CWE-1321
References: https://github.com/mcollina/msgpack5/commit/d4e6cb956ae51c8bb2828e71c7c1107c340cf1e8; https://github.com/mcollina/msgpack5/releases/tag/v3.6.1; https://github.com/mcollina/msgpack5/releases/tag/v4.5.1
CVE: CVE-2021-21379
Published: 2021-03-12
Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions of XWiki Platform, the `{{wikimacrocontent}}` executes the content with the rights of the wiki macro author instead of the caller of that wiki macro. This makes possible to inject scripts through it and they will be executed with the rights of the wiki macro (very often a user which has Programming rights). Fortunately, no such macro exists by default in XWiki Standard but one could have been created or installed with an extension. This vulnerability has been patched in versions XWiki 12.6.3, 11.10.11 and 12.8-rc-1. There is no easy workaround other than disabling the affected macros. Inserting content in a safe way or knowing what is the user who called the wiki macro is not easy.
CVSS Score: 7.7 (HIGH)
CWE: CWE-281
References: https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-v662-xpcc-9xf6; https://jira.xwiki.org/browse/XWIKI-17759; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-v662-xpcc-9xf6
CVE: CVE-2021-20231
Published: 2021-03-12
Description: A flaw was found in gnutls. A use after free issue in client sending key_share extension may lead to memory corruption and other consequences.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://bugzilla.redhat.com/show_bug.cgi?id=1922276; https://lists.apache.org/thread.html/r50661d6f0082709aad9a584431b59ec364f9974b63b07e[PII_REDACTED]%40%3Cissues.spark.apache.org%3E; https://lists.apache.org/thread.html/r5d4001031e7790d8c6396c499522b4ed2aab782da87b1a14184793bb%40%3Cissues.spark.apache.org%3E
CVE: CVE-2021-20232
Published: 2021-03-12
Description: A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext/pre_shared_key.c may lead to memory corruption and other potential consequences.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://bugzilla.redhat.com/show_bug.cgi?id=1922275; https://lists.apache.org/thread.html/r50661d6f0082709aad9a584431b59ec364f9974b63b07e[PII_REDACTED]%40%3Cissues.spark.apache.org%3E; https://lists.apache.org/thread.html/r5d4001031e7790d8c6396c499522b4ed2aab782da87b1a14184793bb%40%3Cissues.spark.apache.org%3E
CVE: CVE-2021-21056
Published: 2021-03-12
Description: Adobe Framemaker version 2020.0.1 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://helpx.adobe.com/security/products/framemaker/apsb21-14.html; https://www.zerodayinitiative.com/advisories/ZDI-21-282/; https://helpx.adobe.com/security/products/framemaker/apsb21-14.html
CVE: CVE-2021-21067
Published: 2021-03-12
Description: Adobe Photoshop versions 21.2.5 (and earlier) and 22.2 (and earlier) are affected by an Out-of-bounds Write vulnerability in the CoolType library. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/photoshop/apsb21-17.html; https://helpx.adobe.com/security/products/photoshop/apsb21-17.html
CVE: CVE-2021-21068
Published: 2021-03-12
Description: Adobe Creative Cloud Desktop Application version 5.3 (and earlier) is affected by a file handling vulnerability that could allow an attacker to cause arbitrary file overwriting. Exploitation of this issue requires physical access and user interaction.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-379
References: https://helpx.adobe.com/security/products/creative-cloud/apsb21-18.html; https://helpx.adobe.com/security/products/creative-cloud/apsb21-18.html
CVE: CVE-2021-21069
Published: 2021-03-12
Description: Adobe Creative Cloud Desktop Application version 5.3 (and earlier) is affected by a local privilege escalation vulnerability that could allow an attacker to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require user interaction.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://helpx.adobe.com/security/products/creative-cloud/apsb21-18.html; https://www.zerodayinitiative.com/advisories/ZDI-21-281/; https://helpx.adobe.com/security/products/creative-cloud/apsb21-18.html
CVE: CVE-2021-21071
Published: 2021-03-12
Description: Adobe Animate version 21.0.3 (and earlier) is affected by a Memory Corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://helpx.adobe.com/security/products/animate/apsb21-21.html; https://helpx.adobe.com/security/products/animate/apsb21-21.html
CVE: CVE-2021-21072
Published: 2021-03-12
Description: Adobe Animate version 21.0.3 (and earlier) is affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose sensitive information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/animate/apsb21-21.html; https://helpx.adobe.com/security/products/animate/apsb21-21.html
CVE: CVE-2021-21073
Published: 2021-03-12
Description: Adobe Animate version 21.0.3 (and earlier) is affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose sensitive information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/animate/apsb21-21.html; https://helpx.adobe.com/security/products/animate/apsb21-21.html
CVE: CVE-2021-21074
Published: 2021-03-12
Description: Adobe Animate version 21.0.3 (and earlier) is affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose sensitive information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125, CWE-125
References: https://helpx.adobe.com/security/products/animate/apsb21-21.html; https://helpx.adobe.com/security/products/animate/apsb21-21.html
CVE: CVE-2021-21075
Published: 2021-03-12
Description: Adobe Animate version 21.0.3 (and earlier) is affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose sensitive information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/animate/apsb21-21.html; https://helpx.adobe.com/security/products/animate/apsb21-21.html
CVE: CVE-2021-21076
Published: 2021-03-12
Description: Adobe Animate version 21.0.3 (and earlier) is affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose sensitive information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/animate/apsb21-21.html; https://helpx.adobe.com/security/products/animate/apsb21-21.html
CVE: CVE-2021-21077
Published: 2021-03-12
Description: Adobe Animate version 21.0.3 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/animate/apsb21-21.html; https://helpx.adobe.com/security/products/animate/apsb21-21.html
CVE: CVE-2021-21078
Published: 2021-03-12
Description: Adobe Creative Cloud Desktop Application version 5.3 (and earlier) is affected by an Unquoted Service Path vulnerability in CCXProcess that could allow an attacker to achieve arbitrary code execution in the process of the current user. Exploitation of this issue requires user interaction
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-426
References: https://helpx.adobe.com/security/products/creative-cloud/apsb21-18.html; https://helpx.adobe.com/security/products/creative-cloud/apsb21-18.html
CVE: CVE-2021-21079
Published: 2021-03-12
Description: Adobe Connect version 11.0.7 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious JavaScript content that may be executed within the context of the victim's browser when they browse to the page containing the vulnerable field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://helpx.adobe.com/security/products/connect/apsb21-19.html; https://helpx.adobe.com/security/products/connect/apsb21-19.html
CVE: CVE-2021-21080
Published: 2021-03-12
Description: Adobe Connect version 11.0.7 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious JavaScript content that may be executed within the context of the victim's browser when they browse to the page containing the vulnerable field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/connect/apsb21-19.html; https://helpx.adobe.com/security/products/connect/apsb21-19.html
CVE: CVE-2021-21082
Published: 2021-03-12
Description: Adobe Photoshop versions 21.2.5 (and earlier) and 22.2 (and earlier) are affected by a Memory Corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-787
References: https://helpx.adobe.com/security/products/photoshop/apsb21-17.html; https://helpx.adobe.com/security/products/photoshop/apsb21-17.html
CVE: CVE-2021-21085
Published: 2021-03-12
Description: Adobe Connect version 11.0.7 (and earlier) is affected by an Input Validation vulnerability in the export feature. An attacker could exploit this vulnerability by injecting a payload into an online event form and achieve code execution if the victim exports and opens the data on their local machine.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://helpx.adobe.com/security/products/connect/apsb21-19.html; https://helpx.adobe.com/security/products/connect/apsb21-19.html
CVE: CVE-2021-21726
Published: 2021-03-12
Description: Some ZTE products have an input verification vulnerability in the diagnostic function interface. Due to insufficient verification of some parameters input by users, an attacker with high privileges can cause process exception by repeatedly inputting illegal parameters. This affects:<ZXONE 9700 , ZXONE 8700, ZXONE 19700><V1.40.021.021CP049, V1.0P02B219_@NCPM-RELEASE_2.40R1-20200914.set>
CVSS Score: 2.3 (LOW)
CWE: CWE-20
References: http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014664; http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014664
CVE: CVE-2021-21518
Published: 2021-03-12
Description: Dell SupportAssist Client for Consumer PCs versions 3.7.x, 3.6.x, 3.4.x, 3.3.x, Dell SupportAssist Client for Business PCs versions 2.0.x, 2.1.x, 2.2.x, and Dell SupportAssist Client ProManage 1.x contain a DLL injection vulnerability in the Costura Fody plugin. A local user with low privileges could potentially exploit this vulnerability, leading to the execution of arbitrary executable on the operating system with SYSTEM privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-427
References: https://www.dell.com/support/kbdoc/en-us/000184012/dsa-2021-052-dell-supportassist-for-home-pcs-business-pcs-security-update-for-pc-doctor-plugin-vulnerability; https://www.dell.com/support/kbdoc/en-us/000184012/dsa-2021-052-dell-supportassist-for-home-pcs-business-pcs-security-update-for-pc-doctor-plugin-vulnerability
CVE: CVE-2021-27290
Published: 2021-03-12
Description: ssri 5.2.2-8.0.0, fixed in 8.0.1, processes SRIs using a regular expression which is vulnerable to a denial of service. Malicious SRIs could take an extremely long time to process, leading to denial of service. This issue only affects consumers using the strict option.
CVSS Score: 7.5 (HIGH)
References: https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf; https://doyensec.com/resources/Doyensec_Advisory_ssri_redos.pdf; https://github.com/yetingli/SaveResults/blob/main/pdf/ssri-redos.pdf
CVE: CVE-2021-28092
Published: 2021-03-12
Description: The is-svg package 2.1.0 through 4.2.1 for Node.js uses a regular expression that is vulnerable to Regular Expression Denial of Service (ReDoS). If an attacker provides a malicious string, is-svg will get stuck processing the input for a very long time.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333
References: https://github.com/sindresorhus/is-svg/releases; https://github.com/sindresorhus/is-svg/releases/tag/v4.2.2; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-28161
Published: 2021-03-12
Description: In Eclipse Theia versions up to and including 1.8.0, in the debug console there is no HTML escaping, so arbitrary Javascript code can be injected.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/eclipse-theia/theia/issues/8794; https://github.com/eclipse-theia/theia/issues/8794
CVE: CVE-2021-28162
Published: 2021-03-12
Description: In Eclipse Theia versions up to and including 0.16.0, in the notification messages there is no HTML escaping, so Javascript code can run.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-830, CWE-829
References: https://github.com/eclipse-theia/theia/issues/7283; https://github.com/eclipse-theia/theia/issues/7283
CVE: CVE-2021-20017
Published: 2021-03-13
Description: A post-authenticated command injection vulnerability in SonicWall SMA100 allows an authenticated attacker to execute OS commands as a 'nobody' user. This vulnerability impacts SMA100 version 10.2.0.5 and earlier.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0004; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0004
CVE: CVE-2021-20018
Published: 2021-03-13
Description: A post-authenticated vulnerability in SonicWall SMA100 allows an attacker to export the configuration file to the specified email address. This vulnerability impacts SMA100 version 10.2.0.5 and earlier.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200, CWE-287
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0005; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0005
CVE: CVE-2020-35682
Published: 2021-03-13
Description: Zoho ManageEngine ServiceDesk Plus before 11134 allows an Authentication Bypass (only during SAML login).
CVSS Score: 8.8 (HIGH)
CWE: CWE-863
References: https://www.manageengine.com/products/service-desk/on-premises/readme.html#11134; https://www.manageengine.com/products/service-desk/on-premises/readme.html#11134