CVE-2023-26601

Zoho ManageEngine ServiceDesk Plus through 14104, Asset Explorer through 6987, ServiceDesk Plus MSP before 14000, and Support Center Plus before 14000 allow Denial-of-Service DoS...

CVE-2023-26600

CVE-2023-26600 affects ManageEngine ServiceDesk Plus (up to 14104), ServiceDesk Plus MSP (up to 14000), Support Center Plus (up to 14000), and Asset Explorer (up to 6987). A privilege-escalation flaw exists in the query reports component that can allow an attacker to access data restricted in the...

CVE-2023-26600

ManageEngine ServiceDesk Plus through 14104, ServiceDesk Plus MSP through 14000, Support Center Plus through 14000, and Asset Explorer through 6987 allow privilege escalation via query reports...

CVE-2023-26601: Uncontrolled Resource Consumption

Zoho ManageEngine ServiceDesk Plus through 14104, Asset Explorer through 6987, ServiceDesk Plus MSP before 14000, and Support Center Plus before 14000 allow Denial-of-Service DoS...

HPESBHF04418 rev.1 - Certain HPE ProLiant DL/ML/MicroServer Servers Using Certain Intel Processors, INTEL-SA-00767, 2023.1 IPU - Intel Processor Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL20 Gen10 Plus server -prior to 1.6801-12-2023 HPE ProLiant DL110 Gen10 Plus Telco server -prior to 1.7202-02-2023 HPE ProLiant DL360 Gen10 Plus server -prior ...

HPESBHF04422 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-00730, 2023.1 IPU - 3rd Generation Intel Xeon Scalable Processors Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1660 Storage - Prior to 1.7202-02-2023 U46 ROM Family HPE StoreEasy 1860 Storage - Prior to 1.7202-02-2023 U46 ROM Family CVSS Scores: | CVE | CVSS Vector | Ba...

HPESBGN04447 rev.1 - HPE Intel E810 Series Ethernet Controllers, INTEL-SA-00770, Intel Network Adapter Software Advisory, Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Intel E810-XXVDA4 Ethernet 10/25Gb 4-port SFP28 Adapter for HPE - Prior to 4.01 Intel E810-CQDA2 Ethernet 100Gb 2-port QSFP28 Adapter for HPE - Prior to 4.01 Intel E810-CQDA2...

HPESBHF04413 rev.1 - Certain HPE ProLiant Servers Using Certain Intel Processors, INTEL-SA-00700, 2023.1 IPU - Intel Atom and Intel Xeon Scalable Processors Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL110 Gen10 Plus Telco server -Prior to 1.7202-02-2023 HPE ProLiant DL360 Gen10 Plus server -Prior to 1.7202-02-2023 HPE ProLiant DL380 Gen10 Plus server -Prior t...

CVE-2023-23076

OS Command injection vulnerability in Support Center Plus 11 via Executor in Action when creating new schedules...

CVE-2023-23076

OS Command injection vulnerability in Support Center Plus 11 via Executor in Action when creating new schedules...

Command injection

OS Command injection vulnerability in Support Center Plus 11 via Executor in Action when creating new schedules...

PT-2023-18835 · Unknown · Supportcenter Plus

Name of the Vulnerable Software and Affected Versions: Support Center Plus version 11 Description: The issue is an OS Command injection vulnerability in Support Center Plus via Executor in Action when creating new schedules. Recommendations: For Support Center Plus version 11, consider disabling...

CVE-2023-23076

CVE-2023-23076 affects ManageEngine SupportCenter Plus 11, where an OS command injection via the Executor in Action when creating new schedules allows unauthenticated or network-based exploitation (cvss3.1: 9.8). For affected versions, multiple sources indicate remediation through upgrading to Su...

CVE-2023-23076: Improper Neutralization of Special Elements used in an OS Command

OS Command injection vulnerability in Support Center Plus 11 via Executor in Action when creating new schedules...

CVE-2023-23076

OS Command injection vulnerability in Support Center Plus 11 via Executor in Action when creating new schedules...

CVE-2023-23076

OS Command injection vulnerability in Support Center Plus 11 via Executor in Action when creating new schedules...

Regarding recent reported security vulnerabilities from Cisco Talos

Back in October 2022, the Qt Project Security team was contacted by someone at Cisco Talos to report an issue with integer and buffer overflow issues in QML which they considered a vulnerability in Qt 6.3. This has recently been made public by Cisco Talos here. This has also resulted in two CVEs ...

HPESBHF04385 rev.2 - HPE Cloudline CL2100/CL2200 Gen10 Servers Using BMC, Multiple Vulnerabilities

Potential Security Impact: Local: Authorized User; Remote: Arbitrary Code Execution, Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cloudline CL2200 Gen10 Server - Prior to BMC version 12.77.04 HPE Cloudline CL2100 Gen10 Server - Prior to BMC version 12.77.04...

PT-2022-7164 · Manageengine · Manageengine Servicedesk Plus +2

Name of the Vulnerable Software and Affected Versions: ManageEngine ServiceDesk Plus versions 14104 and earlier ManageEngine ServiceDesk Plus MSP versions 14000 and earlier ManageEngine Support Center Plus versions 14000 and earlier ManageEngine Asset Explorer versions 6987 and earlier Descriptio...

ZOHO ManageEngine ServiceDesk Plus 输入验证错误漏洞

ZOHO ManageEngine ServiceDesk Plus SDP is the United States ZhuoHao ZOHO company's set of ITIL-based architecture of IT service management software. The software integrates Incident Management, Problem Management, Asset Management IT Project Management, Procurement and Contract Management modules...