CVE-2022-40772: Undefined Security Weakness

Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to a validation bypass that allows users to access sensitive data via the report module...

CVE-2022-40772

Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to a validation bypass that allows users to access sensitive data via the report module...

Command Execution Vulnerability in ZOHO ManageEngine ADManager Plus

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. The software assists AD administrators and helpdesk technicians with day-to-day administrative tasks, such as batch management of user...

CVE-2022-40770

Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to authenticated command injection. This can be exploited by high-privileged users...

CVE-2022-40771

CVE-2022-40771 affects Zoho ManageEngine ServiceDesk Plus versions 13010 and earlier. The vulnerability is an XML External Entity (XXE) issue in the Analytics Plus integration that can lead to information disclosure. The CVSS v3.1 vector is AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N with a base score of...

CVE-2022-40771

Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to an XML External Entity attack that leads to Information Disclosure...

CVE-2022-40772

CVE-2022-40772 affects Zoho ManageEngine ServiceDesk Plus versions 13010 and earlier. A validation bypass in the report module allows an attacker to access sensitive data. Public details in the initial and linked records confirm the affected product/version and the data exposure via the report mo...

ZOHO ManageEngine ServiceDesk Plus code issues and vulnerabilities

ZOHO ManageEngine ServiceDesk Plus SDP is the United States ZhuoHao ZOHO company's set of ITIL-based architecture of IT service management software. The software integrates Incident Management, Problem Management, Asset Management, IT Project Management, Procurement and Contract Management, and...

ZOHO ManageEngine ServiceDesk Plus security vulnerabilities

ZOHO ManageEngine ServiceDesk Plus SDP is the United States ZhuoHao ZOHO company's set of ITIL-based architecture of IT service management software. The software integrates Incident Management, Problem Management, Asset Management, IT Project Management, Procurement and Contract Management, and...

CVE-2022-37931

A vulnerability in NetBatch-Plus software allows unauthorized access to the application. HPE has provided a workaround and fix. Please refer to HPE Security Bulletin HPESBNS04388 for details...

CVE-2022-37931

A vulnerability in NetBatch-Plus software allows unauthorized access to the application. HPE has provided a workaround and fix. Please refer to HPE Security Bulletin HPESBNS04388 for details...

Design/Logic Flaw

A vulnerability in NetBatch-Plus software allows unauthorized access to the application. HPE has provided a workaround and fix. Please refer to HPE Security Bulletin HPESBNS04388 for details...

CVE-2022-37931 A vulnerability in NetBatch-Plus software allows unauthorized access to the application

A vulnerability in NetBatch-Plus software allows unauthorized access to the application. HPE has provided a workaround and fix. Please refer to HPE Security Bulletin HPESBNS04388 for details...

CVE-2022-37931 A vulnerability in NetBatch-Plus software allows unauthorized access to the application

A vulnerability in NetBatch-Plus software allows unauthorized access to the application. HPE has provided a workaround and fix. Please refer to HPE Security Bulletin HPESBNS04388 for details...

CVE-2022-37931

CVE-2022-37931 – NetBatch-Plus unauthorized access . Multiple sources confirm a vulnerability in NetBatch-Plus that could allow unauthorized access to the application. HPESBNS04388 provides a workaround and fix. The CNVD entry and PT-Security page reference affected versions without giving precis...

sklearn-plus (>=0.0.3, <=0.0.4) potentially affected by CVE-2022-41880 via tensorflow (1.2.0)

tensorflow PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - sklearn-plus =0.0.3, =0.0.4 Source cves: CVE-2022-41880 Source advisory: OSV:GHSA-8W5G-3WCV-9G2J...

PT-2022-24163 · Hewlett Packard · Netbatch-Plus

Name of the Vulnerable Software and Affected Versions: NetBatch-Plus affected versions not specified Description: A vulnerability in NetBatch-Plus software allows unauthorized access to the application. HPE has provided a workaround and fix, with details available in HPE Security Bulletin...

CVE-2022-37931: Improper Authentication

A vulnerability in NetBatch-Plus software allows unauthorized access to the application. HPE has provided a workaround and fix. Please refer to HPE Security Bulletin HPESBNS04388 for details...

Hewlett Packard Enterprise NetBatch-Plus Authorization Issue Vulnerability

Hewlett Packard Enterprise NetBatch-Plus is a path application from Hewlett Packard Enterprise that provides a screen-driven interface to the NetBatch job management system. An unauthorized vulnerability exists in Hewlett Packard Enterprise NetBatch-Plust 9189h01 and later, versions prior to...

sklearn-plus (>=0.0.3, <=0.0.4) potentially affected by CVE-2022-35935 via tensorflow (1.2.0)

tensorflow PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - sklearn-plus =0.0.3, =0.0.4 Source cves: CVE-2022-35935 Source advisory: OSV:GHSA-CQVQ-FVHR-V6HC...