CVE-2022-23863

Zoho ManageEngine Desktop Central before 10.1.2137.10 allows an authenticated user to change any user's login password...

EUVD-2021-32865

Malicious code in bioql PyPI...

EUVD-2021-32864

Malicious code in bioql PyPI...

CVE-2022-48362: Improper Limitation of a Pathname to a Restricted Directory

Zoho ManageEngine Desktop Central and Desktop Central MSP before 10.1.2137.2 allow directory traversal via computerName to AgentLogUploadServlet. A remote, authenticated attacker could upload arbitrary code that would be executed when Desktop Central is restarted. The attacker could authenticate ...

PT-2022-16262 · Zoho · Zoho Manageengine Desktop Central

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Desktop Central versions prior to 10.1.2137.8 Description: The issue allows the exposure of the installed server name to anyone, enabling the discovery of the internal hostname by reading HTTP redirect responses. This can be...

CVE-2022-23779: Exposure of Sensitive Information to an Unauthorized Actor

Zoho ManageEngine Desktop Central before 10.1.2137.8 exposes the installed server name to anyone. The internal hostname can be discovered by reading HTTP redirect responses...

CVE-2022-23863: Undefined Security Weakness

Zoho ManageEngine Desktop Central before 10.1.2137.10 allows an authenticated user to change any user's login password...

CVE-2021-44757

Zoho ManageEngine Desktop Central before 10.1.2137.9 and Desktop Central MSP before 10.1.2137.9 allow attackers to bypass authentication, and read sensitive information or upload an arbitrary ZIP archive to the server...

PT-2022-12223

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Desktop Central versions prior to 10.1.2137.9 Zoho ManageEngine Desktop Central MSP versions prior to 10.1.2137.9 Description The issue allows attackers to bypass authentication, enabling them to read sensitive information or...

CVE-2021-44757: Undefined Security Weakness

Zoho ManageEngine Desktop Central before 10.1.2137.9 and Desktop Central MSP before 10.1.2137.9 allow attackers to bypass authentication, and read sensitive information or upload an arbitrary ZIP archive to the server...

CVE-2021-46166: Exposure of Sensitive Information to an Unauthorized Actor

Zoho ManageEngine Desktop Central before 10.0.662 allows authenticated users to obtain sensitive information from the database by visiting the Reports page...

CVE-2021-46165: Undefined Security Weakness

Zoho ManageEngine Desktop Central before 10.0.662, during startup, launches an executable file from the batch files, but this file's path might not be properly defined...

PT-2022-12596

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Desktop Central versions prior to 10.0.662 Description The issue allows remote code execution by an authenticated user with complete access to the Reports module. Recommendations For versions prior to 10.0.662, update to...

CVE-2021-46164: Undefined Security Weakness

Zoho ManageEngine Desktop Central before 10.0.662 allows remote code execution by an authenticated user who has complete access to the Reports module...

PT-2022-12597

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Desktop Central versions prior to 10.0.662 Description The issue arises during startup when Zoho ManageEngine Desktop Central launches an executable file from batch files, but the path to this file might not be properly...

PT-2022-12598

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Desktop Central versions prior to 10.0.662 Description The issue allows authenticated users to obtain sensitive information from the database by visiting the Reports page. Recommendations For versions prior to 10.0.662, updat...

CVE-2021-44515

Zoho ManageEngine Desktop Central is vulnerable to authentication bypass, leading to remote code execution on the server, as exploited in the wild in December 2021. For Enterprise builds 10.1.2127.17 and earlier, upgrade to 10.1.2127.18. For Enterprise builds 10.1.2128.0 through 10.1.2137.2,...

CVE-2021-44515

Zoho ManageEngine Desktop Central is vulnerable to authentication bypass, leading to remote code execution on the server, as exploited in the wild in December 2021. For Enterprise builds 10.1.2127.17 and earlier, upgrade to 10.1.2127.18. For Enterprise builds 10.1.2128.0 through 10.1.2137.2,...

CVE-2021-44515: Undefined Security Weakness

Zoho ManageEngine Desktop Central is vulnerable to authentication bypass, leading to remote code execution on the server, as exploited in the wild in December 2021. For Enterprise builds 10.1.2127.17 and earlier, upgrade to 10.1.2127.18. For Enterprise builds 10.1.2128.0 through 10.1.2137.2,...

PT-2021-5435

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Desktop Central versions 10.1.2127.17 through 10.1.2137.2 Zoho ManageEngine Desktop Central version 10.1.2127.17 and earlier Description The issue is related to an authentication bypass vulnerability in Zoho ManageEngine...