Zavio CF Series Buffer Error Vulnerability

Zavio CF Series is a series of webcams from Zavio. The Zavio CF Series suffers from a buffer error vulnerability that stems from susceptibility to a stack-based overflow that does not adequately check or validate the size of the allocated buffer, which could lead to remote code execution...

Zavio CF Series IP Camera Buffer Error Vulnerability

Zavio CF Series is a series of webcams from Zavio. A security vulnerability exists in the Zavio CF Series IP Camera that stems from not adequately checking or validating the allocated buffer size. An attacker could exploit the vulnerability to remotely execute arbitrary code. The following produc...

CVE-2023-3959: Stack-based Buffer Overflow

Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to multiple instances of stack-based overflows. While processing XML elements from incoming network requests, the product does not sufficiently...

cf-logistik.de Improper Access Control vulnerability OBB-3769376

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-44487 affecting package cf-cli for versions less than 8.4.0-13

CVE-2023-44487 affecting package cf-cli for versions less than 8.4.0-13. A patched version of the package is available...

USN-6369-1: libwebp vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description It was discovered that libwebp incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image file, a remote attacker could use this issue ...

AZL-34590 CVE-2023-39325 affecting package cf-cli for versions less than 8.7.3-2

A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a ne...

USN-6270-1: Vim vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Canonical Ubuntu 22.04 Description It was discovered that Vim incorrectly handled memory when opening certain files. If an attacker could trick a user into opening a specially crafted file, it...

USN-6360-1: FLAC vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description It was discovered that FLAC incorrectly handled encoding certain files. A remote attacker could use this issue to cause FLAC to crash, resulting in a denial of service, or possibly execute arbitrary code...

| Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description It was discovered that libwebp incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image file, a remote attacker could use this issue ...

USN-6403-1: libvpx vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description It was discovered that libvpx did not properly handle certain malformed media files. If an application using libvpx opened a specially crafted file, a remote attacker could cause a denial of service, or...

USN-6407-1: libx11 vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description Gregory James Duck discovered that libx11 incorrectly handled certain keyboard symbols. If a user were tricked into connecting to a malicious X server, a remote attacker could use this issue to cause libx...

USN-6139-1: Python vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Canonical Ubuntu 22.04 Description Yebo Cao discovered that Python incorrectly handled certain URLs. An attacker could use this issue to bypass blockinglisting methods. This issue was first...

USN-6145-1: Sysstat vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Canonical Ubuntu 22.04 Description It was discovered that Sysstat incorrectly handled certain arithmetic multiplications. An attacker could use this issue to cause Sysstat to crash, resulting i...

USN-6219-1: Ruby vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Canonical Ubuntu 22.04 Description It was discovered that Ruby incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu...

CVE-2023-4835

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CF Software Oil Management Software allows SQL Injection. This issue affects Oil Management Software: before 20230912...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CF Software Oil Management Software allows SQL Injection.This issue affects Oil Management Software: before 20230912...

CVE-2023-4835 SQLi in CF's Oil Management Software

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CF Software Oil Management Software allows SQL Injection. This issue affects Oil Management Software: before 20230912...

CVE-2023-4835 SQLi in CF's Oil Management Software

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CF Software Oil Management Software allows SQL Injection. This issue affects Oil Management Software: before 20230912...

CVE-2023-4835

CVE-2023-4835 describes an SQL Injection in CF Software Oil Management Software, caused by improper neutralization of special elements in SQL commands. Affected: Oil Management Software versions prior to 20230912. Impact is SQL injection; no exploitation details are provided in the documents. Mit...