CVE-2023-4835: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CF Software Oil Management Software allows SQL Injection. This issue affects Oil Management Software: before 20230912...

PT-2023-30797

Name of the Vulnerable Software and Affected Versions CF Software Oil Management Software versions prior to 20230912 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

org.eclipse.leshan:leshan-all (0.1.11-m11), org.eclipse.leshan:leshan-bsserver-demo (0.1.11-m11) +8 more potentially affected by CVE-2023-41034 via org.eclipse.leshan:leshan-core (0.1.11-m11)

org.eclipse.leshan:leshan-core MAVEN version 0.1.11-m11 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.leshan:leshan-core and may be impacted: - org.eclipse.leshan:leshan-all 0.1.11-m11 - org.eclipse.leshan:leshan-bsserver-demo 0.1.11-m11 ...

org.eclipse.leshan:leshan-all (0.1.11-m8), org.eclipse.leshan:leshan-bsserver-demo (0.1.11-m8) +7 more potentially affected by CVE-2023-41034 via org.eclipse.leshan:leshan-core (0.1.11-m8)

org.eclipse.leshan:leshan-core MAVEN version 0.1.11-m8 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.leshan:leshan-core and may be impacted: - org.eclipse.leshan:leshan-all 0.1.11-m8 - org.eclipse.leshan:leshan-bsserver-demo 0.1.11-m8 -...

org.eclipse.leshan:leshan-all (0.1.11-m7), org.eclipse.leshan:leshan-bs-server (0.1.11-m7) +7 more potentially affected by CVE-2023-41034 via org.eclipse.leshan:leshan-core (0.1.11-m7)

org.eclipse.leshan:leshan-core MAVEN version 0.1.11-m7 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.leshan:leshan-core and may be impacted: - org.eclipse.leshan:leshan-all 0.1.11-m7 - org.eclipse.leshan:leshan-bs-server 0.1.11-m7 -...

org.eclipse.leshan:leshan-all (0.1.11-m4), org.eclipse.leshan:leshan-bs-server (0.1.11-m4) +7 more potentially affected by CVE-2023-41034 via org.eclipse.leshan:leshan-core (0.1.11-m4)

org.eclipse.leshan:leshan-core MAVEN version 0.1.11-m4 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.leshan:leshan-core and may be impacted: - org.eclipse.leshan:leshan-all 0.1.11-m4 - org.eclipse.leshan:leshan-bs-server 0.1.11-m4 -...

org.eclipse.leshan:leshan-bsserver-demo (>=2.0.0-m1, <=2.0.0-m12), org.eclipse.leshan:leshan-client-cf (>=2.0.0-m1, <=2.0.0-m12) +9 more potentially affected by CVE-2023-41034 via org.eclipse.leshan:leshan-core (>=2.0.0-m1, <=2.0.0-m12)

org.eclipse.leshan:leshan-core MAVEN version =2.0.0-m1, =2.0.0-m1, =2.0.0-m1, =2.0.0-m1, =2.0.0-m1, =2.0.0-m1, =2.0.0-m5, =2.0.0-m1, =2.0.0-m1, =2.0.0-m5, =2.0.0-m1, =2.0.0-m1, =2.0.0-m12 Source cves: CVE-2023-41034 Source advisory: GHSA-WC9J-GC65-3CM7...

org.eclipse.leshan:leshan-all (>=1.0.0-m1, <=1.0.0-m11), org.eclipse.leshan:leshan-bsserver-demo (>=1.0.0-m1, <=1.4.2) +10 more potentially affected by CVE-2023-41034 via org.eclipse.leshan:leshan-core (>=1.0.0-m1, <=1.4.2)

org.eclipse.leshan:leshan-core MAVEN version =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m12, =1.4.2 Source cves: CVE-2023-41034 Source advisory: OSV:GHSA-WC9J-GC65-3CM7...

org.eclipse.leshan:leshan-all (0.1.11-m1), org.eclipse.leshan:leshan-bs-server (0.1.11-m1) +5 more potentially affected by CVE-2023-41034 via org.eclipse.leshan:leshan-core (0.1.11-m1)

org.eclipse.leshan:leshan-core MAVEN version 0.1.11-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.leshan:leshan-core and may be impacted: - org.eclipse.leshan:leshan-all 0.1.11-m1 - org.eclipse.leshan:leshan-bs-server 0.1.11-m1 -...

org.eclipse.leshan:leshan-all (0.1.11-m2), org.eclipse.leshan:leshan-bs-server (0.1.11-m2) +7 more potentially affected by CVE-2023-41034 via org.eclipse.leshan:leshan-core (0.1.11-m2)

org.eclipse.leshan:leshan-core MAVEN version 0.1.11-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.leshan:leshan-core and may be impacted: - org.eclipse.leshan:leshan-all 0.1.11-m2 - org.eclipse.leshan:leshan-bs-server 0.1.11-m2 -...

org.eclipse.leshan:leshan-bsserver-demo (>=2.0.0-m1, <=2.0.0-m12), org.eclipse.leshan:leshan-client-cf (>=2.0.0-m1, <=2.0.0-m12) +9 more potentially affected by CVE-2023-41034 via org.eclipse.leshan:leshan-core (>=2.0.0-m1, <=2.0.0-m12)

org.eclipse.leshan:leshan-core MAVEN version =2.0.0-m1, =2.0.0-m1, =2.0.0-m1, =2.0.0-m1, =2.0.0-m1, =2.0.0-m1, =2.0.0-m5, =2.0.0-m1, =2.0.0-m1, =2.0.0-m5, =2.0.0-m1, =2.0.0-m1, =2.0.0-m12 Source cves: CVE-2023-41034 Source advisory: OSV:GHSA-WC9J-GC65-3CM7...

org.eclipse.leshan:leshan-all (0.1.11-m6), org.eclipse.leshan:leshan-bs-server (0.1.11-m6) +7 more potentially affected by CVE-2023-41034 via org.eclipse.leshan:leshan-core (0.1.11-m6)

org.eclipse.leshan:leshan-core MAVEN version 0.1.11-m6 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.leshan:leshan-core and may be impacted: - org.eclipse.leshan:leshan-all 0.1.11-m6 - org.eclipse.leshan:leshan-bs-server 0.1.11-m6 -...

USN-6266-1: librsvg vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description Zac Sims discovered that librsvg incorrectly handled decoding URLs. A remote attacker could possibly use this issue to read arbitrary files by using an include element. Update Instructions: Run sudo pro f...

CVE-2023-38866

COMFAST CF-XR11 V2.7.2 has a command injection vulnerability detected at function sub415588. Attackers can send POST request messages to /usr/bin/webmgnt and inject commands into parameter interface and displayname...

CVE-2023-38864

An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the protaldeletepicname parameter in the sub41171C function at bin/webmgnt...

Design/Logic Flaw

An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the protaldeletepicname parameter in the sub41171C function at bin/webmgnt...

Command injection

COMFAST CF-XR11 V2.7.2 has a command injection vulnerability detected at function sub415588. Attackers can send POST request messages to /usr/bin/webmgnt and inject commands into parameter interface and displayname...

CVE-2023-38865

COMFAST CF-XR11 V2.7.2 has a command injection vulnerability detected at function sub4143F0. Attackers can send POST request messages to /usr/bin/webmgnt and inject commands into parameter timestr...

CVE-2023-38863

An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the ifname and mac parameters in the sub410074 function at bin/webmgnt...

CVE-2023-38862

An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the destination parameter of sub431F64 function in bin/webmgnt...