CVE-2023-2039: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in novel-plus 3.6.2. It has been rated as critical. This issue affects some unknown processing of the file /author/list?limit=10&offset=0&order=desc. The manipulation of the argument sort leads to sql injection. The attack may be initiated remotely. The exploit has been...

PT-2023-17437 · Unknown · Novel-Plus

Name of the Vulnerable Software and Affected Versions: novel-plus version 3.6.2 Description: A critical issue was found in the software, affecting an unknown functionality of the file "/category/list?limit=10&offset=0&order=desc". The manipulation of the sort argument leads to SQL injection. This...

FreeBSD : py-nicotine-plus -- Denial of service vulnerability (e87a9326-dd35-49fc-b20b-f57cbebaae87)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the e87a9326-dd35-49fc-b20b-f57cbebaae87 advisory. - Denial of service DoS vulnerability in Nicotine+ 3.0.3 and later allows a user with a modified Soulse...

CVE-2023-29084

Zoho ManageEngine ADManager Plus before 7181 allows for authenticated users to exploit command injection via Proxy settings...

CVE-2023-29084

Zoho ManageEngine ADManager Plus before 7181 allows for authenticated users to exploit command injection via Proxy settings...

Command injection

Zoho ManageEngine ADManager Plus before 7181 allows for authenticated users to exploit command injection via Proxy settings...

CVE-2023-29084

Zoho ManageEngine ADManager Plus before 7181 allows for authenticated users to exploit command injection via Proxy settings...

CVE-2023-29084: Improper Neutralization of Special Elements used in a Command

Zoho ManageEngine ADManager Plus before 7181 allows for authenticated users to exploit command injection via Proxy settings...

CVE-2023-29084

CVE-2023-29084 concerns Zoho ManageEngine ADManager Plus. Multiple sources confirm: versions up to build 7181/7180 are vulnerable to authenticated command injection by manipulating the server proxy settings. The underlying issue is insufficient validation of user input when handling proxy configu...

ZOHO ManageEngine ADManager Plus has a command injection vulnerability

ZOHO ManageEngine ADManager Plus is a set of Microsoft Active Directory management software designed for enterprise users using Windows domains from ZOHO, USA. A remote command vulnerability exists in ZOHO ManageEngine ADManager Plus, which can be exploited by attackers to perform command injecti...

ManageEngine ADManager Plus ChangePasswordAction Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of ManageEngine ADManager Plus. Authentication is required to exploit this vulnerability. The specific flaw exists within the ChangePasswordAction function. The issue results from the lack of proper...

CVE-2023-28342

Zoho ManageEngine ADSelfService Plus before 6218 allows anyone to conduct a Denial-of-Service attack via the Mobile App Authentication API...

CVE-2023-28342

Zoho ManageEngine ADSelfService Plus before 6218 allows anyone to conduct a Denial-of-Service attack via the Mobile App Authentication API...

Authentication flaw

Zoho ManageEngine ADSelfService Plus before 6218 allows anyone to conduct a Denial-of-Service attack via the Mobile App Authentication API...

ai.ylyue:yue-library-data-es (j11.2.6.2), ai.ylyue:yue-library-data-mybatis (j11.2.6.2) +2442 more potentially affected by CVE-2023-25330 via com.baomidou:mybatis-plus (>=3.0-alpha, <=3.5.3)

com.baomidou:mybatis-plus MAVEN version =3.0-alpha, =0.3.0, =0.4.0, =3.0.5, =1.7.2, =1.7.2, =1.0.4.r, =1.0.4.r, =1.0.4.r, =1.0.0, =1.1.2 and more Source cves: CVE-2023-25330 Source advisory: OSV:GHSA-32QQ-M9FH-F74W...

com.baomidou:mybatisplus-spring-boot-starter (1.0.2) potentially affected by CVE-2023-25330 via com.baomidou:mybatis-plus (2.0.9)

com.baomidou:mybatis-plus MAVEN version 2.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.baomidou:mybatis-plus and may be impacted: - com.baomidou:mybatisplus-spring-boot-starter 1.0.2 Source cves: CVE-2023-25330 Source advisory:...

cn.bestwu.simpleframework:core (>=0.1.4, <=0.1.5), cn.bestwu.simpleframework:simpleframework-core (>=0.1.5, <=0.1.14) +9 more potentially affected by CVE-2023-25330 via com.baomidou:mybatis-plus (2.2.0)

com.baomidou:mybatis-plus MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.baomidou:mybatis-plus and may be impacted: - cn.bestwu.simpleframework:core =0.1.4, =0.1.5, =0.1.11, =2.0.1, =1.0.0-release, =0.0.1.release, =1.5 -...

com.github.yuxiaobin:mybatis-generalmapper (>=1.0, <=1.8.8), com.javaear:generalmapper (1.2.1) potentially affected by CVE-2023-25330 via com.baomidou:mybatis-plus (1.5)

com.baomidou:mybatis-plus MAVEN version 1.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.baomidou:mybatis-plus and may be impacted: - com.github.yuxiaobin:mybatis-generalmapper =1.0, =1.8.8 - com.javaear:generalmapper 1.2.1 Source cves:...

com.baomidou:spring-wind (>=1.1.1, <=1.1.3) potentially affected by CVE-2023-25330 via com.baomidou:mybatis-plus (1.2.16)

com.baomidou:mybatis-plus MAVEN version 1.2.16 is affected by a known vulnerability. The following packages have a transitive dependency on com.baomidou:mybatis-plus and may be impacted: - com.baomidou:spring-wind =1.1.1, =1.1.3 Source cves: CVE-2023-25330 Source advisory: OSV:GHSA-32QQ-M9FH-F74W...

com.baomidou:mybatis-plus-boot-starter (2.3.2) potentially affected by CVE-2023-25330 via com.baomidou:mybatis-plus (2.3.2)

com.baomidou:mybatis-plus MAVEN version 2.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.baomidou:mybatis-plus and may be impacted: - com.baomidou:mybatis-plus-boot-starter 2.3.2 Source cves: CVE-2023-25330 Source advisory:...