11 matches found
Lexmark Printers Integer Overflow or Wraparound (CVE-2024-11347)
An integer overflow vulnerability has been identified in the Postscript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...
CVE-2025-11347
CVE-2025-11347 affects code-projects Student Crud Operation up to 3.3, where the function move_uploaded_file in add.php allows unrestricted file upload. The vulnerability can be triggered remotely and the exploit has been publicized. Affected versions are stated as up to 3.3; sources suggest that...
CVE-2017-11347
Authenticated Code Execution Vulnerability in MetInfo 5.3.17 allows a remote authenticated attacker to generate a PHP script with the content of a malicious image, related to admin/include/common.inc.php and admin/app/physical/physical.php...
CVE-2024-11347
Integer Overflow or Wraparound vulnerability in Lexmark International CX, XC, CS, et. Al. Postscript interpreter modules allows Forced Integer Overflow.The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user...
CVE-2024-11347
creationtimestamp| type| source ---|---|--- 2025-02-13 18:58:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113998108985571018 2025-02-13 19:16:09+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li3flxeq5x2z 2025-02-13 20:34:56+00:00| seen|...
CVE-2024-11347 Access of Resource Using Incompatible Type in Postscript interpreter
Integer Overflow or Wraparound vulnerability in Lexmark International CX, XC, CS, et. Al. Postscript interpreter modules allows Forced Integer Overflow.The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user...
CVE-2024-11347 Access of Resource Using Incompatible Type in Postscript interpreter
Integer Overflow or Wraparound vulnerability in Lexmark International CX, XC, CS, et. Al. Postscript interpreter modules allows Forced Integer Overflow.The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user...
CVE-2024-11347
CVE-2024-11347 describes an integer overflow/wraparound vulnerability in the Postscript interpreter modules of Lexmark printers (CX, XC, CS, and related models). The flaw could be triggered to execute arbitrary code as an unprivileged user. Affected component: Postscript interpreter; root cause: ...
CVE-2020-11347
This CVE-2020-11347 entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2018-11347
The CVE-2018-11347 entry concerns the YunoHost web application (versions 2.7.2 through 2.7.14). Affected component/issue: HTTP Response Header Injection, enabling an attacker to inject one or more HTTP headers in server responses. Attack requirements: user interaction is needed (the attacker must...
CVE-2017-11347
MetInfo 5.3.17 is affected by an Authenticated Code Execution vulnerability. An authenticated attacker can cause the system to write a PHP script that includes the content of an uploaded image by manipulating admin/include/common.inc.php and admin/app/physical/physical.php. The PoC shows an admin...