Lucene search
K

11 matches found

Tenable Nessus
Tenable Nessus
added 2025/11/07 12:0 a.m.3 views

Lexmark Printers Integer Overflow or Wraparound (CVE-2024-11347)

An integer overflow vulnerability has been identified in the Postscript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

7.3CVSS7.8AI score0.00056EPSS
Exploits0References2
CVE
CVE
added 2025/10/07 2:48 a.m.8 views

CVE-2025-11347

CVE-2025-11347 affects code-projects Student Crud Operation up to 3.3, where the function move_uploaded_file in add.php allows unrestricted file upload. The vulnerability can be triggered remotely and the exploit has been publicized. Affected versions are stated as up to 3.3; sources suggest that...

9.8CVSS7.2AI score0.00083EPSS
Exploits1References5Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/22 5:9 a.m.5 views

CVE-2017-11347

Authenticated Code Execution Vulnerability in MetInfo 5.3.17 allows a remote authenticated attacker to generate a PHP script with the content of a malicious image, related to admin/include/common.inc.php and admin/app/physical/physical.php...

8.8CVSS7.1AI score0.01391EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/15 7:23 p.m.3 views

CVE-2024-11347

Integer Overflow or Wraparound vulnerability in Lexmark International CX, XC, CS, et. Al. Postscript interpreter modules allows Forced Integer Overflow.The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user...

7.3CVSS7.7AI score0.00056EPSS
Exploits0References1
Circl
Circl
added 2025/02/13 6:58 p.m.3 views

CVE-2024-11347

creationtimestamp| type| source ---|---|--- 2025-02-13 18:58:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113998108985571018 2025-02-13 19:16:09+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li3flxeq5x2z 2025-02-13 20:34:56+00:00| seen|...

7.3CVSS8.1AI score0.00056EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/02/13 6:55 p.m.10 views

CVE-2024-11347 Access of Resource Using Incompatible Type in Postscript interpreter

Integer Overflow or Wraparound vulnerability in Lexmark International CX, XC, CS, et. Al. Postscript interpreter modules allows Forced Integer Overflow.The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user...

7.3CVSS0.00056EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/02/13 6:55 p.m.6 views

CVE-2024-11347 Access of Resource Using Incompatible Type in Postscript interpreter

Integer Overflow or Wraparound vulnerability in Lexmark International CX, XC, CS, et. Al. Postscript interpreter modules allows Forced Integer Overflow.The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user...

7.3CVSS7.8AI score0.00056EPSS
Exploits0References1
CVE
CVE
added 2025/02/13 6:55 p.m.46 views

CVE-2024-11347

CVE-2024-11347 describes an integer overflow/wraparound vulnerability in the Postscript interpreter modules of Lexmark printers (CX, XC, CS, and related models). The flaw could be triggered to execute arbitrary code as an unprivileged user. Affected component: Postscript interpreter; root cause: ...

7.3CVSS7.4AI score0.00056EPSS
Exploits0References1
CVE
CVE
added 2021/12/20 10:45 p.m.31 views

CVE-2020-11347

This CVE-2020-11347 entry is rejected/not used and does not represent an active vulnerability entry.

6.7AI score
Exploits0
CVE
CVE
added 2018/12/04 5:0 p.m.40 views

CVE-2018-11347

The CVE-2018-11347 entry concerns the YunoHost web application (versions 2.7.2 through 2.7.14). Affected component/issue: HTTP Response Header Injection, enabling an attacker to inject one or more HTTP headers in server responses. Attack requirements: user interaction is needed (the attacker must...

8.8CVSS8.4AI score0.00354EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2017/07/16 11:0 p.m.54 views

CVE-2017-11347

MetInfo 5.3.17 is affected by an Authenticated Code Execution vulnerability. An authenticated attacker can cause the system to write a PHP script that includes the content of an uploaded image by manipulating admin/include/common.inc.php and admin/app/physical/physical.php. The PoC shows an admin...

8.8CVSS8.4AI score0.01391EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder