Lucene search
+L

1060 matches found

NVD
NVD
added 2022/04/04 3:15 p.m.37 views

CVE-2022-1026

Kyocera multifunction printers running vulnerable versions of Net View unintentionally expose sensitive user information, including usernames and passwords, through an insufficiently protected address book export function...

8.6CVSS0.15102EPSS
SaveExploits5References2
OSV
OSV
added 2022/04/04 3:15 p.m.5 views

CVE-2022-1026

Kyocera multifunction printers running vulnerable versions of Net View unintentionally expose sensitive user information, including usernames and passwords, through an insufficiently protected address book export function...

8.6CVSS7.2AI score0.15102EPSS
SaveExploits5References2
Prion
Prion
added 2022/04/04 3:15 p.m.26 views

Design/Logic Flaw

Kyocera multifunction printers running vulnerable versions of Net View unintentionally expose sensitive user information, including usernames and passwords, through an insufficiently protected address book export function...

5CVSS8.5AI score0.15102EPSS
SaveExploits5References2Affected Software1
Cvelist
Cvelist
added 2022/04/04 2:15 p.m.50 views

CVE-2022-1026 Kyocera Net View Address Book Exposure

Kyocera multifunction printers running vulnerable versions of Net View unintentionally expose sensitive user information, including usernames and passwords, through an insufficiently protected address book export function...

8.6CVSS8.8AI score0.15102EPSS
SaveExploits5References2
Positive Technologies
Positive Technologies
added 2022/04/04 12:0 a.m.11 views

PT-2022-7705

Name of the Vulnerable Software and Affected Versions Kyocera Net View affected versions not specified Description The issue concerns an insufficiently protected address book export function in Kyocera Net View, which unintentionally exposes sensitive user information, including usernames and...

8.6CVSS7.1AI score0.15102EPSS
SaveExploits5References16
CNNVD
CNNVD
added 2022/04/04 12:0 a.m.6 views

Kyocera multifunction printers 安全漏洞

Kyocera multifunction printers is a printer from Kyocera, Japan. A security vulnerability exists in Kyocera multifunction printers that originates from the inadvertent exposure of sensitive user information, including usernames and passwords, through an insufficiently protected address book expor...

8.6CVSS7.7AI score0.15102EPSS
SaveExploits5References3
Rapid7 Blog
Rapid7 Blog
added 2022/03/29 1:29 p.m.1090 views

CVE-2022-1026: Kyocera Net View Address Book Exposure

Rapid7 researcher Aaron Herndon has discovered that several models of Kyocera multifunction printers running vulnerable versions of Net View unintentionally expose sensitive user information, including usernames and passwords, through an insufficiently protected address book export function. This...

6CVSS7.9AI score0.80004EPSS
SaveExploits12
ATTACKERKB
ATTACKERKB
added 2022/03/29 1:5 p.m.5 views

CVE-2022-1026

Kyocera multifunction printers running vulnerable versions of Net View unintentionally expose sensitive user information, including usernames and passwords, through an insufficiently protected address book export function...

8.6CVSS7.3AI score0.15102EPSS
SaveExploits5References4
Zero Day Initiative
Zero Day Initiative
added 2022/03/23 12:0 a.m.48 views

(Pwn2Own) HP LaserJet Pro MFP M283fdw eContactRestore Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of HP LaserJet Pro MFP M283fdw printers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8CVSS4.8AI score0.07022EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2022/03/17 12:0 a.m.53 views

Fujifilm / Fuji Xerox Printers Cryptography Vulnerability (Mar 2022)

Multiple Fujifilm / Fuji Xerox printers are prone to a cryptography vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if descripti...

4.9CVSS5.2AI score0.00685EPSS
SaveExploits1References1
OSV
OSV
added 2022/03/03 3:15 p.m.5 views

CVE-2021-43774

A risky-algorithm issue was discovered on Fujifilm DocuCentre-VI C4471 1.8 devices. An attacker that obtained access to the administrative web interface of a printer e.g., by using the default credentials can download the address book file, which contains the list of users domain users, FTP users...

4.9CVSS5.8AI score0.00685EPSS
SaveExploits1References3
Patchstack
Patchstack
added 2022/02/28 12:0 a.m.10 views

WordPress "Contact List – Easy Business Directory, Staff Directory and Address Book Plugin" plugin < 2.9.50 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress "Contact List – Easy Business Directory, Staff Directory and Address Book Plugin" plugin versions 2.9.50. Solution Update the WordPress "Contact List – Easy Business Directory, Staff Directory and...

3.8AI score
SaveExploits0References2Affected Software1
vulnersOsv
vulnersOsv
added 2022/02/10 8:47 p.m.5 views

com.soterianetworks:spase-cipped (>=0.9.17 <=0.9.46), com.soterianetworks:spase-cipped-starter (>=0.9.17 <=0.9.46) +47 more potentially affected by CVE-2019-11343 via org.torpedoquery:org.torpedoquery (>=1.7.0 <=2.5.1)

org.torpedoquery:org.torpedoquery MAVEN version =1.7.0, =0.9.17, =0.9.17, =0.9.0, =0.9.0, =3.11.0, =3.11.0, =3.11.0, =3.11.0, =3.11.0, =3.11.0, =3.12.2 - de.alpharogroup:dating-system-business =3.11.0 - de.alpharogroup:dating-system-domain =3.11.0 - de.alpharogroup:dating-system-init =3.11.0 -...

9.8CVSS7.2AI score0.0178EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/02/07 12:0 a.m.8 views

The vulnerability of the Windows Address Book on Windows operating systems, related to errors in code generation, allows a hacker to execute arbitrary code.

The vulnerability of the Windows Address Book in operating systems is related to errors in code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code on the target system...

7.8CVSS7.8AI score0.02953EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2022/01/28 10:15 p.m.7 views

CVE-2021-46447

A cross-site scripting XSS vulnerability in H.H.G Multistore v5.1.0 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the State parameter under the Address Book module...

5.4CVSS6AI score0.0055EPSS
SaveExploits1References3
OSV
OSV
added 2022/01/28 10:15 p.m.5 views

CVE-2021-46447

A cross-site scripting XSS vulnerability in H.H.G Multistore v5.1.0 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the State parameter under the Address Book module...

5.4CVSS5.9AI score0.0055EPSS
SaveExploits1References2
NVD
NVD
added 2022/01/28 10:15 p.m.21 views

CVE-2021-46447

A cross-site scripting XSS vulnerability in H.H.G Multistore v5.1.0 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the State parameter under the Address Book module...

5.4CVSS0.0055EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2022/01/28 9:29 p.m.23 views

CVE-2021-46447

A cross-site scripting XSS vulnerability in H.H.G Multistore v5.1.0 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the State parameter under the Address Book module...

5.5AI score0.0055EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/01/28 12:0 a.m.5 views

H.H.G. Multistore 跨站脚本漏洞

H.H.G. Multistore is a software designed to manage multiple stores from H.H.G. Multistore, Germany. A security vulnerability exists in H.H.G. Multistore v5.1.0 and below that allows an attacker to execute arbitrary web script or HTML via a specially crafted payload inserted into the State paramet...

5.4CVSS6.1AI score0.0055EPSS
SaveExploits1References3
Fedora
Fedora
added 2022/01/12 1:23 a.m.11 views

[SECURITY] Fedora 35 Update: roundcubemail-1.5.2-1.fc35

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

0.2AI score
SaveExploits0
Rows per page
Query Builder