163 matches found
CVE-2008-2743
Cross-site scripting XSS vulnerability in the embedded web server in Xerox 4110, 4590, and 4595 Copier/Printers allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors...
CVE-2008-2743
CVE-2008-2743 is a cross-site scripting (XSS) vulnerability in the embedded web server of Xerox 4110, 4590, and 4595 Copier/Printers. It allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors. CVSSv2 base score: 4.3 (MEDIUM) with network attack vector, no confid...
HP多个产品PML Driver HPZ12服务本地权限提升漏洞
PML Driver HPZ12服务是很多HP产品(尤其是多合一产品、打印机、扫描仪等)所安装的驱动服务。 PML Driver HPZ12服务在执行权限管理时存在漏洞,本地攻击者可能利用此权限提升自己的权限。 PML Driver HPZ12服务没有设置安全的SERVICECHANGECONFIG权限。默认下安装该服务时有以下属性: Name: PML Driver HPZ12 Filename: HPZipm12.exe Description: Used by HP Printer/Scanner/Copier printers to prevent Windows from...