236 matches found
HPSBPI02656 SSRT090262 rev.2 - Certain HP Photosmart Printers, Remote Unauthorized Access, Cross Site Scripting (XSS)
Potential Security Impact Remote unauthorized access to data, cross site scripting XSS VULNERABILITY SUMMARY Potential security vulnerabilities have been identified with certain HP Photosmart printers. These vulnerabilities could be exploited remotely for cross site scripting XSS or to gain...
Ubicom Embedded Web Server Detection
Binary data 5201.prm...
CVE-2009-0940
Multiple cross-site request forgery CSRF vulnerabilities in the HP Embedded Web Server EWS on HP LaserJet Printers, Edgeline Printers, and Digital Senders allow remote attackers to hijack the intranet connectivity of arbitrary users for requests that 1 print documents via unknown vectors, 2 modif...
CVE-2009-0941
The CVE-2009-0941 entry concerns the HP Embedded Web Server (EWS) used by HP LaserJet, Edgeline Printers, and Digital Senders. The vulnerability is due to the device exposing an interface with no management password by default, which can enable remote access. According to the NVD entry, this is a...
CVE-2009-0940
The CVE-2009-0940 entry describes multiple CSRF vulnerabilities in the HP Embedded Web Server (EWS) used by HP LaserJet printers, Edgeline printers, and Digital Senders. The vulnerabilities allow an attacker to hijack a user’s intranet connectivity to perform requests such as (1) printing documen...
HP LaserJet Cross Site Request Forgery
Louhi Networks Oy -= Security Advisory =- Advisory: HP LaserJet multiple models web management CSRF vulnerability & insecure default configuration Release Date: 2009-03-17 Last Modified: 2009-03-17 Authors: Henri Lindberg, CISA henri d0t lindberg at louhi d0t fi Application: HP Embedded Web Serve...
Alcatel OmniSwitch switches buffer overflow
Buffer overflow on oversized Cookie: header in embedded web server...
CVE-2008-2825
Cross-site scripting XSS vulnerability in the embedded Web Server in Xerox WorkCentre M123, M128, and 133 and WorkCentre Pro 123, 128, and 133 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Akamai Red Swoosh crossite scripting
Crossite request forgery to embedded web server is possible...
APC PowerChute Network Shutdown directory traversal
Directory traversal in Acme.Serve embedded web server with 5c and 2e...
Embedded Web Server Detection (HTTP)
This plugin determines if the remote web server is an embedded service without any user-supplied CGIs. This VT has been deprecated because the used approach isn SPDX-FileCopyrightText: 2006 TNS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Linksys WAP11 1.31.4 D-Link DI-804 4.68Dl-704 2.56 b5 - Embedded HTTP Server Denial of Service
Linksys WAP11 1.31.4 D-Link DI-804 4.68Dl-704 2.56 b5 - Embedded HTTP Server Denial of Service source: https://www.securityfocus.com/bid/6090/info A denial of service vulnerability has been reported for several networking devices. The condition will be triggered when the embedded web server, used...
CVE-2001-1341
The Beck GmbH IPC@Chip embedded web server installs the chipcfg.cgi program by default, which allows remote attackers to obtain sensitive network information via a request to the program...
CVE-2001-1341
CVE-2001-1341 concerns Beck GmbH IPC@Chip embedded web server, where the default installation includes the chipcfg.cgi CGI. A crafted request to chipcfg.cgi can cause the server to disclose sensitive network configuration data, enabling remote attackers to obtain confidential information. The iss...