EUVD-2022-33920

Malicious code in bioql PyPI...

Malicious code in mfp-cli (npm)

The package mfp-cli was found to contain malicious code...

Malicious code in ember-mfp-digest-display (npm)

The package ember-mfp-digest-display was found to contain malicious code...

MAL-2025-26274 Malicious code in mfp-cli (npm)

The package mfp-cli was found to contain malicious code...

MAL-2025-19562 Malicious code in ember-mfp-digest-display (npm)

The package ember-mfp-digest-display was found to contain malicious code...

CVE-2025-48499

Out-of-bounds write vulnerability exists in FUJIFILM Business Innovation MFPs. A specially crafted IPP Internet Printing Protocol or LPD Line Printer Daemon packet may cause a denial-of-service DoS condition on an affected MFP. Resetting the MFP is required to recover from the denial-of-service D...

CVE-2025-48499

CVE-2025-48499 is an out-of-bounds write vulnerability in FUJIFILM Business Innovation MFPs. A specially crafted IPP or LPD packet can cause a denial-of-service (DoS) on affected devices; recovery requires an MFP reset. Several connected sources confirm the issue and, in at least one entry, advis...

CVE-2025-48499

Out-of-bounds write vulnerability exists in FUJIFILM Business Innovation MFPs. A specially crafted IPP Internet Printing Protocol or LPD Line Printer Daemon packet may cause a denial-of-service DoS condition on an affected MFP. Resetting the MFP is required to recover from the denial-of-service D...

CVE-2025-48499

Out-of-bounds write vulnerability exists in FUJIFILM Business Innovation MFPs. A specially crafted IPP Internet Printing Protocol or LPD Line Printer Daemon packet may cause a denial-of-service DoS condition on an affected MFP. Resetting the MFP is required to recover from the denial-of-service D...

Multiple vulnerabilities in Web Connection of Konica Minolta MFPs

Overview Multiple MFPs multifunction printers provided by Konica Minolta, Inc. contain multiple vulnerabilities listed below. Cross-site scripting CWE-79 - CVE-2025-5884 Cross-site request forgery CWE-352 - CVE-2025-5885 Konica Minolta, Inc. reported these vulnerabilities to JPCERT/CC to notify...

CVE-2025-5884

A vulnerability, which was classified as problematic, was found in Konica Minolta bizhub up to 20250202. This affects an unknown part of the component Display MFP Information List. The manipulation of the argument Model Name leads to cross site scripting. It is possible to initiate the attack...

CVE-2025-5884

A vulnerability, which was classified as problematic, was found in Konica Minolta bizhub up to 20250202. This affects an unknown part of the component Display MFP Information List. The manipulation of the argument Model Name leads to cross site scripting. It is possible to initiate the attack...

CVE-2025-5884 Konica Minolta bizhub Display MFP Information List cross site scripting

A vulnerability, which was classified as problematic, was found in Konica Minolta bizhub up to 20250202. This affects an unknown part of the component Display MFP Information List. The manipulation of the argument Model Name leads to cross site scripting. It is possible to initiate the attack...

CVE-2025-5884 Konica Minolta bizhub Display MFP Information List cross site scripting

A vulnerability, which was classified as problematic, was found in Konica Minolta bizhub up to 20250202. This affects an unknown part of the component Display MFP Information List. The manipulation of the argument Model Name leads to cross site scripting. It is possible to initiate the attack...

PT-2025-24442

Name of the Vulnerable Software and Affected Versions Konica Minolta bizhub versions up to 20250202 Description A problematic issue was found in the Display MFP Information List component. The manipulation of the Model Name argument leads to cross-site scripting. It is possible to initiate the...

PT-2025-24443

Name of the Vulnerable Software and Affected Versions Konica Minolta Bizhub versions up to 20250202 Description A problem has been detected that affects unknown code, leading to cross-site request forgery. The attack can be initiated remotely. Recommendations For versions up to 20250202, consider...

CVE-2024-48870

Sharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cross-site scripting vulnerability. If crafted input is stored by an administrative user, malicious script may be executed on the web browsers of other victim users...

CVE-2022-29588

Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files...

CVE-2022-29587

Konica Minolta bizhub MFP devices before 2022-04-14 have an internal Chromium browser that executes with root aka superuser access privileges...

CVE-2019-6326

HP Color LaserJet Pro M280-M281 Multifunction Printer series before v. 20190419, HP LaserJet Pro MFP M28-M31 Printer series before v. 20190426 may have embedded web server attributes which may be potentially vulnerable to Buffer Overflow...