Lucene search
+L

119 matches found

CVE
CVE
•added 2024/10/25 6:18 a.m.•71 views

CVE-2024-47549

CVE-2024-47549 affects Sharp and Toshiba Tec MFPs. The issue stems from improper processing of query parameters in HTTP requests, which can contaminate unintended data into HTTP response headers. Accessing a crafted URL targeting an affected product may cause malicious script execution in the web...

7.4CVSS7.3AI score0.0034EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2024/10/25 6:18 a.m.•12 views

CVE-2024-47406

Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication bypass vulnerability...

9.1CVSS7.5AI score0.00616EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/10/25 6:18 a.m.•34 views

CVE-2024-47406

Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication bypass vulnerability...

9.1CVSS0.00616EPSS
SaveExploits0References3
CVE
CVE
•added 2024/10/25 6:18 a.m.•63 views

CVE-2024-47406

CVE-2024-47406 affects Sharp and Toshiba Tec MFPs. The issue is described as an improper processing of HTTP authentication requests, leading to an authentication bypass (CWE-288). Connected sources (JVNDB-2024-011256, NVD entries, and CVE listings) confirm affected products are Sharp and Toshiba ...

9.8CVSS9.5AI score0.00616EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2024/10/25 6:18 a.m.•95 views

CVE-2024-47005

CVE-2024-47005 affects Sharp and Toshiba Tec MFPs. The flaw is insufficient access restriction on certain configuration-related APIs, which are intended for administrative users only but may be invoked by non-administrative users. Impact described in connected sources includes the potential for n...

8.1CVSS8.2AI score0.00464EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2024/10/25 6:18 a.m.•19 views

CVE-2024-47005

Sharp and Toshiba Tec MFPs provide configuration related APIs. They are expected to be called by administrative users only, but insufficiently restricted. A non-administrative user may execute some configuration APIs...

8.1CVSS7.3AI score0.00464EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/10/25 6:18 a.m.•35 views

CVE-2024-45842

Sharp and Toshiba Tec MFPs improperly process URI data in HTTP PUT requests resulting in a path Traversal vulnerability. Unintended internal files may be retrieved when processing crafted HTTP requests...

5.3CVSS0.00551EPSS
SaveExploits0References3
CVE
CVE
•added 2024/10/25 6:18 a.m.•69 views

CVE-2024-45829

CVE-2024-45829 affects Sharp and Toshiba Tec MFPs. The issue is an Out-of-bounds Read in the web page used to download data, caused by improper processing of query parameters in HTTP requests. Crafting such requests can crash affected devices. Documents do not provide exploit details or fixed ver...

7.5CVSS5.2AI score0.00708EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2024/10/25 6:18 a.m.•35 views

CVE-2024-45829

Sharp and Toshiba Tec MFPs provide the web page to download data, where query parameters in HTTP requests are improperly processed and resulting in an Out-of-bounds Read vulnerability. Crafted HTTP requests may cause affected products crashed...

4.9CVSS0.00708EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/10/25 6:18 a.m.•21 views

CVE-2024-45829

Sharp and Toshiba Tec MFPs provide the web page to download data, where query parameters in HTTP requests are improperly processed and resulting in an Out-of-bounds Read vulnerability. Crafted HTTP requests may cause affected products crashed...

4.9CVSS7.1AI score0.00708EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/10/25 6:18 a.m.•17 views

CVE-2024-43424

Sharp and Toshiba Tec MFPs improperly process HTTP request headers, resulting in an Out-of-bounds Read vulnerability. Crafted HTTP requests may cause affected products crashed...

7.5CVSS7AI score0.00753EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/10/25 6:18 a.m.•32 views

CVE-2024-43424

Sharp and Toshiba Tec MFPs improperly process HTTP request headers, resulting in an Out-of-bounds Read vulnerability. Crafted HTTP requests may cause affected products crashed...

7.5CVSS0.00753EPSS
SaveExploits0References3
CVE
CVE
•added 2024/10/25 6:18 a.m.•67 views

CVE-2024-43424

CVE-2024-43424 affects Sharp and Toshiba Tec MFPs. The vulnerability arises from improper processing of HTTP request headers, leading to an out-of-bounds read. This can cause crafted HTTP requests to crash affected products. Documents indicate remediation via firmware updates from the vendors, an...

7.5CVSS7.6AI score0.00753EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2024/10/25 6:18 a.m.•19 views

CVE-2024-42420

Sharp and Toshiba Tec MFPs contain multiple Out-of-bounds Read vulnerabilities, due to improper processing of keyword search input and improper processing of SOAP messages. Crafted HTTP requests may cause affected products crashed...

7.5CVSS7.2AI score0.00753EPSS
SaveExploits0References3
CVE
CVE
•added 2024/10/25 6:18 a.m.•108 views

CVE-2024-42420

CVE-2024-42420 affects Sharp and Toshiba Tec MFPs. It involves multiple out-of-bounds read vulnerabilities (CWE-125) caused by improper processing of keyword search input and SOAP messages. Exploitation could be triggered by crafted HTTP requests, potentially crashing affected devices. Remediatio...

7.5CVSS7.6AI score0.00753EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2024/10/25 6:18 a.m.•43 views

CVE-2024-42420

Sharp and Toshiba Tec MFPs contain multiple Out-of-bounds Read vulnerabilities, due to improper processing of keyword search input and improper processing of SOAP messages. Crafted HTTP requests may cause affected products crashed...

7.5CVSS0.00753EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/10/25 12:00 a.m.•15 views

PT-2024-32651 · Sharp +1 · Sharp Mfps +1

Name of the Vulnerable Software and Affected Versions: Sharp and Toshiba Tec MFPs affected versions not specified Description: The issue is related to the improper processing of query parameters in HTTP requests, which may lead to the contamination of unintended data in HTTP response headers...

7.4CVSS6.8AI score0.0034EPSS
SaveExploits0References7
NVD
NVD
•added 2024/08/06 7:15 a.m.•20 views

CVE-2024-41995

Initialization of a resource with an insecure default vulnerability exists in JavaTM Platform Ver.12.89 and earlier. If this vulnerability is exploited, the product may be affected by some known TLS1.0 and TLS1.1 vulnerabilities. As for the specific products/models/versions of MFPs and printers...

7.5CVSS0.0051EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/08/06 6:51 a.m.•17 views

CVE-2024-41995

Initialization of a resource with an insecure default vulnerability exists in JavaTM Platform Ver.12.89 and earlier. If this vulnerability is exploited, the product may be affected by some known TLS1.0 and TLS1.1 vulnerabilities. As for the specific products/models/versions of MFPs and printers...

6.9AI score0.0051EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/08/06 6:51 a.m.•30 views

CVE-2024-41995

Initialization of a resource with an insecure default vulnerability exists in JavaTM Platform Ver.12.89 and earlier. If this vulnerability is exploited, the product may be affected by some known TLS1.0 and TLS1.1 vulnerabilities. As for the specific products/models/versions of MFPs and printers...

0.0051EPSS
SaveExploits0References3
Rows per page
Query Builder