Lucene search
+L

517 matches found

osv_cve
osv_cve
•added 2024/12/10 12:15 a.m.•22 views

CVE-2024-9672

A reflected cross-site scripting XSS vulnerability exists in PaperCut NG/MF. This issue can be used to execute specially created JavaScript payloads in the browser. A user must click on a malicious link for this issue to occur...

5.4CVSS5.8AI score0.00231EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/10 12:00 a.m.•9 views

CVE-2024-9672: Improper Neutralization of Special Elements used in an Expression Language Statement

A reflected cross-site scripting XSS vulnerability exists in PaperCut NG/MF. This issue can be used to execute specially created JavaScript payloads in the browser. A user must click on a malicious link for this issue to occur...

6.3CVSS5.9AI score0.00231EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/10 12:00 a.m.•19 views

PaperCut NG/MF security vulnerabilities

PaperCut NG/MF is a print management system from PaperCut, Inc. A security vulnerability exists in PaperCut NG/MF that stems from the inclusion of a reflected cross-site scripting vulnerability...

6.3CVSS6.1AI score0.00231EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/09 11:49 p.m.•25 views

CVE-2024-9672 Reflected XSS in PaperCut MF

A reflected cross-site scripting XSS vulnerability exists in PaperCut NG/MF. This issue can be used to execute specially created JavaScript payloads in the browser. A user must click on a malicious link for this issue to occur...

6.3CVSS6.1AI score0.00231EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/09 11:49 p.m.•824 views

CVE-2024-9672

CVE-2024-9672 describes a reflected XSS in PaperCut NG/MF. The vulnerability arises in the product where a user must click a malicious link, enabling JavaScript payload execution in the victim’s browser. Concrete details available in the connected documents show the affected software (PaperCut NG...

6.3CVSS5.7AI score0.00231EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
•added 2024/12/09 11:49 p.m.•53 views

CVE-2024-9672 Reflected XSS in PaperCut MF

A reflected cross-site scripting XSS vulnerability exists in PaperCut NG/MF. This issue can be used to execute specially created JavaScript payloads in the browser. A user must click on a malicious link for this issue to occur...

6.3CVSS0.00231EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/22 8:15 p.m.•32 views

CVE-2023-39470

PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PaperCut NG. Authentication is required to exploit this vulnerability. The specific flaw exists with...

7.2CVSS0.01756EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2024/11/22 8:15 p.m.•15 views

CVE-2023-39470

PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PaperCut NG. Authentication is required to exploit this vulnerability. The specific flaw exists with...

7.2CVSS7.6AI score0.01756EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2024/11/22 8:15 p.m.•21 views

CVE-2023-39470

PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PaperCut NG. Authentication is required to exploit this vulnerability. The specific flaw exists with...

7.2CVSS6.2AI score0.01756EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/11/22 8:04 p.m.•57 views

CVE-2023-39470 PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability

PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PaperCut NG. Authentication is required to exploit this vulnerability. The specific flaw exists with...

7.2CVSS0.01756EPSS
SaveExploits0References2
CVE
CVE
•added 2024/11/22 8:04 p.m.•88 views

CVE-2023-39470

PaperCut NG is affected by a Remote Code Execution (RCE) vulnerability (CVE-2023-39470) caused by the exposure of a dangerous function within the management of the print.script.sandboxed setting. An authenticated remote attacker can leverage this flaw to execute arbitrary code in the context of S...

7.2CVSS7.5AI score0.01756EPSS
SaveIn wildExploits0References2Affected Software1
EUVD
EUVD
•added 2024/11/22 8:04 p.m.•21 views

EUVD-2023-43193

PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PaperCut NG. Authentication is required to exploit this vulnerability. The specific flaw exists with...

7.2CVSS7.4AI score0.01756EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/11/22 8:04 p.m.•36 views

CVE-2023-39470 PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability

PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PaperCut NG. Authentication is required to exploit this vulnerability. The specific flaw exists with...

7.2CVSS7.9AI score0.01756EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/22 12:00 a.m.•9 views

CVE-2023-39470: Exposed Dangerous Method or Function

PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PaperCut NG. Authentication is required to exploit this vulnerability. The specific flaw exists with...

7.2CVSS7.8AI score0.01756EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/22 12:00 a.m.•28 views

PaperCut NG security vulnerabilities

PaperCut NG is a printer control software from PaperCut, Inc. A security vulnerability exists in PaperCut NG that stems from the exposure of a dangerous function with a remote code execution vulnerability that could allow a remote attacker to execute arbitrary code on an affected installation...

7.2CVSS7.6AI score0.01756EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/10/16 12:00 a.m.•19 views

PaperCut MF < 23.0.9 Multiple Vulnerabilities

The version of PaperCut MF installed on the remote Windows host is affected by multiple vulnerabilities, as follows: - An arbitrary file deletion vulnerability exists in PaperCut NG/MF, specifically affecting Windows servers with Web Print enabled. To exploit this vulnerability, an attacker must...

7.8CVSS6AI score0.00406EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2024/10/16 12:00 a.m.•45 views

PaperCut NG < 23.0.9 Multiple Vulnerabilities

The version of PaperCut NG installed on the remote Windows host is affected by multiple vulnerabilities, as follows: - An arbitrary file deletion vulnerability exists in PaperCut NG/MF, specifically affecting Windows servers with Web Print enabled. To exploit this vulnerability, an attacker must...

7.8CVSS7AI score0.00406EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2024/10/11 5:04 a.m.•4 views

Malware in papercut-ui

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/10/10 12:00 a.m.•26 views

PaperCut MF Printing DoS

The vulnerability of the web printing function in the control tools for printing in PaperCut MF and PaperCut NG is related to the failure to implement measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow an attacker to cause servic...

5.5CVSS6.3AI score0.00241EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/10/03 12:00 a.m.•23 views

PaperCut MF Printing Control Buffer Overflow DoS

The vulnerability of the printing control software in PaperCut MF and PaperCut NG is related to an incorrect definition of the link before accessing a file. Exploiting this vulnerability could allow a perpetrator to delete arbitrary data...

7.8CVSS7.3AI score0.00385EPSS
SaveExploits0References5Affected Software2
Rows per page
Query Builder