CVE-2023-2508 CSRF in PaperCutNG Mobility Print leads to sophisticated phishing

The PaperCutNG Mobility Print version 1.0.3512 application allows an unauthenticated attacker to perform a CSRF attack on an instance administrator to configure the clients host in the "configure printer discovery" section. This is possible because the application has no protections against CSRF...

PaperCutNG Mobility Print Cross-Site Request Forgery Vulnerability

PaperCutNG Mobility Print is a product of PaperCutNG, Inc. designed to provide mobile printing solutions for schools, businesses and other organizations. A security vulnerability exists in PaperCutNG Mobility Print version 1.0.3512 that stems from the application not being protected against CSRF...

PT-2023-19919 · Papercut · Papercutng Mobility Print

Name of the Vulnerable Software and Affected Versions: PaperCutNG Mobility Print version 1.0.3512 Description: The PaperCutNG Mobility Print application allows an unauthenticated attacker to perform a CSRF attack on an instance administrator to configure the client's host in the "configure printe...

mariadb: NULL pointer dereference in spider_db_mbase::print_warnings()

MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spiderdbmbase::printwarnings to dereference a null pointer...

September 12, 2023—KB5030216 (OS Build 20348.1970)

None None...

The vulnerability of the Exiv2::Jp2Image::printStructure function in the metadata management library for media files allows a attacker to perform a denial-of-service attack.

The vulnerability of the Exiv2::Jp2Image::printStructure function in the Exiv2 data management library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to trigger a denial-of-service attack...

PT-2023-15808 · Unknown · Control De Ciber

Name of the Vulnerable Software and Affected Versions: Control de Ciber version 1.650 Description: The issue is a Buffer Overflow vulnerability in the printing function. It occurs when an administrator tries to accept or delete a print query created by a modified request sent by an attacker. This...

Yonyou UFIDA-NC Path Traversal Vulnerability

Yonyou UFIDA-NC is a large-scale ERP enterprise management system and e-commerce platform from China's UFIDA Network Technology Yonyou Company. A path traversal vulnerability exists in Yonyou UFIDA-NC 20230807 and earlier versions, which stems from the parameter filePath in the file...

themorningprint.com Cross Site Scripting vulnerability OBB-3642339

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Citrix PDF Printer does not open full screen with Edge as default PDF viewer

When users are using the HTML5 client and Citrix PDF Printer while using Edge as the default PDF viewer the print job is shown but there is a scroll bar on the right. If the user changes to Adobe as the default PDF viewer the print job displays correctly...

CVE-2023-34184

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Bhavik Patel Woocommerce Order address Print plugin = 3.2 versions...

CVE-2023-34184

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Bhavik Patel Woocommerce Order address Print plugin = 3.2 versions...

CVE-2023-34184 WordPress Woocommerce Order address Print Plugin <= 3.2 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Bhavik Patel Woocommerce Order address Print plugin = 3.2 versions...

CVE-2023-34184

CVE-2023-34184 – Unauthenticated reflected Cross-Site Scripting in Bhavik Patel Woocommerce Order address Print plugin ≤ 3.2. Affected product: WordPress plugin; vulnerability type: reflected XSS. Impact and CVSS: sources report base scores around 6.1 (NVD) and 7.1 (PatchStack CNA), both indicati...

CVE-2023-34184 WordPress Woocommerce Order address Print Plugin <= 3.2 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Bhavik Patel Woocommerce Order address Print plugin = 3.2 versions...

WordPress plugin woocommerce-order-address-print 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

DEBIAN-CVE-2020-35342

GNU Binutils before 2.34 has an uninitialized-heap vulnerability in function tic4xprintcond file opcodes/tic4x-dis.c which could allow attackers to make an information leak...

UBUNTU-CVE-2020-35342

GNU Binutils before 2.34 has an uninitialized-heap vulnerability in function tic4xprintcond file opcodes/tic4x-dis.c which could allow attackers to make an information leak...

CVE-2020-21710

A divide by zero issue discovered in epsprintpage in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a denial of service via opening of crafted PDF file...

print-store.it Cross Site Scripting vulnerability OBB-3607114

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...