CVE-2022-42909

WEPA Print Away does not verify that a user has authorization to access documents before generating print orders and associated release codes. This could allow an attacker to generate print orders and release codes for documents they don´t own and print hem without authorization. In order to...

PT-2023-14161 · Wepa · Wepa Print Away

Name of the Vulnerable Software and Affected Versions: WEPA Print Away affected versions not specified Description: The issue arises from the lack of verification of user authorization to access documents before generating print orders and associated release codes. This could allow an attacker to...

CVE-2022-42908

WEPA Print Away is vulnerable to a stored XSS. It does not properly sanitize uploaded filenames, allowing an attacker to deceive a user into uploading a document with a malicious filename, which will be included in subsequent HTTP responses, allowing a stored XSS to occur. This attack is persiste...

CVE-2022-42909

WEPA Print Away does not verify that a user has authorization to access documents before generating print orders and associated release codes. This could allow an attacker to generate print orders and release codes for documents they don´t own and print hem without authorization. In order to...

CVE-2022-42909

WEPA Print Away is affected by an authorization flaw: a user with an account can generate print orders and release codes for documents they do not own without verifying access. The issue stems from not checking that the user is authorized to access documents before processing print jobs. Public d...

WEPA Print Away 安全漏洞

WEPA Print Away is a cloud-based print management solution organized by the University of Wisconsin-Milwaukee. A security vulnerability exists in WEPA Print Away that stems from not verifying that a user is authorized to access a document before generating a print order and associated release cod...

WEPA Print Away 跨站脚本漏洞

WEPA Print Away is a cloud-based print management solution organized by the University of Wisconsin-Milwaukee. WEPA Print Away has a security vulnerability that stems from not properly cleaning up uploaded file names. An attacker exploited the vulnerability to perform a cross-site scripting attac...

CVE-2022-42908

WEPA Print Away is vulnerable to a stored XSS due to improper sanitization of uploaded filenames. An attacker can craft a malicious filename during upload, which is echoed in subsequent HTTP responses, enabling persistent stored XSS across victim sessions. The provided sources do not specify affe...

CVE-2022-4753

The Print-O-Matic WordPress plugin before 2.1.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privileg...

CVE-2022-4753 Print-O-Matic < 2.1.8 - Contributor+ Stored XSS via Shortcode

The Print-O-Matic WordPress plugin before 2.1.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privileg...

CVE-2022-4753

CVE-2022-4753 affects the Print-O-Matic WordPress plugin prior to 2.1.8. The vulnerability arises because certain shortcode attributes are not validated/escaped before being output, enabling stored XSS where an attacker with as little as contributor privileges can inject payloads that impact high...

CVE-2022-4753 Print-O-Matic < 2.1.8 - Contributor+ Stored XSS via Shortcode

The Print-O-Matic WordPress plugin before 2.1.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privileg...

WordPress plugin The Print-O-Matic 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

The vulnerability of the print spooler daemon on Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows Print Spooler in operating systems related to the print queue is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

PT-2023-15389 · WordPress · Print-O-Matic

Name of the Vulnerable Software and Affected Versions: Print-O-Matic WordPress plugin versions prior to 2.1.8 Description: The issue allows users with a role as low as contributor to perform Stored Cross-Site Scripting attacks, which could be used against high privilege users such as admins. This...

AZL-13115 CVE-2022-47015 affecting package mariadb for versions less than 10.6.9-3

MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spiderdbmbase::printwarnings to dereference a null pointer...

DEBIAN-CVE-2022-47015

MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spiderdbmbase::printwarnings to dereference a null pointer...

UBUNTU-CVE-2022-47015

MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spiderdbmbase::printwarnings to dereference a null pointer...

The vulnerability of the print spooler daemon in Windows operating systems allows attackers to escalate their privileges due to insufficient access control mechanisms.

The vulnerability of the Windows Print Spooler in operating systems related to the print queue is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Microsoft Print 3D PLY File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Print 3D. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...