Lucene search
+L

6752 matches found

OSV
OSV
added 2019/05/08 3:30 p.m.5 views

CVE-2019-9505

The PrinterLogic Print Management software, versions up to and including 18.3.1.96, does not sanitize special characters allowing for remote unauthorized changes to configuration files. An unauthenticated attacker may be able to remotely execute arbitrary code with SYSTEM privileges...

9.8CVSS7.5AI score0.03453EPSS
SaveExploits0References2
NVD
NVD
added 2019/05/08 3:30 p.m.15 views

CVE-2019-9505

The PrinterLogic Print Management software, versions up to and including 18.3.1.96, does not sanitize special characters allowing for remote unauthorized changes to configuration files. An unauthenticated attacker may be able to remotely execute arbitrary code with SYSTEM privileges...

10CVSS9.8AI score0.03453EPSS
SaveExploits0References2
OSV
OSV
added 2019/05/08 3:30 p.m.7 views

CVE-2018-5409

The PrinterLogic Print Management software, versions up to and including 18.3.1.96, updates and executes the code without sufficiently verifying the origin and integrity of the code. An attacker can execute malicious code by compromising the host server, performing DNS spoofing, or modifying the...

9.8CVSS5.8AI score0.01077EPSS
SaveExploits0References2
NVD
NVD
added 2019/05/08 3:30 p.m.14 views

CVE-2018-5409

The PrinterLogic Print Management software, versions up to and including 18.3.1.96, updates and executes the code without sufficiently verifying the origin and integrity of the code. An attacker can execute malicious code by compromising the host server, performing DNS spoofing, or modifying the...

10CVSS9.6AI score0.01077EPSS
SaveExploits0References2
Prion
Prion
added 2019/05/08 3:30 p.m.15 views

Design/Logic Flaw

The PrinterLogic Print Management software, versions up to and including 18.3.1.96, does not sanitize special characters allowing for remote unauthorized changes to configuration files. An unauthenticated attacker may be able to remotely execute arbitrary code with SYSTEM privileges...

10CVSS9.8AI score0.03453EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2019/05/08 2:48 p.m.19 views

CVE-2019-9505 PrinterLogic Print Management Software does not sanitize special characters

The PrinterLogic Print Management software, versions up to and including 18.3.1.96, does not sanitize special characters allowing for remote unauthorized changes to configuration files. An unauthenticated attacker may be able to remotely execute arbitrary code with SYSTEM privileges...

9.8AI score0.03453EPSS
SaveExploits0References2
CVE
CVE
added 2019/05/08 2:48 p.m.50 views

CVE-2018-5409

PrinterLogic Print Management Software (versions up to and including 18.3.1.96) is affected by CVE-2018-5409, in which the update mechanism executes code without sufficiently verifying the origin or integrity of the code. This creates a remote code execution risk if an attacker can compromise the...

10CVSS9.6AI score0.01077EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2019/05/08 2:48 p.m.62 views

CVE-2019-9505

PrinterLogic Print Management Software (up to version 18.3.1.96) is affected by CVE-2019-9505 due to inadequate sanitization of special characters, enabling remote, unauthenticated execution of arbitrary code with SYSTEM privileges and remote changes to configuration files. Root cause: input hand...

10CVSS9.8AI score0.03453EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2019/05/08 2:48 p.m.17 views

CVE-2018-5408 PrinterLogic Print Management Software fails to validate the management portal SSL certificates

The PrinterLogic Print Management software, versions up to and including 18.3.1.96, does not validate, or incorrectly validates, the PrinterLogic management portal's SSL certificate. When a certificate is invalid or malicious, it might allow an attacker to spoof a trusted entity by using a...

7.8AI score0.00749EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2019/05/08 2:48 p.m.19 views

CVE-2018-5409 PrinterLogic Print Management Software updates and executes the code without origin and code verification

The PrinterLogic Print Management software, versions up to and including 18.3.1.96, updates and executes the code without sufficiently verifying the origin and integrity of the code. An attacker can execute malicious code by compromising the host server, performing DNS spoofing, or modifying the...

9.6AI score0.01077EPSS
SaveExploits0References2
CVE
CVE
added 2019/05/08 2:48 p.m.54 views

CVE-2018-5408

CVE-2018-5408 affects PrinterLogic Print Management Software (up to 18.3.1.96). The issue is improper validation of the management portal’s SSL certificate, enabling potential MITM spoofing of a trusted host and data origin deception. Impacts include partial confidentiality/integrity and a networ...

7.4CVSS7.4AI score0.00749EPSS
SaveExploits0References2Affected Software1
CISA
CISA
added 2019/05/05 12:0 a.m.14 views

PrinterLogic Print Management Software Vulnerabilities

The CERT Coordination Center CERT/CC has released information on vulnerabilities affecting PrinterLogic Print Management Software. A remote attacker could exploit these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages user...

7AI score
SaveExploits0References1
NVD
NVD
added 2019/04/30 6:29 p.m.18 views

CVE-2018-20510

The printbindertransactionilocked function in drivers/android/binder.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading "from code flags" lines in a debugfs file...

5.5CVSS4.9AI score0.0041EPSS
SaveExploits0References2
Prion
Prion
added 2019/04/30 6:29 p.m.20 views

Design/Logic Flaw

The printbinderrefolocked function in drivers/android/binder.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading " ref desc node" lines in a debugfs file...

2.1CVSS4.9AI score0.00369EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/04/30 6:29 p.m.7 views

UBUNTU-CVE-2018-20509

The printbinderrefolocked function in drivers/android/binder.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading " ref desc node" lines in a debugfs file...

5.5CVSS6AI score0.00369EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2019/04/29 12:0 a.m.44 views

WordPress Print My Blog Plugin < 1.6.6 SSRF Vulnerability

The WordPress plugin Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...

9.8CVSS9.7AI score0.0282EPSS
SaveExploits1References3
Prion
Prion
added 2019/04/27 2:29 p.m.19 views

Server side request forgery (ssrf)

Server Side Request Forgery SSRF exists in the Print My Blog plugin before 1.6.7 for WordPress via the site parameter...

7.5CVSS9.4AI score0.0282EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2019/04/27 2:29 p.m.19 views

CVE-2019-11565

Server Side Request Forgery SSRF exists in the Print My Blog plugin before 1.6.7 for WordPress via the site parameter...

9.8CVSS9.6AI score0.0282EPSS
SaveExploits1References5
OSV
OSV
added 2019/04/27 2:29 p.m.16 views

CVE-2019-11565

Server Side Request Forgery SSRF exists in the Print My Blog plugin before 1.6.7 for WordPress via the site parameter...

9.8CVSS7AI score
SaveExploits0References5
CVE
CVE
added 2019/04/27 1:15 p.m.51 views

CVE-2019-11565

CVE-2019-11565 : The WordPress plugin Print My Blog (before 1.6.7) is vulnerable to a Server Side Request Forgery (SSRF) via the site parameter. This affects the plugin's ability to perform requests to arbitrary internal/external resources, enabling an attacker to induce requests from the WordPre...

9.8CVSS9.5AI score0.0282EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder