2289 matches found
HP LaserJet Printers Buffer Copy without Checking Size of Input (CVE-2023-1329)
A potential security vulnerability has been identified for certain HP multifunction printers MFPs. The vulnerability may lead to Buffer Overflow and/or Remote Code Execution when running HP Workpath solutions on potentially affected products. This plugin only works with Tenable.ot. Please visit...
HP LaserJet Printers Improper Neutralization of Input During Web Page Generation (CVE-2021-41183)
Certain HP Enterprise LaserJet and HP LaserJet Managed Printers are potentially vulnerable to denial of service due to WS-Print request and potential injections of Cross Site Scripting via jQuery-UI. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot...
HP LaserJet Printers Improper Neutralization of Input During Web Page Generation (CVE-2023-5113)
Certain HP Enterprise LaserJet and HP LaserJet Managed Printers are potentially vulnerable to denial of service due to WS-Print request and potential injections of Cross Site Scripting via jQuery-UI. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot...
Konica Bizhub Multifunction Printers Cross-site Scripting (CVE-2025-5884)
Cross-site scripting vulnerability CWE94, CWE-79 was found in the specific input fields of the Web Connection. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504858; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate", value:"2026/02/20";...
Konica Bizhub Multifunction Printers Insertion of Sensitive Information into Externally-Accessible File or Directory (CVE-2025-8452)
Through the use of eSCL or SNMP protocols, an attacker can retrieve the serial number of a printer. By applying the attack technique described in CVE-2024-51978, the default administrator password can be derived from the obtained serial number. Consequently, if the administrator password has not...
Konica Bizhub Multifunction Printers Insufficiently Protected Credentials (CVE-2025-6081)
An authenticated attacker can disclose the password of a configured external service. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504862; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate", value:"2026/02/20"; scriptcveid"CVE-2025-6081";...
Konica Bizhub Multifunction Printers Exposure of Sensitive Information to an Unauthorized Actor (CVE-2021-20869)
When using external authentication with an LDAP server, a remote attacker could steal specific authentication information in Administrator settings by sending specific SOAP messages. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504863; scriptversion"1.2";...
Konica Bizhub Multifunction Printers Improper Handling of Exceptional Conditions (CVE-2021-20870)
When scan transmission is interrupted by a network error, a physically accessible attacker could steal the scanned image data by removing the HDD before the scan job times out. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504857; scriptversion"1.2";...
Konica Bizhub Multifunction Printers Uncaught Exception (CVE-2025-54777)
Importing a malformed file in Registration of Certification Information for S/MIME for Email Destination causes the Web Connection to stop. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504856; scriptversion"1.2";...
Honeywell Multiple Industrial Printers Improper Privilege Management (CVE-2017-5671)
Honeywell Intermec PM23, PM42, PM43, PC23, PC43, PD43, and PC42 industrial printers before 10.11.013310 and 10.12.x before 10.12.013309 have /usr/bin/lua installed setuid to the itadmin account, which allows local users to conduct a BusyBox jailbreak attack and obtain root privileges by overwriti...
HP LaserJet Pro Printers Information Disclosure (HPSBPI04074)
Certain HP LaserJet Pro print products is potentially vulnerable to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...
EUVD-2025-175347
Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server...
CVE-2025-12785
Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server...
CVE-2025-12784
Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server...
CVE-2025-12784
Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server...
CVE-2025-12785
Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server...
PT-2025-46872
Name of the Vulnerable Software and Affected Versions HP LaserJet Pro printers affected versions not specified Description Certain HP LaserJet Pro printers may be susceptible to information disclosure, potentially leading to credential exposure. This can occur by altering the scan/send destinatio...
Certain HP LaserJet and OfficeJet Pro Printers – Potential Information Disclosure
Certain HP LaserJet and OfficeJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server. Update your printer firmware...
PT-2025-46873
Name of the Vulnerable Software and Affected Versions HP LaserJet Pro printers affected versions not specified Description Certain HP LaserJet Pro printers may be susceptible to information disclosure, potentially exposing credentials. This can occur by altering the scan/send destination address...
Lexmark Printers Improper Input Validation (CVE-2023-26070)
An input validation vulnerability has been identified in the SNMP feature in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503895; scriptversion"1.3";...