CVE-2026-60011

Sharp and Toshiba Tec MFPs multifunction printers fail to properly authorize requests to directly access certain image data stored to the affected product...

PT-2026-67260

Sharp and Toshiba Tec MFPs multifunction printers for a certain market have been shipped with the user authentication feature disabled in the initial configuration. When used with the initial configuration, the address book editing and a range of features related to Document Filing can be accesse...

PT-2026-67259

Sharp and Toshiba Tec MFPs multifunction printers caches data internally when printing, and leave them uncleared. They may be accessed later by other users...

Lexmark Printers Cross-site Scripting (CVE-2013-6033)

Multiple cross-site scripting XSS vulnerabilities on Lexmark W840 through LS.HA.P252, T64x before LS.ST.P344, C935dn through LC.JO.P091, C920 through LS.TA.P152, C53x through LS.SW.P069, C52x through LS.FA.P150, E450 through LM.SZ.P124, E350 through LE.PH.P129, and E250 through LE.PM.P126 printer...

HP LaserJet Printers Out-of-bounds Write (CVE-2023-27973)

Certain HP LaserJet Pro print products are potentially vulnerable to Heap Overflow and/or Remote Code Execution. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

PT-2026-67246

Sharp and Toshiba Tec MFPs multifunction printers fail to properly authorize requests to directly access certain image data stored to the affected product...

Lexmark Printers Improper Input Validation (CVE-2013-6032)

cgi-bin/postpf/cgi-bin/dynamic/config/config.html on Lexmark X94x before LC.BR.P142, X85x through LC4.BE.P487, X644 and X646 before LC2.MC.P374, X642 through LC2.MB.P318, W840 through LS.HA.P252, T64x before LS.ST.P344, X64xef through LC2.TI.P325, C935dn through LC.JO.P091, C920 through LS.TA.P15...

HP LaserJet Printers Denial of Service (CVE-2013-6193)

Unspecified vulnerability on HP LaserJet M1522n and M2727; LaserJet Pro 100, 300, 400, CM1415fnw, CP1, M121, M1536dnf, and P1; Color LaserJet CM and CP; and TopShot LaserJet Pro M275 printers allows remote attackers to cause a denial of service via unknown vectors. This plugin only works with...

HP LaserJet Printers Classic Buffer Overflow (CVE-2019-6327)

HP Color LaserJet Pro M280-M281 Multifunction Printer series before v. 20190419, HP LaserJet Pro MFP M28-M31 Printer series before v. 20190426 may have an IPP Parser potentially vulnerable to Buffer Overflow. This plugin only works with Tenable.ot. Please visit...

HP LaserJet Printers Cryptographic Issues (CVE-2013-4828)

HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM4540, M575, and M775; and ScanJet Enterprise 8500fn1 FutureSmart devices do not properly encrypt PDF documents, which allows remote attackers to obtain sensitive information via...

HP LaserJet Printers Improper Verification of Cryptographic Signature (CVE-2019-6318)

HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP Officejet Enterprise printers have an insufficient solution bundle signature validation that potentially allows execution of arbitrary code. This plugin only works with Tenable.ot. Please visit...

HP LaserJet Printers Classic Buffer Overflow (CVE-2023-35178)

Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow when performing a GET request to scan jobs. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

Lexmark Printers Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2018-15520)

Various Lexmark devices have a Buffer Overflow vulnerability. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505905; scriptversion"1.2";...

ROS-20260729-73-0035

The vulnerability of the cupsdDeleteTemporaryPrinters function in a CUPS printing server relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

Ricoh Web Image Monitor - Reflected XSS Detection

A reflected cross-site scripting vulnerability exists in the laser printers and MFPs multifunction printers which implement Ricoh Web Image Monitor. If exploited, an arbitrary script may be executed on the web browser of the user who accessed Web Image Monitor. !/usr/bin/env python3 -- coding:...

Sharp Multifunction Printers - Directory Listing Detection

It was observed that Sharp printers are vulnerable to an arbitrary directory listing without authentication. Any attacker can list any directory located in the printer and recover any file. !/usr/bin/env python3 -- coding: utf-8 -- """It was observed that Sharp printers are vulnerable to an...

Sharp Multifunction Printers - Cookie Exposure Detection

It was observed that Sharp printers are vulnerable to a listing of session cookies without authentication. Any attacker can list valid cookies by visiting a backdoor webpage and use them to authenticate to the printers. !/usr/bin/env python3 -- coding: utf-8 -- """It was observed that Sharp...

Sharp Multifunction Printers - Local File Inclusion Detection

It was observed that Sharp printers are vulnerable to a local file inclusion without authentication. Any attacker can read any file located in the printer. !/usr/bin/env python3 -- coding: utf-8 -- """It was observed that Sharp printers are vulnerable to a local file inclusion without...

Xerox Printers Improper Authentication (CVE-2023-46327)

Multiple MFPs multifunction printers provided by FUJIFILM Business Innovation Corp. and Xerox Corporation provide a facility to export the contents of their Address Book with encrypted form, but the encryption strength is insufficient. With the knowledge of the encryption process and the encrypti...

Xerox Printers Improper Neutralization of Special Elements used in an OS Command (CVE-2024-6333)

Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505562;...