Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

38 matches found

CVE
CVE•added 2018/09/26 10:00 p.m.•68 views

CVE-2018-17309

The CVE-2018-17309 entry concerns the Ricoh MP C406Z multifunction printer. Affected component: the address management web interface, specifically the /web/entry/en/address/adrsSetUserWizard.cgi endpoint. Vulnerability type: HTML Injection and Stored XSS in the area where addresses are added via ...

6.1CVSS6.3AI score0.01EPSS
SaveExploits3References1Affected Software1
CVE
CVE•added 2018/09/26 10:00 p.m.•89 views

CVE-2018-17313

RICOH MP C307 is affected by CVE-2018-17313: HTML Injection and Stored XSS in the address-adding flow via /web/entry/en/address/adrsSetUserWizard.cgi, triggered by the entryNameIn parameter. Impact is stored XSS in the web context; CVSS2 base 4.3 (NETWORK, MEDIUM) and CVSS3 base 6.1 (NETWORK, LOW...

6.1CVSS6.3AI score0.02324EPSS
SaveExploits6References2Affected Software1
Cvelist
Cvelist•added 2018/09/26 10:00 p.m.•34 views

CVE-2018-17312

On the RICOH Aficio MP 301 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi...

6.5AI score0.01EPSS
SaveExploits2References1
Cvelist
Cvelist•added 2018/09/26 10:00 p.m.•38 views

CVE-2018-17316

On the RICOH MP C6003 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi...

6.5AI score0.01EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2018/09/26 12:00 a.m.•6 views

CVE-2018-17311: Improper Neutralization of Input During Web Page Generation

On the RICOH MP C6503 Plus printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi...

6.1CVSS6.3AI score0.01EPSS
SaveExploits3References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2018/09/26 12:00 a.m.•5 views

CVE-2018-17316: Improper Neutralization of Input During Web Page Generation

On the RICOH MP C6003 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi...

6.1CVSS6.3AI score0.01EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2018/09/26 12:00 a.m.•4 views

CVE-2018-17313: Improper Neutralization of Input During Web Page Generation

On the RICOH MP C307 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi...

6.1CVSS6.3AI score0.02324EPSS
SaveExploits6References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2018/09/26 12:00 a.m.•4 views

CVE-2018-17312: Improper Neutralization of Input During Web Page Generation

On the RICOH Aficio MP 301 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi...

6.1CVSS6.3AI score0.01EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2018/09/26 12:00 a.m.•5 views

CVE-2018-17314: Improper Neutralization of Input During Web Page Generation

On the RICOH Aficio MP 305+ printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi...

6.1CVSS6.3AI score0.01EPSS
SaveExploits3References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2018/09/26 12:00 a.m.•5 views

CVE-2018-17315: Improper Neutralization of Input During Web Page Generation

On the RICOH MP C2003 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi...

6.1CVSS6.3AI score0.01EPSS
SaveExploits3References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2018/09/26 12:00 a.m.•4 views

CVE-2018-17309: Improper Neutralization of Input During Web Page Generation

On the RICOH MP C406Z printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi...

6.1CVSS6.3AI score0.01EPSS
SaveExploits3References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2018/09/26 12:00 a.m.•4 views

CVE-2018-17310: Improper Neutralization of Input During Web Page Generation

On the RICOH MP C1803 JPN printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi...

6.1CVSS6.3AI score0.02324EPSS
SaveExploits6References2
Prion
Prion•added 2018/09/21 5:29 p.m.•27 views

Cross site scripting

On the RICOH SP 4510SF printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi...

4.3CVSS6.4AI score0.01EPSS
SaveExploits2References1
Cvelist
Cvelist•added 2018/09/21 5:00 p.m.•37 views

CVE-2018-17001

On the RICOH SP 4510SF printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi...

6.5AI score0.01EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2018/09/21 12:00 a.m.•4 views

CVE-2018-17001: Improper Neutralization of Input During Web Page Generation

On the RICOH SP 4510SF printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi...

6.1CVSS6.3AI score0.01EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2018/09/21 12:00 a.m.•3 views

CVE-2018-17002: Improper Neutralization of Input During Web Page Generation

On the RICOH MP 2001 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi...

6.1CVSS6.3AI score0.01EPSS
SaveExploits2References2
Prion
Prion•added 2018/08/28 7:29 p.m.•23 views

Design/Logic Flaw

RICOH MP C4504ex devices allow HTML Injection via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn parameter...

6.8CVSS8.9AI score0.02505EPSS
SaveExploits5References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2018/08/28 12:00 a.m.•5 views

CVE-2018-15884: Improper Neutralization of Input During Web Page Generation

RICOH MP C4504ex devices allow HTML Injection via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn parameter...

8.8CVSS7.8AI score0.02505EPSS
SaveExploits5References3
Rows per page
Query Builder