PT-2021-27799

Name of the Vulnerable Software and Affected Versions Mruby affected versions not specified Description The issue is related to a heap-buffer-overflow read. Technical details about the crash include the mrb vm exec, mrb vm run, and mrb top run functions. Recommendations At the moment, there is no...

PT-2021-27752

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN WRITE. The crash state involves several functions: mrb vm exec, mrb vm run, and mrb top run. No informati...

CVE-2021-36072 Adobe Bridge SGI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Bridge versions 11.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2021-39368

Canon Oce Print Exec Workgroup 1.3.2 allows XSS via the lang parameter...

CVE-2021-39367

Canon Oce Print Exec Workgroup 1.3.2 allows Host header injection...

CVE-2021-39368

Canon Oce Print Exec Workgroup 1.3.2 allows XSS via the lang parameter...

CVE-2021-39367

Canon Oce Print Exec Workgroup 1.3.2 allows Host header injection...

CVE-2021-39367

Canon Oce Print Exec Workgroup 1.3.2 allows Host header injection...

Design/Logic Flaw

Canon Oce Print Exec Workgroup 1.3.2 allows XSS via the lang parameter...

Design/Logic Flaw

Canon Oce Print Exec Workgroup 1.3.2 allows Host header injection...

CVE-2021-39368

CVE-2021-39368 affects Canon Oce Print Exec Workgroup 1.3.2, where an XSS flaw exists in the lang parameter. The vulnerability targets the application’s web interface and allows script execution in a user’s browser. References in connected records corroborate the XSS claim; no explicit exploit de...

CVE-2021-39368

Canon Oce Print Exec Workgroup 1.3.2 allows XSS via the lang parameter...

CVE-2021-39367

Canon Oce Print Exec Workgroup 1.3.2 allows Host header injection...

CVE-2021-39367

CVE-2021-39367 affects Canon Oce Print Exec Workgroup 1.3.2 and concerns a vulnerability where the host header can be injected. This is documented across multiple sources (NVD and RH Red Hat entries). The vulnerability is described as a host header injection issue; no exploit details or affected ...

PT-2021-22569

Name of the Vulnerable Software and Affected Versions: Canon Oce Print Exec Workgroup version 1.3.2 Description: The issue allows for Host header injection. Recommendations: For Canon Oce Print Exec Workgroup version 1.3.2, consider restricting access to the Host header to minimize the risk of...

PT-2021-22570

Name of the Vulnerable Software and Affected Versions: Canon Oce Print Exec Workgroup version 1.3.2 Description: The issue allows for cross-site scripting XSS attacks via the lang parameter. This means an attacker could potentially inject malicious scripts into the application, affecting users wh...

Canon Oce Print Exec Workgroup 跨站脚本漏洞

Canon Oce Print Exec Workgroup is a software application from Canon Japan. It is a program that displays basic printer information. A security vulnerability exists in Canon Oce Print Exec Workgroup version 1.3.2, which allows an attacker to conduct XSS attacks via the lang parameter...

CVE-2021-39368: Improper Neutralization of Input During Web Page Generation

Canon Oce Print Exec Workgroup 1.3.2 allows XSS via the lang parameter...

CVE-2021-39367: Improper Encoding or Escaping of Output

Canon Oce Print Exec Workgroup 1.3.2 allows Host header injection...

Command injection

rConfig 3.9.5 allows command injection by sending a crafted GET request to lib/ajaxHandlers/ajaxArchiveFiles.php since the path parameter is passed directly to the exec function without being escaped...