103 matches found
kickinkombucha.com Improper Access Control vulnerability OBB-1213435
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-10561
An issue was discovered on Xiaomi Mi Jia ink-jet printer 3.4.60138. Injecting parameters to ippserver through the web management background, resulting in command execution vulnerabilities...
Command injection
An issue was discovered on Xiaomi Mi Jia ink-jet printer 3.4.60138. Injecting parameters to ippserver through the web management background, resulting in command execution vulnerabilities...
CVE-2020-10561
An issue was discovered on Xiaomi Mi Jia ink-jet printer 3.4.60138. Injecting parameters to ippserver through the web management background, resulting in command execution vulnerabilities...
CVE-2020-10561
CVE-2020-10561 affects Xiaomi Mi Jia ink-jet printer prior to version 3.4.6_0138. The vulnerability stems from injecting parameters into the ippserver via the web administration backend, enabling command execution. Affected product: Xiaomi Mi Jia ink‑jet printer; vulnerability class: command inje...
HP Printers Multiple Vulnerabilities - Ripple20 (HPSBPI03666)
Multiple HP printers are vulnerable to multiple vulnerabilities in the Treck IP stack Ripple20. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
HP Printers XSS Vulnerability (HPSBPI03624)
Multiple HP printers are vulnerable to a cross-site scripting vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...
CVE-2019-6332
A potential security vulnerability has been identified with certain HP InkJet printers. The vulnerability could be exploited to allow cross-site scripting XSS. Affected products and versions include: HP DeskJet 2600 All-in-One Printer series model numbers 4UJ28B, V1N01A - V1N08A, Y5H60A - Y5H80A;...
Cross site scripting
A potential security vulnerability has been identified with certain HP InkJet printers. The vulnerability could be exploited to allow cross-site scripting XSS. Affected products and versions include: HP DeskJet 2600 All-in-One Printer series model numbers 4UJ28B, V1N01A - V1N08A, Y5H60A - Y5H80A;...
CVE-2019-6332
A potential security vulnerability has been identified with certain HP InkJet printers. The vulnerability could be exploited to allow cross-site scripting XSS. Affected products and versions include: HP DeskJet 2600 All-in-One Printer series model numbers 4UJ28B, V1N01A - V1N08A, Y5H60A - Y5H80A;...
July 26, 2019—KB4505903 (OS Build 18362.267)
None None...
March 1, 2019—KB4482887 (OS Build 17763.348)
None None...
HP Ink Printers RCE Vulnerabilities (Faxploit)
Two security vulnerabilities have been identified with certain HP Inkjet printers. A maliciously crafted file sent to an affected device can cause a stack or static buffer overflow, which could allow remote code execution RCE. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might...
HP Ink Printers Multiple Vulnerabilities (HPSBHF03589)
The firmware version running on the remote host is vulnerable to multiple vulnerabilities. An unauthenticated remote attacker could gain system-level unauthorized access to the affected device. Note that Nessus has not tested for these issues but has instead relied only on the self-reported versi...
HP Ink Printers Remote Code Execution Vulnerability (CNVD-2018-14729)
A remote code execution vulnerability exists in HP Ink Printers, where an attacker can remotely execute code by sending a maliciously constructed file to an affected device, causing a stack overflow...
Foxit Reader Remote Code Execution Vulnerability (CNVD-2018-14566)
Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A post-release reuse vulnerability exists in the handling of Ink annotations in Foxit Reader 9.1.0.5096 and earlier versions for Windows. A remote attacker can exploit this...
CVE-2018-14298
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Design/Logic Flaw
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2018-14298
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Foxit Reader Ink Annotations subject Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of I...