CVE-2021-34086

In Ultimaker S3 3D printer, Ultimaker S5 3D printer, Ultimaker 3 3D printer S-line through 6.3 and Ultimaker 3 through 5.2.16, the local webserver hosts APIs vulnerable to CSRF. They do not verify incoming requests...

CVE-2021-34087

In Ultimaker S3 3D printer, Ultimaker S5 3D printer, Ultimaker 3 3D printer S-line through 6.3 and Ultimaker 3 through 5.2.16, the local webserver can be used for clickjacking. This includes the settings page...

CVE-2021-34087

In Ultimaker S3 3D printer, Ultimaker S5 3D printer, Ultimaker 3 3D printer S-line through 6.3 and Ultimaker 3 through 5.2.16, the local webserver can be used for clickjacking. This includes the settings page...

PT-2022-10320

Name of the Vulnerable Software and Affected Versions Ultimaker S3 3D printer versions through 6.3 Ultimaker S5 3D printer versions through 6.3 Ultimaker 3 3D printer S-line versions through 6.3 Ultimaker 3 versions through 5.2.16 Description The local webserver in the affected 3D printers hosts...

PT-2022-10321

Name of the Vulnerable Software and Affected Versions Ultimaker S3 3D printer versions prior to 6.3 Ultimaker S5 3D printer versions prior to 6.3 Ultimaker 3 3D printer S-line versions prior to 6.3 Ultimaker 3 3D printer versions prior to 5.2.16 Description The issue allows the local webserver to...

CVE-2018-6342

react-dev-utils on Windows allows developers to run a local webserver for accepting various commands, including a command to launch an editor. The input to that command was not properly sanitized, allowing an attacker who can make a network request to the server either via CSRF or by direct reque...

CVE-2018-6342

react-dev-utils on Windows allows developers to run a local webserver for accepting various commands, including a command to launch an editor. The input to that command was not properly sanitized, allowing an attacker who can make a network request to the server either via CSRF or by direct reque...

Directory traversal

Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allows local webserv users to execute arbitrary code with root privileges via a Trojan horse .war file in the Solr webapps directory...