CVE-2013-2674: Exposure of Sensitive Information to an Unauthorized Actor

Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attackers to view sensitive information from referrer logs due to inadequate handling of HTTP referrer headers...

CVE-2013-2673: Incorrect Authorization

Brother MFC-9970CDW 1.10 firmware L devices contain a security bypass vulnerability which allows physically proximate attackers to gain unauthorized access...

CVE-2013-2672: Insufficiently Protected Credentials

Brother MFC-9970CDW devices with firmware 0D allow cleartext submission of passwords...

CVE-2019-6681

On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, and 12.1.0-12.1.5, a memory leak in Multicast Forwarding Cache MFC handling in tmrouted...

CVE-2019-6681

CVE-2019-6681 affects BIG-IP tmrouted with memory leak in the Multicast Forwarding Cache (MFC). Affected versions include BIG-IP 15.0.0–15.0.1.1, 14.1.0–14.1.2, 14.0.0–14.0.1, 13.1.0–13.1.3.1, and 12.1.0–12.1.5. The vulnerability can cause a memory leak in tmrouted, potentially exhausting system ...

CVE-2019-6681: Missing Release of Memory after Effective Lifetime

On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, and 12.1.0-12.1.5, a memory leak in Multicast Forwarding Cache MFC handling in tmrouted...

PT-2019-16227

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9 Description The issue is related to a possible out of bounds read in the Mfc Transceive function of phNxpExtns MifareStd.cpp. This could lead to local information disclosure with no additional execution privilege...

PT-2019-16225

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9 Description The issue is related to a heap buffer overflow in the Mfc Transceive function of phNxpExtns MifareStd.cpp. This could lead to a local escalation of privilege with no additional execution privileges...

MFC Insecure Library Loading Vulnerability

A remote code execution vulnerability exists in the way that certain applications built using Microsoft Foundation Classes MFC handle the loading of DLL files. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then insta...

Microsoft MFC Insecure Library Loading (CVE-2010-3190)

A remote code execution vulnerability has been reported in Microsoft MFC. The vulnerability is due to an error in the way Microsoft MFC restricts the path used for loading external libraries. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

August 30, 2018—KB4343893 (OS Build 16299.637)

None None...

July 24, 2018—KB4338817 (OS Build 16299.579)

None None...

CVE-2017-2244

Cross-site request forgery CSRF vulnerability in MFC-J960DWN firmware ver.D and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2017-2244

Cross-site request forgery CSRF vulnerability in MFC-J960DWN firmware ver.D and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in MFC-J960DWN firmware ver.D and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2017-2244

Cross-site request forgery CSRF vulnerability in MFC-J960DWN firmware ver.D and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2017-2244

CVE-2017-2244 concerns a cross-site request forgery (CSRF) in Brother MFC‑J960DWN printers. The vulnerability affects firmware version D and earlier of MFC‑J960DWN, enabling remote attackers to hijack the authentication of administrators via unspecified vectors. Connected documents consistently d...

PT-2017-15292

Name of the Vulnerable Software and Affected Versions MFC-J960DWN firmware versions prior to ver.D Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators via unspecified vectors. Recommendations For MFC-J960DWN firmware versions...

CVE-2017-2244: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in MFC-J960DWN firmware ver.D and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

MFC-J960DWN vulnerable to cross-site request forgery

Overview MFC-J960DWN provided by BROTHER INDUSTRIES, LTD. is a MultiFunction Printer. MFC-J960DWN contains a cross-site request forgery vulnerability CWE-352. Taiga Asano reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...