Lucene search
+L

250 matches found

Packet Storm
Packet Storm
added 2010/11/11 12:0 a.m.31 views

Ricoh Aficio Web Image Monitor 2.03 Cross Site Scripting

I was poking at some Ricoh MFPs several days ago, when I found this. It is nothing to get to terribly excited about as it's just a reflected XSS. However, the ability to abuse any trusted internal IP should be considered a threat. Companies have taken big hits from less. So without further ado,...

Exploits0
Tenable Nessus
Tenable Nessus
added 2010/05/19 12:0 a.m.17 views

HP MFP Digital Sending Software < 4.18.3 Local Unspecified Authentication Bypass

The remote Windows host contains a version of HP MFP Digital Sending Software earlier than 4.18.3. Such versions are potentially affected by an unspecified authentication bypass vulnerability. A local attacker, exploiting this flaw, reportedly can gain unauthorized access to 'Send to email' and...

4.7CVSS5.6AI score0.00469EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2010/05/19 12:0 a.m.20 views

HP MFP Digital Sending Software Detection

The remote Windows host contains HP MFP Digital Sending Software, an application that enables an HP Multifunction Peripheral MFP to send scanned documents directly to several types of destinations. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid46675;...

5.5AI score
Exploits0References1
securityvulns
securityvulns
added 2010/05/17 12:0 a.m.34 views

[security bulletin] HPSBPI02532 SSRT100111 rev.1 - HP MFP Digital Sending Software Running on Windows, Local Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02161624 Version: 1 HPSBPI02532 SSRT100111 rev.1 - HP MFP Digital Sending Software Running on Windows, Local Unauthorized Access NOTICE: The information in this Security Bulletin should be acted...

4.7CVSS0.2AI score0.00469EPSS
Exploits0
securityvulns
securityvulns
added 2010/05/17 12:0 a.m.41 views

HP MFP Digital Sending Software unauthorized access

No description provided...

4.7CVSS1.8AI score0.00469EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2010/05/14 7:24 p.m.47 views

CVE-2010-1558

CVE-2010-1558 affects HP MFP Digital Sending Software for Windows prior to v4.18.3; a local attacker could bypass restrictions on the MFP’s Send to email feature and obtain sensitive information due to an unspecified authentication bypass. The vulnerability is rated CVSS v2 base score 4.7 (AV:L/A...

4.7CVSS6.2AI score0.00469EPSS
Exploits0References4Affected Software1
Hewlett-Packard
Hewlett-Packard
added 2010/05/07 12:0 a.m.23 views

HPSBPI02532 SSRT100111 rev.3 - HP MFP Digital Sending Software Running on Windows, Local Unauthorized Access

Potential Security Impact Local unauthorized access VULNERABILITY SUMMARY A potential security vulnerability has been identified with HP MFP Digital Sending Software running on Windows. The vulnerability could be exploited by a local user to gain unauthorized access to "Send to e-mail" and other...

4.7CVSS0.6AI score0.00469EPSS
Exploits0
Hewlett-Packard
Hewlett-Packard
added 2010/02/03 12:0 a.m.48 views

HPSBPI02575 SSRT090255 rev.3 - HP LaserJet MFP Printers, HP Color LaserJet MFP Printers, Certain HP LaserJet Printers, Remote Unauthorized Access to Files

Potential Security Impact Remote unauthorized access to files VULNERABILITY SUMMARY A potential security vulnerability has been identified with HP LaserJet MFP printers, HP Color LaserJet MFP printers, and certain HP LaserJet printers. The vulnerability could be exploited remotely to gain...

7.8CVSS2.6AI score0.1313EPSS
Exploits14
Packet Storm
Packet Storm
added 2009/03/18 12:0 a.m.27 views

HP LaserJet Cross Site Request Forgery

Louhi Networks Oy -= Security Advisory =- Advisory: HP LaserJet multiple models web management CSRF vulnerability & insecure default configuration Release Date: 2009-03-17 Last Modified: 2009-03-17 Authors: Henri Lindberg, CISA henri d0t lindberg at louhi d0t fi Application: HP Embedded Web Serve...

0.6AI score
Exploits0
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.335 views

Microsoft SQL (MSSQL) Server Brute Force Logins With Default Credentials (TCP/IP Listener)

The remote Microsoft SQL MSSQL Server has a common / publicly known password for one or more accounts. SPDX-FileCopyrightText: 2005 HD Moore SPDX-FileCopyrightText: New / improved code since 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C...

10CVSS7.2AI score0.01679EPSS
Exploits2
Rows per page
Query Builder