CVE-2020-3144: Improper Access Control

A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Router, RV130W Wireless-N Multifunction VPN Router, and RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary commands...

Cross site scripting

A cross-site scripting XSS vulnerability in Lexmark CS31x before LW74.VYL.P273; CS41x before LW74.VY2.P273; CS51x before LW74.VY4.P273; CX310 before LW74.GM2.P273; CX410 & XC2130 before LW74.GM4.P273; CX510 & XC2132 before LW74.GM7.P273; MS310, MS312, MS317 before LW74.PRL.P273; MS410, M1140 befo...

HP Color LaserJet Pro M280-M281 Multifunction Printer series and HP LaserJet Pro MFP M28-M31 Printer series buffer overflow vulnerability (CNVD-2019-23317)

HP Color LaserJet Pro M280-M281 Multifunction Printer series and HP LaserJet Pro MFP M28-M31 Printer series are printer products introduced by Hewlett-Packard HP. A buffer overflow vulnerability exists in the HP Color LaserJet Pro M280-M281 Multifunction Printer series prior to version 20190419 a...

PT-2019-2442

Name of the Vulnerable Software and Affected Versions Cisco RV110W Wireless-N VPN Firewall affected versions not specified Cisco RV130W Wireless-N Multifunction VPN Router affected versions not specified Cisco RV215W Wireless-N VPN Router affected versions not specified Description A vulnerabilit...

PT-2019-2737

Name of the Vulnerable Software and Affected Versions Cisco RV110W Wireless-N VPN Firewall versions affected versions not specified Cisco RV130W Wireless-N Multifunction VPN Router versions affected versions not specified Cisco RV215W Wireless-N VPN Router versions affected versions not specified...

PT-2019-2738

Name of the Vulnerable Software and Affected Versions Cisco RV110W Wireless-N VPN Firewall versions affected versions not specified Cisco RV130W Wireless-N Multifunction VPN Router versions affected versions not specified Cisco RV215W Wireless-N VPN Router versions affected versions not specified...

CVE-2019-6324

HP Color LaserJet Pro M280-M281 Multifunction Printer series before v. 20190419, HP LaserJet Pro MFP M28-M31 Printer series before v. 20190426 may have an embedded web server potentially vulnerable to stored XSS in wireless configuration page...

CVE-2019-6325

CVE-2019-6325 affects HP Color LaserJet Pro M280-M281 Multifunction Printer series (before 20190419) and HP LaserJet Pro MFP M28-M31 Printer series (before 20190426). The vulnerability is a Cross-Site Request Forgery in the printer’s embedded web server. HP’s advisory (HPSBPI03619 rev. 2) notes t...

CVE-2019-6324

HP Color LaserJet Pro M280-M281 Multifunction Printer series before v. 20190419, HP LaserJet Pro MFP M28-M31 Printer series before v. 20190426 may have an embedded web server potentially vulnerable to stored XSS in wireless configuration page...

CVE-2019-6323

HP Color LaserJet Pro M280-M281 Multifunction Printer series (before 20190419) and HP LaserJet Pro MFP M28-M31 Printer series (before 20190426) expose a vulnerability in the embedded web server’s wireless configuration page that allows reflected cross-site scripting (XSS). Root cause: lack of pro...

CVE-2019-6325: Cross-Site Request Forgery (CSRF)

HP Color LaserJet Pro M280-M281 Multifunction Printer series before v. 20190419, HP LaserJet Pro MFP M28-M31 Printer series before v. 20190426 may have an embedded web server that is potentially vulnerable to Cross-site Request Forgery...

CVE-2019-6323: Improper Neutralization of Input During Web Page Generation

HP Color LaserJet Pro M280-M281 Multifunction Printer series before v. 20190419, HP LaserJet Pro MFP M28-M31 Printer series before v. 20190426 may have an embedded web server potentially vulnerable to reflected XSS in wireless configuration page...

CVE-2019-6327: Buffer Copy without Checking Size of Input

HP Color LaserJet Pro M280-M281 Multifunction Printer series before v. 20190419, HP LaserJet Pro MFP M28-M31 Printer series before v. 20190426 may have an IPP Parser potentially vulnerable to Buffer Overflow...

CVE-2019-6324: Improper Neutralization of Input During Web Page Generation

HP Color LaserJet Pro M280-M281 Multifunction Printer series before v. 20190419, HP LaserJet Pro MFP M28-M31 Printer series before v. 20190426 may have an embedded web server potentially vulnerable to stored XSS in wireless configuration page...

CVE-2019-6326: Improper Restriction of Operations within the Bounds of a Memory Buffer

HP Color LaserJet Pro M280-M281 Multifunction Printer series before v. 20190419, HP LaserJet Pro MFP M28-M31 Printer series before v. 20190426 may have embedded web server attributes which may be potentially vulnerable to Buffer Overflow...

PT-2019-2242

Name of the Vulnerable Software and Affected Versions HP Color LaserJet Pro M280-M281 Multifunction Printer series versions before 20190419 HP LaserJet Pro MFP M28-M31 Printer series versions before 20190426 Description The issue is related to a potential Buffer Overflow in the IPP Parser. It may...

PT-2019-2856

Name of the Vulnerable Software and Affected Versions HP Color LaserJet Pro M280-M281 Multifunction Printer series versions before 20190419 HP LaserJet Pro MFP M28-M31 Printer series versions before 20190426 Description The issue is related to a Cross-site Request Forgery vulnerability in the...

PT-2019-2854

Name of the Vulnerable Software and Affected Versions HP Color LaserJet Pro M280-M281 Multifunction Printer series versions before 20190419 HP LaserJet Pro MFP M28-M31 Printer series versions before 20190426 Description The issue exists due to inadequate protection of the web page structure in th...

PT-2019-2241

Name of the Vulnerable Software and Affected Versions HP Color LaserJet Pro M280-M281 Multifunction Printer series versions before 20190419 HP LaserJet Pro MFP M28-M31 Printer series versions before 20190426 Description The issue is related to the embedded web server attributes of the printers,...

CVE-2019-1663: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The...