3622 matches found
CVE-2023-3486 PaperCut NG Unauthenticated File Upload
An authentication bypass exists in PaperCut NG versions 22.0.12 and prior that could allow a remote, unauthenticated attacker to upload arbitrary files to the PaperCut NG host’s file storage. This could exhaust system resources and prevent the service from operating as expected...
CVE-2023-3486
CVE-2023-3486: An authentication bypass in PaperCut NG (versions 22.0.12 and earlier) could allow a remote, unauthenticated attacker to upload arbitrary files to the PaperCut NG host’s file storage, potentially exhausting resources and disrupting service. Related Nessus entries also cite PaperCut...
PaperCut NG 代码问题漏洞
PaperCut NG is a suite of next-generation printer control software from PaperCut Australia. PaperCut NG suffers from a security vulnerability that originates from an attacker being able to upload arbitrary files to the file storage of the PaperCut NG host via authentication bypass. This could lea...
The vulnerability of the os/net/ipv2/uip6.c component in operating systems for Contiki-NG devices allows a hacker to cause a service failure.
The vulnerability in the os/net/ipv2/uip6.c component of Contiki-NG operating systems relates to the issue where operations exceed the buffer boundaries in memory when processing values of the MSS Maximum Segment Size parameter for received packets. Exploiting this vulnerability can allow a remot...
Debian: Security Advisory (DLA-3496-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 3496-1] lemonldap-ng security update
Debian LTS Advisory DLA-3496-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin July 14, 2023 https://wiki.debian.org/LTS Package : lemonldap-ng Version : 2.0.2+ds-7+deb10u9 CVE ID : CVE-2023-28862 Issues were discovered in Lemonldap::NG, an OpenID-Connect, CAS and...
Debian dla-3496 : lemonldap-ng - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3496 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3496-1 [email protected] https://www.debian.org/lts/security/...
DLA-3496-1 lemonldap-ng - security update
Bulletin has no description...
MAL-2023-1248 Malicious code in ng-file-upload-shim (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 51cd8a582b38d577b6dc6deb3879019bd0b0c68ae7e5bf23d787aa2721e6e334 The OpenSSF Package Analysis project identified 'ng-file-upload-shim' @ 12.0.4 npm as malicious. It is considered malicious because: - The packa...
Malicious code in ng-file-upload-shim (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 51cd8a582b38d577b6dc6deb3879019bd0b0c68ae7e5bf23d787aa2721e6e334 The OpenSSF Package Analysis project identified 'ng-file-upload-shim' @ 12.0.4 npm as malicious. It is considered malicious because: - The packa...
Critical Photon OS Security Update - PHSA-2023-5.0-0037
Updates of 'bindutils', 'samba-client', 'pmd-ng', 'calico', 'go' packages of Photon OS have been released...
Critical Photon OS Security Update - PHSA-2023-5.0-91-0037
Updates of 'calico', 'bindutils', 'samba-client', 'go', 'pmd-ng' packages of Photon OS have been released...
CVE-2023-2533
A Cross-Site Request Forgery CSRF vulnerability has been identified in PaperCut NG/MF, which, under specific conditions, could potentially enable an attacker to alter security settings or execute arbitrary code. This could be exploited if the target is an admin with a current login session...
Cross site request forgery (csrf)
A Cross-Site Request Forgery CSRF vulnerability has been identified in PaperCut NG/MF, which, under specific conditions, could potentially enable an attacker to alter security settings or execute arbitrary code. This could be exploited if the target is an admin with a current login session...
EUVD-2023-34012
A Cross-Site Request Forgery CSRF vulnerability has been identified in PaperCut NG/MF, which, under specific conditions, could potentially enable an attacker to alter security settings or execute arbitrary code. This could be exploited if the target is an admin with a current login session...
CVE-2023-2533 PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF
A Cross-Site Request Forgery CSRF vulnerability has been identified in PaperCut NG/MF, which, under specific conditions, could potentially enable an attacker to alter security settings or execute arbitrary code. This could be exploited if the target is an admin with a current login session...
CVE-2023-2533
CVE-2023-2533 affects PaperCut NG/MF with a CSRF vulnerability that could allow an attacker to alter security settings or, under certain conditions, execute arbitrary code. Exploitation requires an admin with an active session and typically involves luring the admin to click a crafted link. Nessu...
PT-2023-20026 · Papercut · Papercut Ng/Mf
Name of the Vulnerable Software and Affected Versions: PaperCut NG/MF versions affected versions not specified Description: A Cross-Site Request Forgery CSRF vulnerability exists in PaperCut NG/MF, potentially allowing an attacker to alter security settings or execute arbitrary code under specifi...
PaperCut NG 跨站请求伪造漏洞
PaperCut NG is a suite of next-generation printer control software from PaperCut Australia. A security vulnerability exists in the version of PaperCut NG/MF 22.0.10 Build 65996 2023-03-27. An attacker could exploit the vulnerability to change security settings or execute arbitrary code...