Lucene search
+L

8444 matches found

Positive Technologies
Positive Technologies
•added 2024/12/05 12:00 a.m.•23 views

PT-2024-35141 · Dropbox · Dropbox Sign

Name of the Vulnerable Software and Affected Versions: DropBox SignHelloSign versions through 2024-12-04 Description: The issue is related to a User Interface UI Misrepresentation of Critical Information vulnerability, allowing Content Spoofing. The displayed version does not show the layer...

8.2CVSS6.6AI score0.00193EPSS
SaveExploits0References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/05 12:00 a.m.•7 views

CVE-2024-52270: User Interface (UI) Misrepresentation of Critical Information

User Interface UI Misrepresentation of Critical Information vulnerability in DropBox SignHelloSign allows Content Spoofing. Displayed version does not show the layer flattened version, once download, If printed e.g. via Google Chrome - Examine the print preview: Will render the vulnerability only...

8.2CVSS5.8AI score0.00193EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/05 12:00 a.m.•8 views

CVE-2024-52271: User Interface (UI) Misrepresentation of Critical Information

User Interface UI Misrepresentation of Critical Information vulnerability in Documenso allows Content Spoofing.Displayed version does not show the layer flattened version, once download, If printed e.g. via Google Chrome - Examine the print preview: Will render the vulnerability only, not all...

8.2CVSS5.8AI score0.0021EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2024/12/05 12:00 a.m.•21 views

VulnCheck KEV: CVE-2024-52271

User Interface UI Misrepresentation of Critical Information vulnerability in Documenso allows Content Spoofing.Displayed version does not show the layer flattened version, once download, If printed e.g. via Google Chrome - Examine the print preview: Will render the vulnerability only, not all...

8.2CVSS6.6AI score0.0021EPSS
SaveIn wildExploits0References2
VulnCheck KEV
VulnCheck KEV
•added 2024/12/05 12:00 a.m.•14 views

VulnCheck KEV: CVE-2024-52270

User Interface UI Misrepresentation of Critical Information vulnerability in DropBox SignHelloSign allows Content Spoofing. Displayed version does not show the layer flattened version, once download, If printed e.g. via Google Chrome - Examine the print preview: Will render the vulnerability only...

8.2CVSS5.8AI score0.00193EPSS
SaveIn wildExploits0References2
Positive Technologies
Positive Technologies
•added 2024/12/04 12:00 a.m.•16 views

PT-2024-35147 · Google · Google Chrome

Name of the Vulnerable Software and Affected Versions: DocuSeal versions through 1.8.1 Description: The issue is related to a User Interface UI Misrepresentation of Critical Information vulnerability in DocuSeal, allowing Content Spoofing. This means that the displayed version of a document does...

8.2CVSS6.8AI score0.0021EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2024/12/04 12:00 a.m.•35 views

PT-2024-35146 · Docusign · Docusign

Name of the Vulnerable Software and Affected Versions: DocuSign versions through 2024-12-04 Description: The issue is related to a User Interface UI Misrepresentation of Critical Information vulnerability, which allows Content Spoofing. This means that the displayed version of a document does not...

8.2CVSS6.8AI score0.00352EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/04 12:00 a.m.•4 views

CVE-2024-52277: User Interface (UI) Misrepresentation of Critical Information

User Interface UI Misrepresentation of Critical Information vulnerability in DocuSeal allows Content Spoofing.Displayed version does not show the layer flattened version, once download, If printed e.g. via Google Chrome - Examine the print preview: Will render the vulnerability only, not all laye...

8.2CVSS5.8AI score0.0021EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2024/12/04 12:00 a.m.•18 views

Dell 3000cn Permissions, Privileges, and Access Controls (CVE-2006-2112)

Fuji Xerox Printing Systems FXPS print engine, as used in products including 1 Dell 3000cn through 5110cn and 2 Fuji Xerox DocuPrint firmware before 20060628 and Network Option Card firmware before 5.13, allows remote attackers to use the FTP printing interface as a proxy FTP bounce by using...

7.5CVSS6AI score0.02206EPSS
SaveExploits0References19
Patchstack
Patchstack
•added 2024/12/04 12:00 a.m.•18 views

Drupal Print Anything module * - Authenticated Other Vulnerability Type vulnerability

Authenticated Other Vulnerability Type vulnerability discovered by Drew Webber in WordPress Module Print Anything versions...

6.6CVSS6.9AI score0.00379EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/12/04 12:00 a.m.•21 views

PT-2024-10137 · Drupal · Print Anything +1

Name of the Vulnerable Software and Affected Versions: Print Anything versions . Description: The issue is related to insufficient input validation in the Print Anything module of the Drupal CMS system. This can allow a remote attacker to execute arbitrary code. The problem affects all versions o...

7.1CVSS7.7AI score0.00379EPSS
SaveExploits0References9
osv_cve
osv_cve
•added 2024/11/22 8:15 p.m.•20 views

CVE-2023-39470

PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PaperCut NG. Authentication is required to exploit this vulnerability. The specific flaw exists with...

7.2CVSS6.2AI score0.01756EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2024/11/22 8:15 p.m.•15 views

CVE-2023-39470

PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PaperCut NG. Authentication is required to exploit this vulnerability. The specific flaw exists with...

7.2CVSS7.6AI score0.01756EPSS
SaveExploits0References3
OSS-Fuzz
OSS-Fuzz
•added 2024/11/21 9:50 a.m.•78 views

samba:fuzz_ndr_spoolss_TYPE_OUT: Segv on unknown address in ndr_print_and_forget

Detailed Report: https://oss-fuzz.com/testcase?key=6580445763403776 Project: samba Fuzzing Engine: libFuzzer Fuzz Target: fuzzndrspoolssTYPEOUT Job Type: libfuzzerasansamba Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: ndrprintandforget...

5.4AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/21 12:00 a.m.•8 views

CVE-2024-45513: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Zimbra Collaboration ZCS through 10.1. A stored Cross-Site Scripting XSS vulnerability exists in the /modern/contacts/print endpoint of Zimbra webmail. This allows an attacker to inject and execute arbitrary JavaScript code in the context of the victim's browser when a...

4.8CVSS6.2AI score0.00384EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/20 5:15 p.m.•26 views

CVE-2024-51163

A Local File Inclusion vulnerability in Vegam Solutions Vegam 4i versions 6.3.47.0 and earlier allows a remote attacker to obtain sensitive information through the print label function. Specifically, the filePathList parameter is susceptible to LFI, enabling a malicious user to include files from...

7.5CVSS0.00517EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/11/20 12:00 a.m.•20 views

Vegam 4i 安全漏洞

Vegam 4i is an IoT data tool from Vegam. A security vulnerability exists in Vegam 4i v.6.3.47.0 and prior versions, which stems from a vulnerability that could allow a remote attacker to gain access to sensitive information via the Print Label feature...

7.5CVSS6.7AI score0.00517EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/20 12:00 a.m.•21 views

CVE-2024-51163

A Local File Inclusion vulnerability in Vegam Solutions Vegam 4i versions 6.3.47.0 and earlier allows a remote attacker to obtain sensitive information through the print label function. Specifically, the filePathList parameter is susceptible to LFI, enabling a malicious user to include files from...

6.7AI score0.00517EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/11/20 12:00 a.m.•30 views

CVE-2024-51163

A Local File Inclusion vulnerability in Vegam Solutions Vegam 4i versions 6.3.47.0 and earlier allows a remote attacker to obtain sensitive information through the print label function. Specifically, the filePathList parameter is susceptible to LFI, enabling a malicious user to include files from...

0.00517EPSS
SaveExploits0References2
CVE
CVE
•added 2024/11/20 12:00 a.m.•113 views

CVE-2024-51163

Vegam Solutions Vegam 4i versions 6.3.47.0 and earlier are vulnerable to a Local File Inclusion (LFI) vulnerability within the print label function. The filePathList parameter is susceptible to LFI, allowing a remote attacker to include and disclose sensitive files from the web server, such as we...

7.5CVSS6.1AI score0.00517EPSS
SaveExploits0References2
Rows per page
Query Builder