8464 matches found
PT-2023-31769
Name of the Vulnerable Software and Affected Versions HP Enterprise LaserJet and HP LaserJet Managed Printers affected versions not specified Description The issue concerns a potential denial of service due to WS-Print requests and possible injections of Cross Site Scripting via jQuery-UI. This...
PT-2023-23634 · WordPress · Wp Mail Smtp Pro
Name of the Vulnerable Software and Affected Versions: WP Mail SMTP Pro plugin for WordPress versions up to, and including, 3.8.0 Description: The issue is related to a missing capability check on the is print page function, which allows unauthorized access to data. This makes it possible for...
CVE-2023-2508
The PaperCutNG Mobility Print version 1.0.3512 application allows an unauthenticated attacker to perform a CSRF attack on an instance administrator to configure the clients host in the "configure printer discovery" section. This is possible because the application has no protections against CSRF...
CVE-2023-2508
The PaperCutNG Mobility Print version 1.0.3512 application allows an unauthenticated attacker to perform a CSRF attack on an instance administrator to configure the clients host in the "configure printer discovery" section. This is possible because the application has no protections against CSRF...
Cross site request forgery (csrf)
The PaperCutNG Mobility Print version 1.0.3512 application allows an unauthenticated attacker to perform a CSRF attack on an instance administrator to configure the clients host in the "configure printer discovery" section. This is possible because the application has no protections against CSRF...
CVE-2023-2508 CSRF in PaperCutNG Mobility Print leads to sophisticated phishing
The PaperCutNG Mobility Print version 1.0.3512 application allows an unauthenticated attacker to perform a CSRF attack on an instance administrator to configure the clients host in the "configure printer discovery" section. This is possible because the application has no protections against CSRF...
CVE-2023-2508 CSRF in PaperCutNG Mobility Print leads to sophisticated phishing
The PaperCutNG Mobility Print version 1.0.3512 application allows an unauthenticated attacker to perform a CSRF attack on an instance administrator to configure the clients host in the "configure printer discovery" section. This is possible because the application has no protections against CSRF...
CVE-2023-2508
PaperCutNG Mobility Print 1.0.3512 is affected by a CSRF vulnerability that allows an unauthenticated attacker to make an instance administrator configure the client host via the Configure printer discovery section. The root cause is lack of CSRF protections (no Anti-CSRF tokens, header origin va...
PT-2023-19919 · Papercut · Papercutng Mobility Print
Name of the Vulnerable Software and Affected Versions: PaperCutNG Mobility Print version 1.0.3512 Description: The PaperCutNG Mobility Print application allows an unauthenticated attacker to perform a CSRF attack on an instance administrator to configure the client's host in the "configure printe...
PaperCutNG Mobility Print Cross-Site Request Forgery Vulnerability
PaperCutNG Mobility Print is a product of PaperCutNG, Inc. designed to provide mobile printing solutions for schools, businesses and other organizations. A security vulnerability exists in PaperCutNG Mobility Print version 1.0.3512 that stems from the application not being protected against CSRF...
CVE-2023-2508: Cross-Site Request Forgery (CSRF)
The PaperCutNG Mobility Print version 1.0.3512 application allows an unauthenticated attacker to perform a CSRF attack on an instance administrator to configure the clients host in the "configure printer discovery" section. This is possible because the application has no protections against CSRF...
mariadb: NULL pointer dereference in spider_db_mbase::print_warnings()
MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spiderdbmbase::printwarnings to dereference a null pointer...
September 12, 2023—KB5030216 (OS Build 20348.1970)
None None...
PT-2023-15808 · Unknown · Control De Ciber
Name of the Vulnerable Software and Affected Versions: Control de Ciber version 1.650 Description: The issue is a Buffer Overflow vulnerability in the printing function. It occurs when an administrator tries to accept or delete a print query created by a modified request sent by an attacker. This...
Exiv2::Jp2Image::printStructure DoS
The vulnerability of the Exiv2::Jp2Image::printStructure function in the Exiv2 data management library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to trigger a denial-of-service attack...
Yonyou UFIDA-NC Path Traversal Vulnerability
Yonyou UFIDA-NC is a large-scale ERP enterprise management system and e-commerce platform from China's UFIDA Network Technology Yonyou Company. A path traversal vulnerability exists in Yonyou UFIDA-NC 20230807 and earlier versions, which stems from the parameter filePath in the file...
themorningprint.com Cross Site Scripting vulnerability OBB-3642339
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Citrix PDF Printer does not open full screen with Edge as default PDF viewer
When users are using the HTML5 client and Citrix PDF Printer while using Edge as the default PDF viewer the print job is shown but there is a scroll bar on the right. If the user changes to Adobe as the default PDF viewer the print job displays correctly...