PT-2023-10634 · WordPress · External Media Without Import Plugin

Name of the Vulnerable Software and Affected Versions: External Media without Import Plugin version 1.0.0 Description: A vulnerability was found in the External Media without Import Plugin on WordPress, affecting the print media new panel function of the file external-media-without-import.php. Th...

Universal Print Server Privilege Escalation Command Execution

The vulnerability of the Universal Print Server software, which is used for virtualizing and delivering Citrix Virtual Apps and Desktops formerly XenApp and XenDesktop applications to Windows operating systems, is related to deficiencies in access control. Exploiting this vulnerability allows an...

Design/Logic Flaw

Certain HP LaserJet Pro print products are potentially vulnerable to Heap Overflow and/or Remote Code Execution...

CVE-2023-27972

Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Remote Code Execution...

CVE-2023-27973

CVE-2023-27973 affects HP LaserJet Pro printers and related HP print products. The connected sources confirm a heap-based overflow in the printer firmware that can enable remote code execution without user interaction. The vulnerability is associated with HP’s advisories (e.g., HPSBPI03841) and H...

CVE-2023-27972

CVE-2023-27972 concerns certain HP LaserJet Pro printers, with a reported vulnerability to buffer overflow and/or remote code execution in printer firmware. Multiple connected sources corroborate a family of issues in HP LaserJet Pro and related print products (including environments like ENVY/Of...

CVE-2023-27971

CVE-2023-27971 affects HP LaserJet Pro print products with a buffer overflow/elevation of privilege vulnerability. The NVD/NV-related entries indicate a network-exposed vulnerability (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) with a high base score (9.8). The connected documents tie the flaw to HP Las...

CVE-2023-27107

Incorrect access control in the runReport function of MyQ Solution Print Server before 8.2 Patch 32 and Central Server before 8.2 Patch 22 allows users who do not have appropriate access rights to generate internal reports using a direct URL...

CVE-2023-27107

Incorrect access control in the runReport function of MyQ Solution Print Server before 8.2 Patch 32 and Central Server before 8.2 Patch 22 allows users who do not have appropriate access rights to generate internal reports using a direct URL...

Improper access control

Incorrect access control in the runReport function of MyQ Solution Print Server before 8.2 Patch 32 and Central Server before 8.2 Patch 22 allows users who do not have appropriate access rights to generate internal reports using a direct URL...

CVE-2023-22728

Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system. Prior to version 4.12.15, the GridField print view incorrectly validates the permission of DataObjects potentially allowing a content author to view records they are not authorise...

Design/Logic Flaw

Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system. Prior to version 4.12.15, the GridField print view incorrectly validates the permission of DataObjects potentially allowing a content author to view records they are not authorise...

CVE-2023-22728 Silverstripe Framework has missing permission check of canView in GridFieldPrintButton

Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system. Prior to version 4.12.15, the GridField print view incorrectly validates the permission of DataObjects potentially allowing a content author to view records they are not authorise...

CVE-2023-22728 Silverstripe Framework has missing permission check of canView in GridFieldPrintButton

Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system. Prior to version 4.12.15, the GridField print view incorrectly validates the permission of DataObjects potentially allowing a content author to view records they are not authorise...

silverstripe framework 安全漏洞

silverstripe framework is a CMS web framework. A security vulnerability exists in Silverstripe Framework version 4.12.5 and prior versions, which stems from the GridField print view incorrectly validating the permissions of DataObjects. An attacker could use this vulnerability to view records tha...

PT-2023-20957 · Unknown · Myq Solution Print Server +1

Name of the Vulnerable Software and Affected Versions: MyQ Solution Print Server versions prior to 8.2 Patch 32 MyQ Solution Central Server versions prior to 8.2 Patch 22 Description: The issue is related to incorrect access control in the runReport function, allowing users without appropriate...

CVE-2023-27107

Incorrect access control in the runReport function of MyQ Solution Print Server before 8.2 Patch 32 and Central Server before 8.2 Patch 22 allows users who do not have appropriate access rights to generate internal reports using a direct URL...

CVE-2023-27107

Incorrect access control in the runReport function of MyQ Solution Print Server before 8.2 Patch 32 and Central Server before 8.2 Patch 22 allows users who do not have appropriate access rights to generate internal reports using a direct URL...

CVE-2023-27107: Incorrect Authorization

Incorrect access control in the runReport function of MyQ Solution Print Server before 8.2 Patch 32 and Central Server before 8.2 Patch 22 allows users who do not have appropriate access rights to generate internal reports using a direct URL...

CVE-2023-22728: Missing Authorization

Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system. Prior to version 4.12.15, the GridField print view incorrectly validates the permission of DataObjects potentially allowing a content author to view records they are not authorise...