CVE-2023-27107

The CVE-2023-27107 issue affects MyQ Solution Print Server (prior to 8.2 Patch 32) and MyQ Solution Central Server (prior to 8.2 Patch 22). The root cause is incorrect access control in the runReport function, which permits users without proper rights to generate internal reports via a direct URL...

MyQ Solution Print Server和MyQ Solution Central Server 安全漏洞

MyQ Solution Print Server and MyQ Solution Central Server are both products of MyQ Solution, Inc.MyQ Solution Print Server is an easy-to-use print management software. It can control printers, reduce printing costs, and be environmentally friendly by reducing unnecessary waste.MyQ Solution Centra...

PT-2023-02: Auth Path Traversal and Command Injection in account_print.cgi in Zyxel products

An issue was identified in Zyxel products affecting: USG FLEX ZLD V4.50-V5.35 и VPN ZLD V4.30-V5.35. Discovered vulnerability in accountprint.cgi can be exploited by an authenticated attacker with administrator privileges to execute unauthorized OS commands in the tmp directory if hotspot functio...

CVE-2023-30076

Sourcecodester Judging Management System v1.0 is vulnerable to SQL Injection via /php-jms/printjudges.php?printjudges.php=&sename=&subeventid=...

CVE-2023-25954

KYOCERA Mobile Print' v3.2.0.230119 and earlier, 'UTAX/TA MobilePrint' v3.2.0.230119 and earlier, and 'Olivetti Mobile Print' v3.2.0.230119 and earlier are vulnerable to improper intent handling. When a malicious app is installed on the victim user's Android device, the app may send an intent and...

CVE-2023-25954

KYOCERA Mobile Print' v3.2.0.230119 and earlier, 'UTAX/TA MobilePrint' v3.2.0.230119 and earlier, and 'Olivetti Mobile Print' v3.2.0.230119 and earlier are vulnerable to improper intent handling. When a malicious app is installed on the victim user's Android device, the app may send an intent and...

CVE-2023-25954

KYOCERA Mobile Print' v3.2.0.230119 and earlier, 'UTAX/TA MobilePrint' v3.2.0.230119 and earlier, and 'Olivetti Mobile Print' v3.2.0.230119 and earlier are vulnerable to improper intent handling. When a malicious app is installed on the victim user's Android device, the app may send an intent and...

CVE-2023-25954

This CVE (CVE-2023-25954) affects Kyocera Mobile Print, UTAX/TA MobilePrint, and Olivetti Mobile Print (versions 3.2.0.230119 and earlier). The issue is improper handling of intents on Android, allowing a malicious app to trigger the affected app to download malicious files or apps without notifi...

CVE-2023-25954: Exposure of Resource to Wrong Sphere

KYOCERA Mobile Print' v3.2.0.230119 and earlier, 'UTAX/TA MobilePrint' v3.2.0.230119 and earlier, and 'Olivetti Mobile Print' v3.2.0.230119 and earlier are vulnerable to improper intent handling. When a malicious app is installed on the victim user's Android device, the app may send an intent and...

CVE-2023-25954

KYOCERA Mobile Print' v3.2.0.230119 and earlier, 'UTAX/TA MobilePrint' v3.2.0.230119 and earlier, and 'Olivetti Mobile Print' v3.2.0.230119 and earlier are vulnerable to improper intent handling. When a malicious app is installed on the victim user's Android device, the app may send an intent and...

PT-2023-20382

Name of the Vulnerable Software and Affected Versions KYOCERA Mobile Print versions 3.2.0.230119 and earlier UTAX/TA MobilePrint versions 3.2.0.230119 and earlier Olivetti Mobile Print versions 3.2.0.230119 and earlier Description The issue is related to improper intent handling. When a malicious...

Kyocera Mobile Print 安全漏洞

Kyocera Mobile Print is a printing application from Kyocera Japan. A security vulnerability exists in Kyocera Mobile Print that originates from allowing data transfer from a malicious third-party mobile application and results in the download of malicious files. Affected products and versions:...

Microsoft Print 3D WRL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Print 3D. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

Microsoft Print 3D OBJ File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Print 3D. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Microsoft Print 3D OBJ File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Print 3D. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

Microsoft Print 3D OBJ File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Print 3D. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

Microsoft Print 3D WRL File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Print 3D. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS. When the parameter summarize of tf.rawops.Print is zero, the new method SummarizeArray will reference to a nullptr, leading to a seg fault. PoC import tensorflow as tf tf.rawops.Printinput = tf.constant1, 1, 1,...

AZL-35306 CVE-2023-25660 affecting package tensorflow for versions less than 2.11.1-1

TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when the parameter summarize of tf.rawops.Print is zero, the new method SummarizeArray will reference to a nullptr, leading to a seg fault. A fix is included in TensorFlow version 2.12 and version...

Google TensorFlow 代码问题漏洞

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google, Inc. in the United States. A code issue vulnerability exists in Google TensorFlow version 2.12 prior to version 2.12.0 and version 2.11 prior to version 2.11.1, which stems from the fact that when t...