Lucene search
+L

7812 matches found

Cvelist
Cvelist
•added 2026/02/03 10:01 p.m.•43 views

CVE-2020-37080 webTareas 2.0.p8 - Arbitrary File Deletion

webTareas 2.0.p8 contains a file deletion vulnerability in the printlayout.php administration component that allows authenticated attackers to delete arbitrary files. Attackers can exploit the vulnerability by manipulating the 'atttmp1' parameter to specify and delete files on the server through ...

9.8CVSS0.00379EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/02/03 10:01 p.m.•5 views

CVE-2020-37080 webTareas 2.0.p8 - Arbitrary File Deletion

webTareas 2.0.p8 contains a file deletion vulnerability in the printlayout.php administration component that allows authenticated attackers to delete arbitrary files. Attackers can exploit the vulnerability by manipulating the 'atttmp1' parameter to specify and delete files on the server through ...

9.8CVSS6AI score0.00379EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2026/02/03 10:08 a.m.•20 views

WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 5.8.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Print Invoice & Delivery Notes for WooCommerce versions = 5.8.0...

5.3AI score0.00207EPSS
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/02/03 12:00 a.m.•15 views

The vulnerability of the print_wrapper_info() function in the drivers/media/platform/nxp/imx-jpeg/mxc-jpeg-hw.c file of the Linux kernel’s multimedia device driver allows a hacker to cause a service failure.

The vulnerability of the printwrapperinfo function in the drivers/media/platform/nxp/imx-jpeg/mxc-jpeg-hw.c file of the Linux kernel multimedia device driver is related to the improper disabling or release of resources. Exploiting this vulnerability could allow a remote attacker to cause service...

4.8CVSS6.4AI score0.00238EPSS
SaveExploits0References10Affected Software1
Positive Technologies
Positive Technologies
•added 2026/02/03 12:00 a.m.•30 views

PT-2026-5830

webTareas 2.0.p8 contains a file deletion vulnerability in the print layout.php administration component that allows authenticated attackers to delete arbitrary files. Attackers can exploit the vulnerability by manipulating the 'atttmp1' parameter to specify and delete files on the server through...

9.8CVSS5.7AI score0.00379EPSS
SaveExploits0References4
NVD
NVD
•added 2026/01/30 5:16 p.m.•14 views

CVE-2020-36996

PHPFusion 9.03.50 contains a persistent cross-site scripting vulnerability in the print.php page that fails to properly sanitize user-submitted message content. Attackers can inject malicious JavaScript through forum messages that will execute when the print page is generated, allowing script...

6.4CVSS0.00261EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/01/30 4:16 p.m.•7 views

CVE-2020-36996 PHPFusion 9.03.50 - Persistent Cross-Site Scripting

PHPFusion 9.03.50 contains a persistent cross-site scripting vulnerability in the print.php page that fails to properly sanitize user-submitted message content. Attackers can inject malicious JavaScript through forum messages that will execute when the print page is generated, allowing script...

6.4CVSS5.9AI score0.00261EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/01/30 4:16 p.m.•13 views

EUVD-2020-30963

PHPFusion 9.03.50 contains a persistent cross-site scripting vulnerability in the print.php page that fails to properly sanitize user-submitted message content. Attackers can inject malicious JavaScript through forum messages that will execute when the print page is generated, allowing script...

6.4CVSS6AI score0.00261EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/01/30 4:16 p.m.•41 views

CVE-2020-36996 PHPFusion 9.03.50 - Persistent Cross-Site Scripting

PHPFusion 9.03.50 contains a persistent cross-site scripting vulnerability in the print.php page that fails to properly sanitize user-submitted message content. Attackers can inject malicious JavaScript through forum messages that will execute when the print page is generated, allowing script...

6.4CVSS0.00261EPSS
SaveExploits0References4
CVE
CVE
•added 2026/01/30 4:16 p.m.•19 views

CVE-2020-36996

CVE-2020-36996 affects PHPFusion 9.03.50. The vulnerability is a persistent cross-site scripting flaw in the print.php page that fails to sanitize user-submitted forum messages. An attacker can inject JavaScript through forum content, which then executes when the print page is generated, enabling...

6.4CVSS5.9AI score0.00261EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/01/30 12:00 a.m.•20 views

PHPFusion cross-site scripting vulnerabilities

PHPFusion is an open-source, lightweight content management system developed by Malaysia-based PHPFusion Company, based on MySQL and PHP. This system includes modules for news, articles, and forums. Version PHPFusion 9.03.50 contains a cross-site scripting vulnerability. This vulnerability arises...

6.4CVSS5.6AI score0.00261EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/01/30 12:00 a.m.•17 views

PT-2026-5412

PHPFusion 9.03.50 contains a persistent cross-site scripting vulnerability in the print.php page that fails to properly sanitize user-submitted message content. Attackers can inject malicious JavaScript through forum messages that will execute when the print page is generated, allowing script...

6.4CVSS6AI score0.00261EPSS
SaveExploits0References5
OpenVAS
OpenVAS
•added 2026/01/26 12:00 a.m.•14 views

Canon Printers Multiple Vulnerabilities (CP2026-001)

Multiple vulnerabilities have been identified for certain Canon Small Office Multifunction Printers and Laser Printers. SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

9.8CVSS7.7AI score0.00991EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
•added 2026/01/26 12:00 a.m.•11 views

The vulnerability of the software for managing and monitoring NDD Print Agent, related to synchronization errors when using a shared resource (“Race Situation”), allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the software for managing and monitoring NDD Print Agent is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS5.8AI score0.00136EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2026/01/23 12:01 a.m.•7 views

OSV-2026-112 Use-of-uninitialized-value in PrintSERPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=477681214 Crash type: Use-of-uninitialized-value Crash state: PrintSERPacket garminserparse gpsdpoll...

5.4AI score
SaveExploits0References1
NVD
NVD
•added 2026/01/21 6:16 p.m.•14 views

CVE-2021-47887

OKI Print Job Accounting 4.4.10 contains an unquoted service path vulnerability in the OkiJaSvc service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Okidata\Print Job Accounting' to inject malicious executables and...

8.5CVSS0.00148EPSS
SaveExploits0References3
CVE
CVE
•added 2026/01/21 5:27 p.m.•24 views

CVE-2021-47887

CVE-2021-47887 affects OKI Print Job Accounting 4.4.10, where the OkiJaSvc service has an unquoted service path at C:\Program Files\Okidata\Print Job Accounting\ allowing local attackers to potentially inject executable code and escalate privileges. The vulnerability is described as a local, low-...

8.5CVSS6.6AI score0.00148EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/01/21 5:27 p.m.•15 views

EUVD-2026-3602

OKI Print Job Accounting 4.4.10 contains an unquoted service path vulnerability in the OkiJaSvc service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Okidata\Print Job Accounting' to inject malicious executables and...

8.5CVSS5.9AI score0.00148EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/01/21 5:27 p.m.•10 views

CVE-2021-47887

OKI Print Job Accounting 4.4.10 contains an unquoted service path vulnerability in the OkiJaSvc service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Okidata\Print Job Accounting' to inject malicious executables and...

8.5CVSS5.7AI score0.00148EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2026/01/21 5:27 p.m.•31 views

CVE-2021-47887 Print Job Accounting 4.4.10 - 'OkiJaSvc' Unquoted Service Path

OKI Print Job Accounting 4.4.10 contains an unquoted service path vulnerability in the OkiJaSvc service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Okidata\Print Job Accounting' to inject malicious executables and...

8.5CVSS0.00148EPSS
SaveExploits0References3
Rows per page
Query Builder