Lucene search
+L

228 matches found

CNNVD
CNNVD
added 2024/10/02 12:0 a.m.8 views

HP LaserJet Printers 安全漏洞

HP LaserJet Printers are a line of printers from Hewlett-Packard HP in the United States. A security vulnerability exists in HP LaserJet Printers, which stems from a potential denial of service when a user sends raw JPEG files to the printer...

5.3CVSS6.7AI score0.00574EPSS
SaveExploits0References3
OSV
OSV
added 2024/10/01 11:15 a.m.8 views

USN-7041-2 cups vulnerability

USN-7041-1 fixed a vulnerability in CUPS. This update provides the corresponding update for Ubuntu 18.04 LTS. Original advisory details: Simone Margaritelli discovered that CUPS incorrectly sanitized IPP data when creating PPD files. A remote attacker could possibly use this issue to manipulate P...

9.8CVSS7.3AI score0.63811EPSS
SaveExploits6References2
CVE
CVE
added 2024/09/26 9:13 p.m.277 views

CVE-2024-47176

CVE-2024-47176 affects CUPS/CUPS-browsed: cups-browsed binds to INADDR_ANY:631 and trusts any packet, enabling an attacker-controlled IPP Get-Printer-Attributes URL to trigger remote commands. Connected Astra Linux advisories describe an exploit chain with CVE-2024-47076, CVE-2024-47175 and CVE-2...

5.3CVSS8AI score0.50174EPSS
SaveExploits15References12Affected Software1
CNNVD
CNNVD
added 2024/08/16 12:0 a.m.7 views

Lenovo printers 安全漏洞

Lenovo printers is a printer from the Chinese company Lenovo Lenovo. A security vulnerability exists in Lenovo printers that stems from the presence of a denial of service vulnerability, which could allow an unauthenticated attacker on a shared network to compromise the printer's functionality...

6.5CVSS6.6AI score0.003EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/07/29 12:0 a.m.14 views

PT-2024-37751 · Honeywell · Honeywell Pc42D +1

Name of the Vulnerable Software and Affected Versions: Honeywell PC42t, PC42tp, and PC42d Printers versions T10.19.020016 through T10.20.060397 Description: The issue allows an attacker to inject malicious code, potentially leading to information disclosure, session theft, or client-side request...

3.5CVSS7AI score0.00279EPSS
SaveExploits0References3
NVD
NVD
added 2024/06/14 4:15 a.m.19 views

CVE-2024-27175

Remote Command program allows an attacker to read any file using a Local File Inclusion vulnerability. An attacker can read any file on the printer. As for the affected products/models/versions, see the reference URL...

4.4CVSS0.00851EPSS
SaveExploits1References4
CVE
CVE
added 2024/06/14 4:4 a.m.64 views

CVE-2024-27175

CVE-2024-27175 affects Toshiba e-STUDIO/MFP devices, where a Local File Inclusion vulnerability allows an attacker to read arbitrary files on the printer via unsafely processed input. The root cause is insufficient validation of filename input, enabling information disclosure via the device UI or...

4.4CVSS5.2AI score0.00851EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/06/14 12:0 a.m.11 views

Toshiba e-STUDIO Security Vulnerability

Toshiba e-STUDIO is a series of high-end office multifunction printers from Toshiba, Japan. A security vulnerability exists in Toshiba e-STUDIO, which originates from programs running under root privileges that, if hijacked by some means, could execute arbitrary code on the multifunction device...

7.4CVSS7.6AI score0.0026EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/05/23 12:0 a.m.8 views

Hp LaserJet Pro Printer 安全漏洞

The HP Hp LaserJet Pro Printer is a laser printer from Hewlett-Packard HP in the United States. A security vulnerability exists in the Hp LaserJet Pro Printer that originates from a user with device administrative privileges being able to change the existing SMTP server settings on the device...

6.8CVSS6.7AI score0.00402EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/05/23 12:0 a.m.9 views

Hp LaserJet Pro Printer 跨站脚本漏洞

The HP Hp LaserJet Pro Printer is a laser printer from Hewlett-Packard HP. A cross-site scripting vulnerability exists in the Hp LaserJet Pro Printer that originates from the device web management interface being susceptible to cross-site scripting attacks...

7.6CVSS5.9AI score0.00298EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/03/22 12:0 a.m.6 views

HP OfficeJet Pro 安全漏洞

HP OfficeJet Pro is an all-in-one printer from Hewlett-Packard HP. A security vulnerability exists in HP OfficeJet Pro that originates from a possible denial-of-service attack when an incorrect eSCL URL GET request is used...

5.3CVSS6.7AI score0.00574EPSS
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/03/06 9:24 a.m.2 views

FUJIFILM Business Innovation Corp. printers vulnerable to cross-site request forgery

Overview Multiple printers provided by FUJIFILM Business Innovation Corp. contain a cross-site request forgery vulnerability CWE-352. Junnosuke Kushibiki, Ryu Kuki, Masataka Mizokuchi, Takayuki Sasaki, and Katsunari Yoshioka of Yokohama National University reported this vulnerability to IPA...

6.5CVSS6.5AI score0.00201EPSS
SaveExploits0References4
OSV
OSV
added 2024/02/06 1:15 a.m.6 views

CVE-2023-6229

Buffer overflow in CPCA PDL Resource Download process of Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.: Satera LBP670C Series/Satera MF750C Series firmware v03.07...

9.8CVSS6.1AI score0.01383EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2024/02/06 12:22 a.m.5 views

CVE-2023-6231

Buffer overflow in WSD probe request process of Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and...

9.8CVSS8.1AI score0.01383EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:0 a.m.11 views

The vulnerability of the IPP microprogramming software for Canon printers of the imageCLASS D, imageCLASS MF, imageCLASS LBP, imagePROGRAF, PIXMA, MAXIFY series allows a hacker to execute arbitrary code.

The vulnerability of the IPP microprogramming software for Canon printers of the imageCLASS D, imageCLASS MF, imageCLASS LBP, imagePROGRAF, PIXMA, and MAXIFY series is related to buffer overflow on the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.5AI score0.01139EPSS
SaveExploits0References5Affected Software71
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:0 a.m.9 views

The vulnerability of HP LaserJet Pro printer’s microprogramming software lies in the copying of buffers without checking the size of the input data, allowing a hacker to execute arbitrary code.

The vulnerability of HP LaserJet Pro printer microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

8.8CVSS8.1AI score0.01486EPSS
SaveExploits0References3Affected Software26
VulnCheck KEV
VulnCheck KEV
added 2023/11/13 12:0 a.m.5 views

VulnCheck KEV: CVE-2020-23575

A directory traversal vulnerability exists in Kyocera Printer d-COPIA253MF plus. Successful exploitation of this vulnerability could allow an attacker to retrieve or view arbitrary files from the affected server...

7.5CVSS6.8AI score0.36765EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/11/09 12:0 a.m.4 views

PT-2023-8589 · Lexmark · Lexmark Cx331Adwe

Name of the Vulnerable Software and Affected Versions: Lexmark CX331adwe affected versions not specified Description: A vulnerability in one of the SE menu routines of Lexmark printers can be leveraged by an attacker to execute arbitrary code. The issue exists due to a lack of authentication befo...

9.1CVSS9.3AI score0.00976EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2023/08/02 12:0 a.m.7 views

PT-2023-26510 · Seiko Epson · Seiko Epson Printer Web Config

Name of the Vulnerable Software and Affected Versions: SEIKO EPSON printer Web Config affected versions not specified Description: The issue is related to an improper input validation vulnerability in the Web Config software of SEIKO EPSON printers. This vulnerability allows a remote attacker to...

7.5CVSS7.2AI score0.00854EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2023/07/11 5:3 p.m.8 views

CVE-2023-32085 Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

...

5.5CVSS5.5AI score0.0052EPSS
SaveExploits0References1
Rows per page
Query Builder