Lucene search
+L

224 matches found

cnvd
cnvd
added 2021/06/08 12:0 a.m.17 views

Unauthorized access vulnerability in HP ENVY 4500 e-All-in-One Printer series

Hewlett-Packard Trading Shanghai Co., Ltd. is a company whose business scope includes computer hardware and software equipment, printing equipment, imaging equipment, communication equipment and so on. An unauthorized access vulnerability exists in the HP ENVY 4500 e-All-in-One Printer series,...

6.8AI score
Exploits0
cnvd
cnvd
added 2021/06/05 12:0 a.m.2 views

Unauthorized Access Vulnerability in Dell 5130cdn Color Laser

The Dell 5130cdn Color Laser is a printer. An unauthorized access vulnerability exists in the Dell 5130cdn Color Laser. An attacker could exploit the vulnerability to obtain sensitive information and perform unauthorized operations...

6.5AI score
Exploits0
cnvd
cnvd
added 2021/05/09 12:0 a.m.5 views

Unauthorized Access Vulnerability in Dell B3460DN Monochrome Laser Printer

The business scope of Dell China Co., Ltd. includes: manufacturing, assembling, research and development of computer products, cell phone products, network communication equipment routers, switches, network data center products and so on. An unauthorized access vulnerability exists in the Dell...

6.9AI score
Exploits0
cnvd
cnvd
added 2021/04/30 12:0 a.m.3 views

Unauthorized access vulnerability in HP ENVY 5530 e-All-in-One Printer series

The HP ENVY 5530 e-All-in-One Printer series printer is an all-in-one printer from HP Trading Shanghai Co. An unauthorized access vulnerability exists in the HP ENVY 5530 e-All-in-One Printer series, which can be exploited by an attacker to gain direct access to the printer control interface...

7.2AI score
Exploits0
cnvd
cnvd
added 2021/04/28 12:0 a.m.4 views

Unauthorized Access Vulnerability in HP-ENVY-7640 at Hewlett-Packard Trading (Shanghai) Co.

The HP-ENVY-7640 series printer is an all-in-one printer from HP. An unauthorized access vulnerability exists in the HP-ENVY-7640, which can be exploited by an attacker to gain direct access to the printer control interface without logging in...

7.2AI score
Exploits0
osv
osv
added 2021/03/29 9:15 p.m.3 views

CVE-2021-28671

Xerox Phaser 6510 before 64.65.51 and 64.59.11 Bridge, WorkCentre 6515 before 65.65.51 and 65.59.11 Bridge, VersaLink B400 before 37.65.51 and 37.59.01 Bridge, B405 before 38.65.51 and 38.59.01 Bridge, B600/B610 before 32.65.51 and 32.59.01 Bridge, B605/B615 before 33.65.51 and 33.59.01 Bridge,...

9.8CVSS7.6AI score0.02584EPSS
Exploits0References1
cnvd
cnvd
added 2021/02/10 12:0 a.m.4 views

Unauthorized Access Vulnerability in HP LaserJet Pro MFP Series Printers

The HP LaserJet Pro MFP series of printers is an all-in-one printer from HP. An unauthorized access vulnerability exists in the HP LaserJet Pro MFP series printers, which can be exploited by an attacker to gain direct access to the printer control interface without logging in...

7.3AI score
Exploits0
cnnvd
cnnvd
added 2020/11/16 12:0 a.m.8 views

Canon Oce ColorWave 3500 Security Breach

The Canon Oce ColorWave 3500 is a color printer from Canon Japan. The device is based on solid ink bead printing technology and image logic scanning processing, integrating CAD, GIS and full-coverage, full-color image printing in a single device to provide more professional functionality for the...

9.8CVSS7.3AI score0.01121EPSS
Exploits0References2
osv
osv
added 2020/03/16 8:15 p.m.3 views

CVE-2019-18917

A potential security vulnerability has been identified for certain HP Printers and All-in-Ones that would allow bypassing account lockout...

6.5CVSS5.7AI score0.01475EPSS
Exploits0References1
bdu_fstec
bdu_fstec
added 2020/03/04 12:0 a.m.4 views

The vulnerability of microprogrammed software in HP PageWide and HP OfficeJet Pro printers arises from the use of an operator like “assert()”, which allows a malicious actor to trigger a service failure or gain unauthorized access to protected information.

The vulnerability of Microprogrammed Software in HP PageWide and HP OfficeJet Pro printers is related to the use of the assert function or similar operators. Exploiting this vulnerability can allow attackers to cause malfunctions during maintenance or gain unauthorized access to protected...

3.6CVSS5.9AI score0.004EPSS
Exploits0References3Affected Software13
bdu_fstec
bdu_fstec
added 2020/01/13 12:0 a.m.6 views

The vulnerability of microprogrammed software in printers such as LaserJet, PageWide, OfficeJet Enterprise, and LaserJet Managed lies in insufficient data validation, allowing attackers to execute arbitrary codes.

The vulnerability of Microprogrammed Software for printers such as LaserJet, PageWide, OfficeJet Enterprise, and LaserJet Managed is related to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

8.1CVSS8.2AI score0.03618EPSS
Exploits0References4Affected Software124
osv
osv
added 2020/01/10 6:15 p.m.5 views

CVE-2019-14304

Ricoh SP C250DN 1.06 devices allow CSRF...

8.8CVSS6.8AI score0.00714EPSS
Exploits0References2
osv
osv
added 2020/01/09 7:15 p.m.2 views

CVE-2019-6332

A potential security vulnerability has been identified with certain HP InkJet printers. The vulnerability could be exploited to allow cross-site scripting XSS. Affected products and versions include: HP DeskJet 2600 All-in-One Printer series model numbers 4UJ28B, V1N01A - V1N08A, Y5H60A - Y5H80A;...

4.8CVSS5.7AI score0.00653EPSS
Exploits0References1
zdt
zdt
added 2020/01/06 12:0 a.m.102 views

IBM RICOH Infoprint 1532 Printer - Persistent Cross-Site Scripting Vulnerability

Exploit for hardware platform in category web applications Exploit Title: IBM RICOH Infoprint 1532 Printer - Persistent Cross-Site Scripting Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ibm.com/il-en Hardware Link:...

7.1AI score
Exploits0
bdu_fstec
bdu_fstec
added 2019/08/08 12:0 a.m.8 views

The vulnerability of Microprogrammed Software in HP Color LaserJet Pro and HP LaserJet Pro printers stems from the lack of measures taken to protect the structure of web pages. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of HP Color LaserJet Pro and HP LaserJet Pro printer software exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality and integrity of the protected information...

5.5CVSS5.5AI score0.00701EPSS
Exploits0References3Affected Software9
cnvd
cnvd
added 2019/06/28 12:0 a.m.6 views

HP Color LaserJet Pro M280-M281 Multifunction Printer series and HP LaserJet Pro MFP M28-M31 Printer series Buffer Overflow Vulnerability

HP Color LaserJet Pro M280-M281 Multifunction Printer series and HP LaserJet Pro MFP M28-M31 Printer series are printer products introduced by Hewlett-Packard HP. A buffer overflow vulnerability exists in the HP Color LaserJet Pro M280-M281 Multifunction Printer series prior to version 20190419 a...

7.2CVSS7.4AI score0.01712EPSS
Exploits0References1
myhack58
myhack58
added 2019/06/19 12:0 a.m.171 views

Not to ignore the printer vulnerability research-exploit warning-the black bar safety net

0×01 Preface After a recent period of time of the test, found within the enterprise network printer there are a variety of vulnerabilities, but also often been ignored, hence this article's research. When a printer connected to the network, you can conduct a port scan, read and write to upload a...

9.1AI score
Exploits0
bdu_fstec
bdu_fstec
added 2019/06/14 12:0 a.m.6 views

The vulnerability of HP Color LaserJet Pro printer’s microprogramming software, related to the falsification of inter-site requests, allows a perpetrator to trigger a service failure.

The vulnerability of HP Color LaserJet Pro printer microprogramming software is related to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

5.3CVSS5.4AI score0.02374EPSS
Exploits0References2Affected Software7
cnvd
cnvd
added 2019/05/31 12:0 a.m.4 views

Samsung SCX-824 Cross-Site Scripting Vulnerability

The Samsung SCX-824 is a multifunction printer from Samsung South Korea. A cross-site scripting vulnerability exists in the Samsung SCX-824. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability to execute...

6.1CVSS6.4AI score0.00802EPSS
Exploits0References1
osv
osv
added 2019/03/15 8:29 p.m.7 views

CVE-2018-20106

In yast2-printer up to and including version 4.0.2 the SMB printer settings don't escape characters in passwords properly. If a password with backticks or simliar characters is supplied this allows for executing code as root. This requires tricking root to enter such a password in yast...

8.1CVSS5.8AI score0.01023EPSS
Exploits0References1
Rows per page
Query Builder