Lucene search
K

3863 matches found

SUSE Linux
SUSE Linux
added 2024/11/01 3:5 p.m.5 views

Security update for cups-filters

This update for cups-filters fixes the following issues: CVE-2024-47850: cups-browsed can be abused to initiate remote DDoS against third-party targets bsc1231294 CVE-2024-47076: Fixed lack of input sanitization in cfGetPrinterAttributes5 bsc1230937. Patch Instructions: To install this SUSE updat...

9.3CVSS8.2AI score0.8344EPSS
Exploits5References8
OSV
OSV
added 2024/10/25 7:15 a.m.4 views

CVE-2024-47801

Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cross-site scripting vulnerability. Accessing a crafted URL which points to an affected product may cause malicious script executed on the web browser...

6.1CVSS5.6AI score
Exploits0References3
OSV
OSV
added 2024/10/25 7:15 a.m.5 views

CVE-2024-48870

Sharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cross-site scripting vulnerability. If crafted input is stored by an administrative user, malicious script may be executed on the web browsers of other victim users...

4.8CVSS7.2AI score0.00324EPSS
Exploits0References3
OSV
OSV
added 2024/10/25 7:15 a.m.6 views

CVE-2024-47406

Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication bypass vulnerability...

9.8CVSS5.8AI score0.00599EPSS
Exploits0References3
OSV
OSV
added 2024/10/25 7:15 a.m.4 views

CVE-2024-45842

Sharp and Toshiba Tec MFPs improperly process URI data in HTTP PUT requests resulting in a path Traversal vulnerability. Unintended internal files may be retrieved when processing crafted HTTP requests...

5.3CVSS5.7AI score0.00541EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2024/10/22 12:0 a.m.11 views

Ubuntu: Security Advisory (USN-7042-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS9.4AI score0.62269EPSS
Exploits14References2
Microsoft KB
Microsoft KB
added 2024/10/22 12:0 a.m.3 views

October 22, 2024—KB5045594 (OS Build 19045.5073) Preview

October 22, 2024—KB5045594 OS Build 19045.5073 Preview 11/17/20 For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. For an overview of Windows 10, version 22H2, see its update history page. Note Follow...

6.7AI score
Exploits0
Ubuntu
Ubuntu
added 2024/10/21 12:33 p.m.15 views

USN-7042-3: cups-browsed vulnerability

USN-7042-2 released an improved fix for cups-browsed. This update provides the corresponding update for Ubuntu 24.10. Original advisory details: Simone Margaritelli discovered that cups-browsed could be used to create arbitrary printers from outside the local network. In combination with issues i...

5.3CVSS7.9AI score0.62269EPSS
Exploits14
OSV
OSV
added 2024/10/21 12:33 p.m.3 views

USN-7042-3 cups-browsed vulnerability

USN-7042-2 released an improved fix for cups-browsed. This update provides the corresponding update for Ubuntu 24.10. Original advisory details: Simone Margaritelli discovered that cups-browsed could be used to create arbitrary printers from outside the local network. In combination with issues i...

5.3CVSS7.2AI score0.62269EPSS
Exploits14References2
SUSE Linux
SUSE Linux
added 2024/10/17 12:33 p.m.5 views

Security update for cups-filters

This update for cups-filters fixes the following issues: cups-browsed would bind on UDP INADDRANY:631 and trust any packet from any source to trigger a Get-Printer-Attributes IPP request to an attacker controlled URL. This patch removes support for the legacy CUPS and LDAP protocols, the previous...

9.3CVSS7.3AI score0.62269EPSS
Exploits14References8
NVD
NVD
added 2024/10/16 2:15 p.m.7 views

CVE-2024-49245

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in nahimsalami Ahime Image Printer ahime-image-printer.This issue affects Ahime Image Printer: from n/a through = 1.0.0...

7.5CVSS0.0055EPSS
Exploits0References1
CVE
CVE
added 2024/10/16 1:46 p.m.45 views

CVE-2024-49245

CVE-2024-49245 affects the WordPress Ahime Image Printer plugin (versions

7.5CVSS5.9AI score0.0055EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/10/16 1:46 p.m.10 views

CVE-2024-49245 WordPress Ahime Image Printer plugin <= 1.0.0 - Arbitrary File Download vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in nahimsalami Ahime Image Printer ahime-image-printer.This issue affects Ahime Image Printer: from n/a through = 1.0.0...

7.5CVSS5.2AI score0.0055EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/10/16 1:46 p.m.19 views

CVE-2024-49245 WordPress Ahime Image Printer plugin <= 1.0.0 - Arbitrary File Download vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in nahimsalami Ahime Image Printer ahime-image-printer.This issue affects Ahime Image Printer: from n/a through = 1.0.0...

7.5CVSS0.0055EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/10/16 12:0 a.m.2 views

PT-2024-33383 · Unknown · Ahime Image Printer

Name of the Vulnerable Software and Affected Versions: Ahime Image Printer versions prior to 1.0.0 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a Path Traversal vulnerability. This vulnerability affects Ahime Image Printer,...

7.5CVSS6.8AI score0.0055EPSS
Exploits0References6
CNNVD
CNNVD
added 2024/10/16 12:0 a.m.2 views

WordPress plugin Ahime Image Printer 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

7.5CVSS6.6AI score0.0055EPSS
Exploits0References3
Patchstack
Patchstack
added 2024/10/14 11:49 a.m.3 views

WordPress Ahime Image Printer plugin <= 1.0.0 - Arbitrary File Download vulnerability

Arbitrary File Download vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Ahime Image Printer versions = 1.0.0...

7.5CVSS7AI score0.0055EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/10/14 12:0 a.m.6 views

WordPress Ahime Image Printer Plugin <= 1.0.0 is vulnerable to Arbitrary File Download

Software Ahime Image Printer Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A4: Insecure Design Classification Arbitrary File Download CVE CVE-2024-49245 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID 4330a07d13a8 Credits stealthcopter Required...

7.5CVSS6.5AI score0.0055EPSS
Exploits0References1Affected Software1
OpenVAS
OpenVAS
added 2024/10/10 12:0 a.m.11 views

Ubuntu: Security Advisory (USN-7043-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.6CVSS8.1AI score0.8344EPSS
Exploits15References2
SUSE Linux
SUSE Linux
added 2024/10/09 1:28 p.m.2 views

Security update for cups-filters

This update for cups-filters fixes the following issues: CVE-2024-47176: cups-browsed binds on UDP port 631 and trusts packets that try to trigger a Get-Printer-Attributes IPP request. bsc1230939 CVE-2024-47850: cups-browsed can be abused to initiate remote DDoS against third-party targets...

9.3CVSS7.4AI score0.62269EPSS
Exploits14References8
Rows per page
Query Builder