Security update for shibboleth-sp (moderate)

openSUSE Security Update: Security update for shibboleth-sp Announcement ID: openSUSE-SU-2020:0020-1 Rating: moderate References: 1157471 Cross-References: CVE-2019-19191 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

CVE-2019-14304

Ricoh SP C250DN 1.06 devices allow CSRF...

CVE-2019-14302

On Ricoh SP C250DN 1.06 devices, a debug port can be used...

CVE-2019-14304

Ricoh SP C250DN 1.06 devices allow CSRF...

CVE-2019-14302

On Ricoh SP C250DN 1.06 devices, a debug port can be used...

CVE-2019-14306

Ricoh SP C250DN 1.06 devices have Incorrect Access Control issue 2 of 2...

CVE-2019-14301

Ricoh SP C250DN 1.06 devices have Incorrect Access Control issue 1 of 2...

CVE-2019-14306

Ricoh SP C250DN 1.06 devices have Incorrect Access Control issue 2 of 2...

CVE-2019-14301

Ricoh SP C250DN 1.06 devices have Incorrect Access Control issue 1 of 2...

Cross site request forgery (csrf)

Ricoh SP C250DN 1.06 devices allow CSRF...

Design/Logic Flaw

Ricoh SP C250DN 1.06 devices have Incorrect Access Control issue 1 of 2...

Design/Logic Flaw

On Ricoh SP C250DN 1.06 devices, a debug port can be used...

CVE-2019-14301

Ricoh SP C250DN 1.06 devices have Incorrect Access Control issue 1 of 2...

CVE-2019-14301

Ricoh SP C250DN 1.06 devices are affected by CVE-2019-14301: Incorrect Access Control (Information Disclosure). The vulnerability is documented with a CVSS v3 base score of 7.5 (Network, Low attack complexity, No privileges required, User interaction not required; Confidentiality impact High). Pu...

CVE-2019-14302

Affected product: Ricoh SP C250DN 1.06. Vulnerability: Debug port accessible on the device allows exploitation. Root cause: presence of an unprotected debug interface. Impact: With physical access, an attacker may execute arbitrary code, alter settings, or disable functions, and may access sensit...

CVE-2019-14302

On Ricoh SP C250DN 1.06 devices, a debug port can be used...

CVE-2019-14306

CVE-2019-14306 affects Ricoh SP C250DN (firmware 1.06) with an Incorrect Access Control issue. Connected sources corroborate that the vulnerability concerns access control on Ricoh printers, with multiple advisories (JVN/CVE listings, Red Hat entry, CNVD) referencing Ricoh SP C250DN 1.06 and rela...

CVE-2019-14306

Ricoh SP C250DN 1.06 devices have Incorrect Access Control issue 2 of 2...

CVE-2019-14304

Ricoh SP C250DN 1.06 devices allow CSRF...

CVE-2019-14304

The CVE-2019-14304 entry concerns Ricoh SP C250DN 1.06 devices with a Cross-site Request Forgery (CSRF) vulnerability in the device’s web interface. The issue is described as CSRF allowing unintended operations to be performed when a user visits a crafted page; multiple sources (NVD, Red Hat advi...