117 matches found
EUVD-2024-55780
Sharp and Toshiba Tec rebranded multifunction printers contain an unauthenticated local file inclusion vulnerability that allows remote attackers to read arbitrary files by manipulating the path parameter in the installedemanualdown.html endpoint. Attackers can supply directory traversal sequence...
CVE-2026-60011
Sharp and Toshiba Tec MFPs multifunction printers fail to properly authorize requests to directly access certain image data stored to the affected product...
CVE-2026-63563
Sharp and Toshiba Tec MFPs shipped for a market with the user authentication feature disabled by default. When used with this initial configuration, address book editing and Document Filing features can be accessed without authentication, potentially exposing sensitive configuration data. The aff...
CVE-2026-63563
Sharp and Toshiba Tec MFPs multifunction printers for a certain market have been shipped with the user authentication feature disabled in the initial configuration. When used with the initial configuration, the address book editing and a range of features related to Document Filing can be accesse...
CVE-2026-63545
Sharp and Toshiba Tec MFPs multifunction printers caches data internally when printing, and leave them uncleared. They may be accessed later by other users...
EUVD-2026-52250
Sharp and Toshiba Tec MFPs multifunction printers caches data internally when printing, and leave them uncleared. They may be accessed later by other users...
CVE-2026-63545
Sharp and Toshiba Tec MFPs multifunction printers caches data internally when printing, and leave them uncleared. They may be accessed later by other users...
CVE-2026-63545
CVE-2026-63545 affects Sharp and Toshiba Tec MFPs (printers); data cached during printing may remain uncleared and be readable by subsequent users. CVSS metrics show LOW severity (2.4) for both 4.0 and 3.1 vectors. No exploitation details or remediation are specified in the provided documents.
EUVD-2026-52249
Sharp and Toshiba Tec MFPs multifunction printers fail to properly authorize requests to directly access certain image data stored to the affected product...
CVE-2026-60011
CVE-2026-60011 affects Sharp and Toshiba Tec MFPs. The issue is improper authorization that could allow direct access to certain image data stored on the affected devices via a network request. According to the provided metrics, CVSSv3.1 base score is 5.3 (MEDIUM) with low confidentiality impact,...
CVE-2026-60011
Sharp and Toshiba Tec MFPs multifunction printers fail to properly authorize requests to directly access certain image data stored to the affected product...
CVE-2026-63563: Initialization of a Resource with an Insecure Default
Sharp and Toshiba Tec MFPs multifunction printers for a certain market have been shipped with the user authentication feature disabled in the initial configuration. When used with the initial configuration, the address book editing and a range of features related to Document Filing can be accesse...
CVE-2026-60011: Direct Request
Sharp and Toshiba Tec MFPs multifunction printers fail to properly authorize requests to directly access certain image data stored to the affected product...
CVE-2026-63545: Incomplete Cleanup
Sharp and Toshiba Tec MFPs multifunction printers caches data internally when printing, and leave them uncleared. They may be accessed later by other users...
PT-2026-67246
Sharp and Toshiba Tec MFPs multifunction printers fail to properly authorize requests to directly access certain image data stored to the affected product...
PT-2026-67259
Sharp and Toshiba Tec MFPs multifunction printers caches data internally when printing, and leave them uncleared. They may be accessed later by other users...
SHARP MFPs Authentication Bypass (CVE-2024-47406)
Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication bypass vulnerability. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...
SHARP MFPs Out-of-Bounds Vulnerabilities (CVE-2024-45829)
Sharp and Toshiba Tec MFPs provide the web page to download data, where query parameters in HTTP requests are improperly processed and resulting in an Out-of-bounds Read vulnerability. Crafted HTTP requests may cause affected products crashed. This plugin only works with Tenable.ot. Please visit...
SHARP MFPs Cross-Site Scripting (CVE-2024-47801)
Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cross-site scripting vulnerability. Accessing a crafted URL which points to an affected product may cause malicious script executed on the web browser. This plugin only works with Tenable.ot...
SHARP MFPs Out-of-Bounds Vulnerabilities (CVE-2024-43424)
Sharp and Toshiba Tec MFPs improperly process HTTP request headers, resulting in an Out-of-bounds Read vulnerability. Crafted HTTP requests may cause affected products crashed. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...