Lucene search
K

48 matches found

Tenable Nessus
Tenable Nessus
added 2026/02/05 12:0 a.m.2 views

EPSON Printers Improper Input Validation (CVE-2023-38556)

Improper input validation vulnerability in SEIKO EPSON printer Web Config allows a remote attacker to turned off the printer. Note Web Config is the software that allows users to check the status and change the settings of SEIKO EPSON printers via a web browser. Web Config is pre-installed in som...

7.5CVSS7.3AI score0.00399EPSS
Exploits0References3
Malwarebytes
Malwarebytes
added 2025/08/18 3:49 p.m.3 views

Instagram Map: What is it and how do I control it?

Instagram Map is a new feature—for Instagram, anyway—that users may have enabled without being fully aware of the consequences. The Map feature launched in the US on August 6, 2025, and is reportedly planned for a global rollout "soon." As of mid-August 2025, not all users outside the US,...

7.2AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/23 2:45 a.m.3 views

CVE-2023-21461

Improper authorization vulnerability in AutoPowerOnOffConfirmDialog in Settings prior to SMR Mar-2023 Release 1 allows local attacker to turn device off via unprotected activity...

5.5CVSS6.5AI score0.00051EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:31 a.m.8 views

CVE-2023-1341

The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on the ajaxdeactivate function. This makes it possible for unauthenticated attackers to turn off...

4.3CVSS6.4AI score0.00065EPSS
Exploits0References1
OSV
OSV
added 2024/02/27 9:31 a.m.17 views

GHSA-PX7W-C9GW-7GJ3 Apache James server: Privilege escalation via JMX pre-authentication deserialization

Apache James prior to version 3.7.5 and 3.8.0 exposes a JMX endpoint on localhost subject to pre-authentication deserialisation of untrusted data. Given a deserialisation gadjet, this could be leveraged as part of an exploit chain that could result in privilege escalation. Note that by default JM...

9.8CVSS9.4AI score0.00439EPSS
Exploits0References2
Prion
Prion
added 2024/02/27 9:15 a.m.15 views

Authentication flaw

Apache James prior to version 3.7.5 and 3.8.0 exposes a JMX endpoint on localhost subject to pre-authentication deserialisation of untrusted data. Given a deserialisation gadjet, this could be leveraged as part of an exploit chain that could result in privilege escalation. Note that by default JM...

7.1AI score0.00439EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/08/02 7:19 a.m.10 views

CVE-2023-38556

Improper input validation vulnerability in SEIKO EPSON printer Web Config allows a remote attacker to turned off the printer. Note Web Config is the software that allows users to check the status and change the settings of SEIKO EPSON printers via a web browser. Web Config is pre-installed in som...

7.6AI score0.00399EPSS
Exploits0References2
NVD
NVD
added 2023/03/16 9:15 p.m.11 views

CVE-2023-21461

Improper authorization vulnerability in AutoPowerOnOffConfirmDialog in Settings prior to SMR Mar-2023 Release 1 allows local attacker to turn device off via unprotected activity...

5.5CVSS4.5AI score0.00051EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2023/03/16 9:15 p.m.2 views

CVE-2023-21461

Improper authorization vulnerability in AutoPowerOnOffConfirmDialog in Settings prior to SMR Mar-2023 Release 1 allows local attacker to turn device off via unprotected activity...

5.5CVSS6.1AI score0.00051EPSS
Exploits0References2
Prion
Prion
added 2023/03/16 9:15 p.m.15 views

Authorization

Improper authorization vulnerability in AutoPowerOnOffConfirmDialog in Settings prior to SMR Mar-2023 Release 1 allows local attacker to turn device off via unprotected activity...

1.7CVSS5.3AI score0.00051EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2022/05/23 8:16 a.m.1 views

CVE-2022-1192

The Turn off all comments WordPress plugin through 1.0 does not sanitise and escape the rows parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

6.1CVSS5.8AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/05/23 8:16 a.m.3 views

CVE-2022-1192

The Turn off all comments WordPress plugin through 1.0 does not sanitise and escape the rows parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.3AI score0.00293EPSS
Exploits2References2
CNNVD
CNNVD
added 2022/05/23 12:0 a.m.1 views

WordPress plugin Turn off all comments 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed using the PHP language. A cross-site scripting vulnerability exists in the WordPress Turn off all comments plugin, which stems from a failure to clean and escape rows parameters before...

6.1CVSS5.6AI score0.00293EPSS
Exploits2References2
Wired Threat Level
Wired Threat Level
added 2021/05/11 7:18 p.m.52 views

How Amazon Sidewalk Works—and Why You May Want to Turn It Off

The premise is convenient. But the ecommerce giant’s record on privacy isn't exactly inspiring...

3.1AI score
Exploits0
OpenVAS
OpenVAS
added 2018/08/07 12:0 a.m.10 views

Microsoft Windows: Turn off app notifications on the lock screen

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winlockscreenappnotifications.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Turn off app notifications on the lock screen Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

7.3AI score
Exploits0
OpenVAS
OpenVAS
added 2018/06/28 12:0 a.m.38 views

Microsoft Windows: Turn off toast notifications on the lock screen

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wintoastlockscreen.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Turn off toast notifications on the lock screen users listed in HKU Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

7.3AI score
Exploits0
OpenVAS
OpenVAS
added 2018/06/25 12:0 a.m.205 views

Microsoft Windows: Turn off printing over HTTP

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winprintingoverhttp.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Turn off printing over HTTP Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

7.3AI score
Exploits0
OpenVAS
OpenVAS
added 2018/06/25 12:0 a.m.18 views

Microsoft Windows: Turn off access to the Store

This policy setting specifies whether to use the Store service for finding an application to open a file with an unhandled file type or protocol association. When a user opens a file type or protocol that is not associated with any applications on the computer, the user is given the choice to...

7AI score
Exploits0References2
OpenVAS
OpenVAS
added 2018/04/23 12:0 a.m.26 views

Microsoft Windows: Turn off Windows Location Provider

This policy setting turns off the Windows Location Provider feature. If enabled, the Windows Location Provider feature is turned off, and programs are not able to use the Windows Location Provider feature. OpenVAS Vulnerability Test $Id: winlocationprovider.nasl 11363 2018-09-12 13:46:05Z emoss $...

7.2AI score
Exploits0
The Hacker News
The Hacker News
added 2016/02/26 5:43 a.m.11 views

Windows 10 Started Showing Ads on LockScreen — Here's How to Turn It OFF

If you've upgraded your older version of Windows OS to an all new Windows 10 operating system then you may have noticed an advertisement appearing on your desktop or laptop’s lock screen over the past couple of days. Yes, this is what Microsoft has chosen to generate revenue after offering Free...

6.6AI score
Exploits0
Rows per page
Query Builder