CVE-2024-12782 Fujifilm Business Innovation Apeos C3070/Apeos C5570/Apeos C6580 Web Interface index.html#hashHome improper authorization

A vulnerability has been found in Fujifilm Business Innovation Apeos C3070, Apeos C5570 and Apeos C6580 up to 24.8.28 and classified as critical. This vulnerability affects unknown code of the file /home/index.htmlhashHome of the component Web Interface. The manipulation leads to improper...

PT-2024-17732 · Fujifilm · Fujifilm Apeos C3070 +2

Name of the Vulnerable Software and Affected Versions: Fujifilm Apeos C3070, Apeos C5570, and Apeos C6580 versions up to 24.8.28 Description: A critical issue has been reported, affecting the Web Interface component of the Fujifilm Apeos devices. The issue is related to improper authorization and...

Fujifilm多款产品 安全漏洞

Fujifilm Apeos C3070 and others are a printer from Fujifilm Japan. A security vulnerability exists in various Fujifilm products, which stems from a web interface that contains an improper authorization issue. The following products are affected: Fujifilm Apeos C3070, Fujifilm Apeos C5570 and...

PT-2024-10872 · Ibm · Ibm Sterling B2B Integrator Standard Edition

Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator Standard Edition versions 5.2.0.0 through 6.1.1.0 Description: This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials...

CVE-2024-55516

A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 v3.90. The component affected by this issue is /uploadsysconfig.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded, potentially leading to unauthorized access to server permissio...

CVE-2024-55514

A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90. The component affected by this issue is /uploadsfmig.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded, potentially leading to unauthorized access to server permissions...

CVE-2024-55513

A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90. The component affected by this issue is /uploadnetaction.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded, potentially leading to unauthorized access to server permission...

CVE-2024-55513

A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90. The component affected by this issue is /uploadnetaction.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded, potentially leading to unauthorized access to server permission...

CVE-2024-55514

A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90. The component affected by this issue is /uploadsfmig.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded, potentially leading to unauthorized access to server permissions...

CVE-2024-55515

A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90. The component affected by this issue is /uploadipslib.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded...

CVE-2024-55516

A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 v3.90. The component affected by this issue is /uploadsysconfig.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded, potentially leading to unauthorized access to server permissio...

PT-2024-36538 · Raisecom · Raisecom Msg2200 +3

Name of the Vulnerable Software and Affected Versions: Raisecom MSG1200 version 3.90 Raisecom MSG2100E version 3.90 Raisecom MSG2200 version 3.90 Raisecom MSG2300 version 3.90 Description: A vulnerability was found in the web interface of Raisecom devices, specifically in the /upload sfmig.php...

CVE-2024-55514

Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 (version 3.90) are affected by a web interface vulnerability in the /upload_sfmig.php component. By crafting a suitable form name, arbitrary files can be uploaded, potentially leading to unauthorized access to server permissions. Mitigation guidance...

CVE-2024-55514

A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90. The component affected by this issue is /uploadsfmig.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded, potentially leading to unauthorized access to server permissions...

CVE-2024-55514

A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90. The component affected by this issue is /uploadsfmig.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded, potentially leading to unauthorized access to server permissions...

CVE-2024-55513

CVE-2024-55513 affects Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 (version 3.90). The web interface endpoint /upload_netaction.php allows crafting a form name to upload arbitrary files, potentially leading to unauthorized server access. Reports from multiple sources confirm the same issue; PT-2024...

PT-2024-29789 · Hcl · Hcl Bigfix Inventory

Name of the Vulnerable Software and Affected Versions: HCL BigFix Inventory affected versions not specified Description: The issue is related to an improper handling of insufficient permissions or privileges in HCL BigFix Inventory. An attacker with access via a read-only account can possibly...

CVE-2024-55516

The CVE concerns Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 (v3.90). The web interface vulnerability is in /upload_sysconfig.php where crafting a specific form name allows arbitrary file uploads, potentially granting unauthorized access to server permissions. Public references reiterate the...

CVE-2024-55516

A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 v3.90. The component affected by this issue is /uploadsysconfig.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded, potentially leading to unauthorized access to server permissio...

CVE-2024-55515

The CVE-2024-55515 issue affects Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 (version 3.90). The vulnerability resides in the web interface component /upload_ipslib.php, where crafting a specific form name enables arbitrary file upload. This exposes the devices to potential high-impact compro...