EUVD-2005-2201

Malware in sbrugna...

EUVD-2005-2203

Malware in sbrugna...

EUVD-2005-2202

Malware in sbrugna...

CVE-2005-2202

Cross-site scripting XSS vulnerability in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3545, version 0.001.04.044 through 0.001.04.504, allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

Threat Outbreak Alert: Fake Scanned Document Notification Email Messages on April 2, 2014

Medium Alert ID: 33620 First Published: 2014 April 2 15:30 GMT Last Updated: 2014 April 4 14:02 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a scanned document for the recipient. The text in the email message attempts...

Threat Outbreak Alert: Fake Scanned Document Attachment Email Messages on November 26, 2013

Medium Alert ID: 28724 First Published: 2013 March 26 13:15 GMT Last Updated: 2013 November 27 15:41 GMT Version: 38 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a scanned document sent from a Xerox WorkCentre Pro device for the...

Threat Outbreak Alert: Fake Xerox Scan Attachment Email Messages on May 6, 2015

Medium Alert ID: 25325 First Published: 2012 March 6 18:23 GMT Last Updated: 2015 May 6 12:23 GMT Version: 75 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a scanned document from a Xerox WorkCentre Pro device. The text in the email...

CVE-2009-1656

The CVE-2009-1656 entry pertains to Xerox WorkCentre/WorkCentre Pro devices: models 232, 238, 245, 255, 265, 275 and 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, 7675. Documented issue: a remote command-injection vulnerability in the device web server that allows arbitrary commands to be...

CVE-2008-2825

Cross-site scripting XSS vulnerability in the embedded Web Server in Xerox WorkCentre M123, M128, and 133 and WorkCentre Pro 123, 128, and 133 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2006-6470

The SNMP Agent in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 returns no error for a non-writable object, which has unknown impact and attack vectors. NOTE: due to the vagueness of the advisory, it is not clear whether this is...

CVE-2006-6473

Multiple unspecified vulnerabilities in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 have unknown impact and attack vectors, related to 1 an Immediate Image Overwrite IIO error message at the Local User Interface LUI if overwri...

CVE-2006-6467

Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 do not properly restrict access to SMB file resources, which allows remote attackers to gain unspecified file or directory access via vectors related to 1 visibility of the SMB "Home...

CVE-2006-6468

Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 do not check the Fully Qualified Domain Name FQDN during a "Validate Repository SSL Certificate" scan, which has unknown impact and attack vectors, possibly related to spoofed...

CVE-2006-6469

Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 do not block the postgres port 5432/tcp, which has unknown impact and remote attack vectors, probably related to unauthorized connections to a PostgreSQL daemon...

CVE-2006-6471

Xerox WorkCentre and WorkCentre Pro betroffen: Versionen vor 12.050.03.000, 13.x vor 13.050.03.000 und 14.x vor 14.050.03.000 verwenden schwache Berechtigungen für bestimmte Dateien, was unkontrollierten Zugriff auf diese Dateien ermöglicht. Die Schwachstelle ergibt sich aus den Dateiberechtigung...

CVE-2006-6469

CVE-2006-6469 affects Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000. The issue is that these devices do not block the PostgreSQL port 5432/tcp, which could permit unauthorized connections to a PostgreSQL daemon. The available do...

CVE-2006-6472

The CVE-2006-6472 entry relates to the httpd.conf configuration in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000, where port 443 is configured to be always active. This describes a configuration issue with unknown impact and rem...

CVE-2006-6473

Multiple unspecified vulnerabilities in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 have unknown impact and attack vectors, related to 1 an Immediate Image Overwrite IIO error message at the Local User Interface LUI if overwri...

CVE-2006-6469

Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 do not block the postgres port 5432/tcp, which has unknown impact and remote attack vectors, probably related to unauthorized connections to a PostgreSQL daemon...

CVE-2006-6467

Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 do not properly restrict access to SMB file resources, which allows remote attackers to gain unspecified file or directory access via vectors related to 1 visibility of the SMB "Home...