Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-14277 State: PUBLISHED Published: 2019-07-26T03:33:12 Last Updated: 2024-08-05T00:12:42.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Axway SecureTransport 5.x through 5.3 (or 5.x through 5.5 with certain API configuration) is vulnerable to unauthenticated blind XML injection (and XXE) in the resetPassword functionality via the REST API. This vulnerability can lead to local file disclosure, DoS, or URI invocation attacks (i.e., SSRF with resultant remote code execution). NOTE: The vendor disputes this issues as not being a vulnerability because “All attacks that use external entities are blocked (no external DTD or file inclusions, no SSRF). The impact on c
cause “All attacks that use external entities are blocked (no external DTD or file inclusions, no SSRF). The impact on confidentiality, integrity and availability is not proved on any version. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/47150 - https://gist.githubusercontent.com/zeropwn/59f17727dfaba239b0ace6f33b752974/raw/9b6541a94ac5ec181a88e6c84cb3e3001025b8fd/Axway%2520SecureTransport%25205.x%2520Unauthenticated%2520XXE - https://zero.lol/2019-07-21-axway-securetransport-xml-injection/ - https://community.axway.com/s/article/SecureTransport-Security-Notice-re-CVE-2019-14277-Unauthenticated-XML-Injection-and-XXE - https://community.
m/s/article/SecureTransport-Security-Notice-re-CVE-2019-14277-Unauthenticated-XML-Injection-and-XXE - https://community.axway.com/s/article/SecureTransport-Security-Notice
CVE ID: CVE-2019-14278 State: PUBLISHED Published: 2019-09-05T17:29:00 Last Updated: 2024-08-05T00:12:43.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Knowage through 6.1.1, an unauthenticated user can enumerated valid usernames via the ChangePwdServlet page. Additional Analyst Notes: - CVE Program Container: References: - https://blog.contentsecurity.com.au/knowage-user-enumeration
CVE ID: CVE-2019-14280 State: PUBLISHED Published: 2019-07-26T03:52:46 Last Updated: 2024-08-05T00:12:42.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: In some circumstances, Craft 2 before 2.7.10 and 3 before 3.2.6 wasn't stripping EXIF data from user-uploaded images when it was configured to do so, potentially exposing personal/geolocation data to the public. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/craftcms/cms/blob/develop-v2/CHANGELOG-v2.md#2710---2019-07-24 - https://github.com/craftcms/cms/blob/develop/CHANGELOG-v3.md#326---2019-07-23 - http://packetstormsecurity.com/files/154276/Craft-CMS-2.7.9-3.2.5-Information-Disclosure.h
ELOG-v3.md#326---2019-07-23 - http://packetstormsecurity.com/files/154276/Craft-CMS-2.7.9-3.2.5-Information-Disclosure.html
CVE ID: CVE-2019-14281 State: PUBLISHED Published: 2019-07-26T04:06:23 Last Updated: 2024-08-05T00:12:43.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: The datagrid gem 1.0.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rubygems/rubygems.org/issues/2072 - https://rubygems.org/gems/datagrid/versions - https://snyk.io/vuln/SNYK-RUBY-DATAGRID-455500
CVE ID: CVE-2019-14282 State: PUBLISHED Published: 2019-07-26T04:06:40 Last Updated: 2024-08-05T00:12:43.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: The simple_captcha2 gem 0.2.3 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rubygems/rubygems.org/issues/2073 - https://rubygems.org/gems/simple_captcha2/versions/ - https://snyk.io/vuln/SNYK-RUBY-SIMPLECAPTCHA2-455501
CVE ID: CVE-2019-14283 State: PUBLISHED Published: 2019-07-26T12:24:47 Last Updated: 2024-08-05T00:12:42.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 5.2.3, set_geometry in drivers/block/floppy.c does not validate the sect and head fields, as demonstrated by an integer overflow and out-of-bounds read. It can be triggered by an unprivileged local user when a floppy disk has been inserted. NOTE: QEMU creates the floppy device by default. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/da99466ac243f15fbba65bd261bfc75ffa1532b6 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/c
inux/commit/da99466ac243f15fbba65bd261bfc75ffa1532b6 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=da99466ac243f15fbba65bd261bfc75ffa1532b6 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.3 - https://www.debian.org/security/2019/dsa-4495 - https://seclists.org/bugtraq/2019/Aug/13 - https://seclists.org/bugtraq/2019/Aug/18 - https://www.debian.org/security/2019/dsa-4497 - https://lists.debian.org/debian-lts-announce/2019/08/msg00016.html - https://seclists.org/bugtraq/2019/Aug/26 - https://lists.debian.org/debian-lts-announce/2019/08/msg00017.html - http://packetstormsecurity.com/files/154059/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates
08/msg00017.html - http://packetstormsecurity.com/files/154059/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00055.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00056.html - https://usn.ubuntu.com/4117-1/ - https://usn.ubuntu.com/4114-1/ - https://usn.ubuntu.com/4115-1/ - https://usn.ubuntu.com/4116-1/ - https://usn.ubuntu.com/4118-1/ - https://security.netapp.com/advisory/ntap-20190905-0002/ - http://packetstormsecurity.com/files/154408/Kernel-Live-Patch-Security-Notice-LSN-0055-1.html - http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html
CVE ID: CVE-2019-14284 State: PUBLISHED Published: 2019-07-26T12:25:01 Last Updated: 2024-08-05T00:12:43.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 5.2.3, drivers/block/floppy.c allows a denial of service by setup_format_params division-by-zero. Two consecutive ioctls can trigger the bug: the first one should set the drive geometry with .sect and .rate values that make F_SECT_PER_TRACK be zero. Next, the floppy format operation should be called. It can be triggered by an unprivileged local user even when a floppy disk has not been inserted. NOTE: QEMU creates the floppy device by default. Additional Analyst Notes: - CVE Program Container: Refer
been inserted. NOTE: QEMU creates the floppy device by default. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.3 - https://github.com/torvalds/linux/commit/f3554aeb991214cbfafd17d55e2bfddb50282e32 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f3554aeb991214cbfafd17d55e2bfddb50282e32 - https://www.debian.org/security/2019/dsa-4495 - https://seclists.org/bugtraq/2019/Aug/13 - https://seclists.org/bugtraq/2019/Aug/18 - https://www.debian.org/security/2019/dsa-4497 - https://lists.debian.org/debian-lts-announce/2019/08/msg00016.html - https://seclists.org/bugtraq/2019/Aug/26 - https://list
s://lists.debian.org/debian-lts-announce/2019/08/msg00016.html - https://seclists.org/bugtraq/2019/Aug/26 - https://lists.debian.org/debian-lts-announce/2019/08/msg00017.html - http://packetstormsecurity.com/files/154059/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00055.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00056.html - https://usn.ubuntu.com/4117-1/ - https://usn.ubuntu.com/4114-1/ - https://usn.ubuntu.com/4115-1/ - https://usn.ubuntu.com/4116-1/ - https://usn.ubuntu.com/4118-1/ - https://security.netapp.com/advisory/ntap-20190905-0002/ - http://packetstormsecurity.com/files
usn.ubuntu.com/4118-1/ - https://security.netapp.com/advisory/ntap-20190905-0002/ - http://packetstormsecurity.com/files/154408/Kernel-Live-Patch-Security-Notice-LSN-0055-1.html - http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html
CVE ID: CVE-2019-14286 State: PUBLISHED Published: 2019-07-27T17:02:34 Last Updated: 2024-08-05T00:12:43.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: In app/webroot/js/event-graph.js in MISP 2.4.111, a stored XSS vulnerability exists in the event-graph view when a user toggles the event graph view. A malicious MISP event must be crafted in order to trigger the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/26bedd8a68c32a2f14460a8eac2a9fb09923392b
CVE ID: CVE-2019-14287 State: PUBLISHED Published: 2019-10-17T17:03:28 Last Updated: 2024-08-05T00:12:43.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a "sudo -u \#$((0xffffffff))" command. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2019/10/14/1 - https://usn.ubuntu.com/4154-1/ - https://www.debian.org/security/2019/dsa-454
wall.com/lists/oss-security/2019/10/14/1 - https://usn.ubuntu.com/4154-1/ - https://www.debian.org/security/2019/dsa-4543 - https://seclists.org/bugtraq/2019/Oct/21 - https://seclists.org/bugtraq/2019/Oct/20 - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00042.html - http://packetstormsecurity.com/files/154853/Slackware-Security-Advisory-sudo-Updates.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IP7SIOAVLSKJGMTIULX52VQUPTVSC43U/ - https://www.sudo.ws/alerts/minus_1_uid.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00047.html - https://security.netapp.com/advisory/ntap-20191017-0003/ - https:
org/opensuse-security-announce/2019-10/msg00047.html - https://security.netapp.com/advisory/ntap-20191017-0003/ - https://www.openwall.com/lists/oss-security/2019/10/15/2 - https://lists.debian.org/debian-lts-announce/2019/10/msg00022.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TUVAOZBYUHZS56A5FQSCDVGXT7PW7FL2/ - https://support.f5.com/csp/article/K53746212?utm_source=f5support&amp%3Butm_medium=RSS - http://www.openwall.com/lists/oss-security/2019/10/24/1 - https://access.redhat.com/errata/RHSA-2019:3197 - https://access.redhat.com/errata/RHSA-2019:3205 - https://access.redhat.com/errata/RHSA-2019:3204 - https://access.redhat.com/er
access.redhat.com/errata/RHSA-2019:3205 - https://access.redhat.com/errata/RHSA-2019:3204 - https://access.redhat.com/errata/RHSA-2019:3209 - https://access.redhat.com/errata/RHSA-2019:3219 - http://www.openwall.com/lists/oss-security/2019/10/29/3 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NPLAM57TPJQGKQMNG6RHFBLACD6K356N/ - https://access.redhat.com/errata/RHSA-2019:3278 - https://resources.whitesourcesoftware.com/blog-whitesource/new-vulnerability-in-sudo-cve-2019-14287 - https://access.redhat.com/errata/RHSA-2019:3694 - https://access.redhat.com/errata/RHSA-2019:3755 - https://access.redhat.com/errata/RHSA-2019:3754 - https://access.
94 - https://access.redhat.com/errata/RHSA-2019:3755 - https://access.redhat.com/errata/RHSA-2019:3754 - https://access.redhat.com/errata/RHSA-2019:3895 - https://access.redhat.com/errata/RHSA-2019:3916 - https://access.redhat.com/errata/RHBA-2019:3248 - https://access.redhat.com/errata/RHSA-2019:3941 - https://access.redhat.com/errata/RHSA-2019:4191 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03976en_us - https://access.redhat.com/errata/RHSA-2020:0388 - https://security.gentoo.org/glsa/202003-12 - http://www.openwall.com/lists/oss-security/2021/09/14/2
CVE ID: CVE-2019-14288 State: PUBLISHED Published: 2019-07-27T18:39:45 Last Updated: 2024-08-05T00:12:43.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xpdf 4.01.01. There is an Integer overflow in the function JBIG2Bitmap::combine at JBIG2Stream.cc for the "one byte per line" case. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/tree/master/xpdf/4.01.01 - https://forum.xpdfreader.com/viewtopic.php?f=3&t=41851
CVE ID: CVE-2019-14289 State: PUBLISHED Published: 2019-07-27T18:39:51 Last Updated: 2024-08-05T00:12:43.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xpdf 4.01.01. There is an integer overflow in the function JBIG2Bitmap::combine at JBIG2Stream.cc for the "multiple bytes per line" case. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/tree/master/xpdf/4.01.01 - https://forum.xpdfreader.com/viewtopic.php?f=3&t=41851
CVE ID: CVE-2019-14290 State: PUBLISHED Published: 2019-07-27T18:39:58 Last Updated: 2024-08-05T00:12:43.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xpdf 4.01.01. There is an out of bounds read in the function GfxPatchMeshShading::parse at GfxState.cc for typeA==6 case 2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/tree/master/xpdf/4.01.01 - https://forum.xpdfreader.com/viewtopic.php?f=3&t=41851
CVE ID: CVE-2019-14291 State: PUBLISHED Published: 2019-07-27T18:40:04 Last Updated: 2024-08-05T00:12:43.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xpdf 4.01.01. There is an out of bounds read in the function GfxPatchMeshShading::parse at GfxState.cc for typeA==6 case 3. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/tree/master/xpdf/4.01.01 - https://forum.xpdfreader.com/viewtopic.php?f=3&t=41851
CVE ID: CVE-2019-14292 State: PUBLISHED Published: 2019-07-27T18:40:12 Last Updated: 2024-08-05T00:12:43.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xpdf 4.01.01. There is an out of bounds read in the function GfxPatchMeshShading::parse at GfxState.cc for typeA!=6 case 1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/tree/master/xpdf/4.01.01 - https://forum.xpdfreader.com/viewtopic.php?f=3&t=41851
CVE ID: CVE-2019-14293 State: PUBLISHED Published: 2019-07-27T18:40:18 Last Updated: 2024-08-05T00:12:43.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xpdf 4.01.01. There is an out of bounds read in the function GfxPatchMeshShading::parse at GfxState.cc for typeA!=6 case 2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/tree/master/xpdf/4.01.01 - https://forum.xpdfreader.com/viewtopic.php?f=3&t=41851
CVE ID: CVE-2019-14294 State: PUBLISHED Published: 2019-07-27T18:40:27 Last Updated: 2024-08-05T00:12:43.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xpdf 4.01.01. There is a use-after-free in the function JPXStream::fillReadBuf at JPXStream.cc, due to an out of bounds read. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/tree/master/xpdf/4.01.01 - https://forum.xpdfreader.com/viewtopic.php?f=3&t=41851
CVE ID: CVE-2019-14295 State: PUBLISHED Published: 2019-07-27T18:40:33 Last Updated: 2024-08-05T00:12:43.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Integer overflow in the getElfSections function in p_vmlinx.cpp in UPX 3.95 allows remote attackers to cause a denial of service (crash) via a skewed offset larger than the size of the PE section in a UPX packed executable, which triggers an allocation of excessive memory. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/upx/upx/issues/286 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MOCJ43HTM45GZCAQ2FLEBDNBM76V22RG/ - https://lists.fe
rg/archives/list/package-announce%40lists.fedoraproject.org/message/MOCJ43HTM45GZCAQ2FLEBDNBM76V22RG/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T52JATXV6NTPTMGXCRGT37H6KXERYNZN/
CVE ID: CVE-2019-14296 State: PUBLISHED Published: 2019-07-27T18:40:41 Last Updated: 2024-08-05T00:12:43.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: canUnpack in p_vmlinx.cpp in UPX 3.95 allows remote attackers to cause a denial of service (SEGV or buffer overflow, and application crash) or possibly have unspecified other impact via a crafted UPX packed file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/upx/upx/issues/287 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MOCJ43HTM45GZCAQ2FLEBDNBM76V22RG/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
age/MOCJ43HTM45GZCAQ2FLEBDNBM76V22RG/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T52JATXV6NTPTMGXCRGT37H6KXERYNZN/ - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00007.html
CVE ID: CVE-2019-14297 State: PUBLISHED Published: 2019-07-27T22:36:27 Last Updated: 2024-08-05T00:12:43.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Veeam ONE Reporter 9.5.0.3201 allows XSS via the Add/Edit Widget with a crafted Caption field to setDashboardWidget in CommonDataHandlerReadOnly.ashx. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/46767
CVE ID: CVE-2019-14298 State: PUBLISHED Published: 2019-07-27T22:36:53 Last Updated: 2024-08-05T00:12:43.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Veeam ONE Reporter 9.5.0.3201 allows XSS via a crafted Description(config) field to addDashboard or editDashboard in CommonDataHandlerReadOnly.ashx. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/46766
CVE ID: CVE-2019-14299 State: PUBLISHED Published: 2020-03-13T18:50:21 Last Updated: 2024-08-05T00:12:43.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ricoh SP C250DN 1.05 devices have an Authentication Method Vulnerable to Brute Force Attacks. Some Ricoh printers did not implement account lockout. Therefore, it was possible to obtain the local account credentials by brute force. Additional Analyst Notes: - CVE Program Container: References: - https://www.ricoh-usa.com/en/support-and-download - https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-ricoh-printers/
CVE ID: CVE-2019-14300 State: PUBLISHED Published: 2019-08-26T14:22:06 Last Updated: 2024-08-05T00:12:43.251Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Several Ricoh printers have multiple buffer overflows parsing HTTP cookie headers, which allow an attacker to cause a denial of service or code execution via crafted requests to the web server. Affected firmware versions depend on the printer models. One affected configuration is cpe:2.3:o:ricoh:sp_c250dn_firmware:-:*:*:*:*:*:*:* up to (including) 1.06 running on cpe:2.3:o:ricoh:sp_c250dn:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252dn:-:*:*:*:*:*:*:*. Anot
o (including) 1.06 running on cpe:2.3:o:ricoh:sp_c250dn:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252dn:-:*:*:*:*:*:*:*. Another affected configuration is cpe:2.3:o:ricoh:sp_c250sf_firmware:-:*:*:*:*:*:*:* up to (including) 1.12 running on cpe:2.3:o:ricoh:sp_c250sf:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252sf:-:*:*:*:*:*:*:*. Additional Analyst Notes: - CVE Program Container: References: - https://www.ricoh-usa.com/en/support-and-download - https://www.ricoh.com/info/2019/0823_1/ - http://jvn.jp/en/jp/JVN11708203/index.html
CVE ID: CVE-2019-14301 State: PUBLISHED Published: 2020-01-10T18:00:09 Last Updated: 2024-08-05T00:12:43.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 1 of 2). Additional Analyst Notes: - CVE Program Container: References: - https://www.ricoh.com/info/2019/0823_1/ - http://jvn.jp/en/jp/JVN52962201/index.html
CVE ID: CVE-2019-14302 State: PUBLISHED Published: 2020-01-10T17:59:46 Last Updated: 2024-08-05T00:12:43.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Ricoh SP C250DN 1.06 devices, a debug port can be used. Additional Analyst Notes: - CVE Program Container: References: - https://www.ricoh.com/info/2019/0823_1/ - http://jvn.jp/en/jp/JVN52962201/index.html
CVE ID: CVE-2019-14303 State: PUBLISHED Published: 2020-03-13T18:49:00 Last Updated: 2024-08-05T00:12:43.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ricoh SP C250DN 1.05 devices allow denial of service (issue 1 of 3). Some Ricoh printers were affected by a wrong LPD service implementation that lead to a denial of service vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.ricoh-usa.com/en/support-and-download - https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-ricoh-printers/
CVE ID: CVE-2019-14304 State: PUBLISHED Published: 2020-01-10T17:58:30 Last Updated: 2024-08-05T00:12:43.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ricoh SP C250DN 1.06 devices allow CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://www.ricoh.com/info/2019/0823_1/ - http://jvn.jp/en/jp/JVN52962201/index.html
CVE ID: CVE-2019-14305 State: PUBLISHED Published: 2019-08-26T14:19:54 Last Updated: 2024-08-05T00:12:43.376Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Several Ricoh printers have multiple buffer overflows parsing HTTP parameter settings for Wi-Fi, mDNS, POP3, SMTP, and notification alerts, which allow an attacker to cause a denial of service or code execution via crafted requests to the web server. Affected firmware versions depend on the printer models. One affected configuration is cpe:2.3:o:ricoh:sp_c250dn_firmware:-:*:*:*:*:*:*:* up to (including) 1.06 running on cpe:2.3:o:ricoh:sp_c250dn:-:*:*:*:*:*
e:2.3:o:ricoh:sp_c250dn_firmware:-:*:*:*:*:*:*:* up to (including) 1.06 running on cpe:2.3:o:ricoh:sp_c250dn:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252dn:-:*:*:*:*:*:*:*. Another affected configuration is cpe:2.3:o:ricoh:sp_c250sf_firmware:-:*:*:*:*:*:*:* up to (including) 1.12 running on cpe:2.3:o:ricoh:sp_c250sf:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252sf:-:*:*:*:*:*:*:*. Additional Analyst Notes: - CVE Program Container: References: - https://www.ricoh-usa.com/en/support-and-download - https://www.ricoh.com/info/2019/0823_1/ - http://jvn.jp/en/jp/JVN11708203/index.html
CVE ID: CVE-2019-14306 State: PUBLISHED Published: 2020-01-10T17:59:24 Last Updated: 2024-08-05T00:12:43.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 2 of 2). Additional Analyst Notes: - CVE Program Container: References: - https://www.ricoh.com/info/2019/0823_1/ - http://jvn.jp/en/jp/JVN52962201/index.html