deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-32923
Published: 2024-06-13
Description: there is a possible cellular denial of service due to a logic error in the code. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 4.0 (MEDIUM)
References: https://source.android.com/security/bulletin/pixel/2024-06-01; https://source.android.com/security/bulletin/pixel/2024-06-01
CVE: CVE-2024-32924
Published: 2024-06-13
Description: In DeregAcceptProcINT of cn_NrmmStateDeregInit.cpp, there is a possible denial of service due to a logic error in the code. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.5 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2024-06-01; https://source.android.com/security/bulletin/pixel/2024-06-01
CVE: CVE-2024-32925
Published: 2024-06-13
Description: In dhd_prot_txstatus_process of dhd_msgbuf.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-94
References: https://source.android.com/security/bulletin/pixel/2024-06-01; https://source.android.com/security/bulletin/pixel/2024-06-01
CVE: CVE-2024-32926
Published: 2024-06-13
Description: there is a possible information disclosure due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-203
References: https://source.android.com/security/bulletin/pixel/2024-06-01; https://source.android.com/security/bulletin/pixel/2024-06-01
CVE: CVE-2024-32929
Published: 2024-06-13
Description: In gpu_slc_get_region of pixel_gpu_slc.c, there is a possible EoP due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.1 (HIGH)
CWE: CWE-416
References: https://source.android.com/security/bulletin/pixel/2024-05-01; https://source.android.com/security/bulletin/pixel/2024-05-01
CVE: CVE-2024-32930
Published: 2024-06-13
Description: In plugin_ipc_handler of slc_plugin.c, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure of 4 bytes of stack memory with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-665
References: https://source.android.com/security/bulletin/pixel/2024-06-01; https://source.android.com/security/bulletin/pixel/2024-06-01
CVE: CVE-2024-5976
Published: 2024-06-13
Description: A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. It has been classified as critical. Affected is the function log_employee of the file /classes/Master.php?f=log_employee. The manipulation of the argument employee_code leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-268422 is the identifier assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/Xu-Mingming/cve/blob/main/sql.md; https://vuldb.com/?ctiid.268422; https://vuldb.com/?id.268422
CVE: CVE-2024-0084
Published: 2024-06-13
Description: NVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where the guest OS could execute privileged operations. A successful exploit of this vulnerability might lead to information disclosure, data tampering, escalation of privileges, and denial of service.
CVSS Score: 7.8 (HIGH)
CWE: CWE-250
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5551; https://nvidia.custhelp.com/app/answers/detail/a_id/5551
CVE: CVE-2024-0085
Published: 2024-06-13
Description: NVIDIA vGPU software for Windows and Linux contains a vulnerability where unprivileged users could execute privileged operations on the host. A successful exploit of this vulnerability might lead to data tampering, escalation of privileges, and denial of service.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-266
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5551; https://nvidia.custhelp.com/app/answers/detail/a_id/5551
CVE: CVE-2024-0086
Published: 2024-06-13
Description: NVIDIA vGPU software for Linux contains a vulnerability where the software can dereference a NULL pointer. A successful exploit of this vulnerability might lead to denial of service and undefined behavior in the vGPU plugin.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5551; https://nvidia.custhelp.com/app/answers/detail/a_id/5551
CVE: CVE-2024-0089
Published: 2024-06-13
Description: NVIDIA GPU Display Driver for Windows contains a vulnerability where the information from a previous client or another process could be disclosed. A successful exploit of this vulnerability might lead to code execution, information disclosure, or data tampering.
CVSS Score: 7.8 (HIGH)
CWE: CWE-665, CWE-665
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5551; https://nvidia.custhelp.com/app/answers/detail/a_id/5551
CVE: CVE-2024-0090
Published: 2024-06-13
Description: NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user can cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5551; https://nvidia.custhelp.com/app/answers/detail/a_id/5551
CVE: CVE-2024-0091
Published: 2024-06-13
Description: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user can cause an untrusted pointer dereference by executing a driver API. A successful exploit of this vulnerability might lead to denial of service, information disclosure, and data tampering.
CVSS Score: 7.8 (HIGH)
CWE: CWE-822
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5551; https://nvidia.custhelp.com/app/answers/detail/a_id/5551
CVE: CVE-2024-0092
Published: 2024-06-13
Description: NVIDIA GPU Driver for Windows and Linux contains a vulnerability where an improper check or improper handling of exception conditions might lead to denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-703
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5551; https://nvidia.custhelp.com/app/answers/detail/a_id/5551
CVE: CVE-2024-0093
Published: 2024-06-13
Description: NVIDIA GPU software for Linux contains a vulnerability where it can expose sensitive information to an actor that is not explicitly authorized to have access to that information. A successful exploit of this vulnerability might lead to information disclosure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5551; https://nvidia.custhelp.com/app/answers/detail/a_id/5551
CVE: CVE-2024-0094
Published: 2024-06-13
Description: NVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where an untrusted guest VM can cause improper control of the interaction frequency in the host. A successful exploit of this vulnerability might lead to denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-799
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5551; https://nvidia.custhelp.com/app/answers/detail/a_id/5551
CVE: CVE-2024-0095
Published: 2024-06-13
Description: NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where a user can inject forged logs and executable commands by injecting arbitrary data as a new log entry. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-117
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5546; https://nvidia.custhelp.com/app/answers/detail/a_id/5546
CVE: CVE-2024-0099
Published: 2024-06-13
Description: NVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where the guest OS could cause buffer overrun in the host. A successful exploit of this vulnerability might lead to information disclosure, data tampering, escalation of privileges, and denial of service.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5551; https://nvidia.custhelp.com/app/answers/detail/a_id/5551
CVE: CVE-2024-0103
Published: 2024-06-13
Description: NVIDIA Triton Inference Server for Linux contains a vulnerability where a user may cause an incorrect Initialization of resource by network issue. A successful exploit of this vulnerability may lead to information disclosure.
CVSS Score: 5.4 (MEDIUM)
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5546; https://nvidia.custhelp.com/app/answers/detail/a_id/5546
CVE: CVE-2024-31777
Published: 2024-06-13
Description: File Upload vulnerability in openeclass v.3.15 and before allows an attacker to execute arbitrary code via a crafted file to the certbadge.php endpoint.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/FreySolarEye/Exploit-CVE-2024-31777; https://github.com/FreySolarEye/Exploit-CVE-2024-31777
CVE: CVE-2024-33253
Published: 2024-06-13
Description: Cross-site scripting (XSS) vulnerability in GUnet OpenEclass E-learning Platform version 3.15 and before allows a authenticated privileged attacker to execute arbitrary code via the title and description fields of the badge template editing function.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/FreySolarEye/CVE/blob/master/GUnet%20OpenEclass%20E-learning%20platform%203.15%20-%20%27certbadge.php%27%20Stored%20Cross%20Site%20Scripting; https://github.com/FreySolarEye/CVE/blob/master/GUnet%20OpenEclass%20E-learning%20platform%203.15%20-%20%27certbadge.php%27%20Stored%20Cross%20Site%20Scripting
CVE: CVE-2023-29174
Published: 2024-06-14
Description: Missing Authorization vulnerability in NervyThemes SKU Label Changer For WooCommerce.This issue affects SKU Label Changer For WooCommerce: from n/a through 3.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/woo-sku-label-changer/wordpress-sku-label-changer-for-woocommerce-plugin-3-0-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/woo-sku-label-changer/wordpress-sku-label-changer-for-woocommerce-plugin-3-0-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2023-35040
Published: 2024-06-14
Description: Missing Authorization vulnerability in SendPress SendPress Newsletters.This issue affects SendPress Newsletters: from n/a through 1.23.11.6.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://patchstack.com/database/vulnerability/sendpress/wordpress-sendpress-newsletters-plugin-1-22-3-31-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/sendpress/wordpress-sendpress-newsletters-plugin-1-22-3-31-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2023-35045
Published: 2024-06-14
Description: Missing Authorization vulnerability in Fat Rat Fat Rat Collect.This issue affects Fat Rat Collect: from n/a through 2.6.7.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/fat-rat-collect/wordpress-fat-rat-collect-plugin-2-6-1-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/fat-rat-collect/wordpress-fat-rat-collect-plugin-2-6-1-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2023-36504
Published: 2024-06-14
Description: Missing Authorization vulnerability in BBS e-Theme BBS e-Popup.This issue affects BBS e-Popup: from n/a through 2.4.5.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/bbs-e-popup/wordpress-bbs-e-popup-plugin-2-4-5-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/bbs-e-popup/wordpress-bbs-e-popup-plugin-2-4-5-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2023-36694
Published: 2024-06-14
Description: Missing Authorization vulnerability in Bryan Lee Kingkong Board.This issue affects Kingkong Board: from n/a through 2.1.0.2.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/kingkong-board/wordpress-kingkong-board-plugin-2-1-0-2-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/kingkong-board/wordpress-kingkong-board-plugin-2-1-0-2-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2023-36695
Published: 2024-06-14
Description: Missing Authorization vulnerability in Maxime Schoeni Sublanguage.This issue affects Sublanguage: from n/a through 2.9.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/sublanguage/wordpress-sublanguage-plugin-2-9-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/sublanguage/wordpress-sublanguage-plugin-2-9-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2023-37394
Published: 2024-06-14
Description: Missing Authorization vulnerability in Deepak anand WP Dummy Content Generator.This issue affects WP Dummy Content Generator: from n/a through 2.3.0.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/wp-dummy-content-generator/wordpress-wp-dummy-content-generator-plugin-2-3-0-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wp-dummy-content-generator/wordpress-wp-dummy-content-generator-plugin-2-3-0-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2023-51507
Published: 2024-06-14
Description: Missing Authorization vulnerability in ExpressTech Quiz And Survey Master.This issue affects Quiz And Survey Master: from n/a through 8.1.16.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/quiz-master-next/wordpress-quiz-and-survey-master-plugin-8-1-16-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/quiz-master-next/wordpress-quiz-and-survey-master-plugin-8-1-16-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2023-51516
Published: 2024-06-14
Description: Missing Authorization vulnerability in Business Directory Team Business Directory Plugin.This issue affects Business Directory Plugin: from n/a through 6.3.9.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/business-directory-plugin/wordpress-business-directory-plugin-easy-listing-directories-for-wordpress-plugin-6-3-9-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/business-directory-plugin/wordpress-business-directory-plugin-easy-listing-directories-for-wordpress-plugin-6-3-9-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2023-51523
Published: 2024-06-14
Description: Missing Authorization vulnerability in WriterSystem WooCommerce Easy Duplicate Product.This issue affects WooCommerce Easy Duplicate Product: from n/a through 0.3.0.7.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/woo-easy-duplicate-product/wordpress-woocommerce-easy-duplicate-product-plugin-0-3-0-7-broken-access-control-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/woo-easy-duplicate-product/wordpress-woocommerce-easy-duplicate-product-plugin-0-3-0-7-broken-access-control-csrf-vulnerability?_s_id=cve
CVE: CVE-2024-5981
Published: 2024-06-14
Description: A vulnerability was found in itsourcecode Online House Rental System 1.0. It has been classified as critical. Affected is an unknown function of the file manage_user.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-268458 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/LiuYongXiang-git/cve/issues/1; https://vuldb.com/?ctiid.268458; https://vuldb.com/?id.268458
CVE: CVE-2024-5983
Published: 2024-06-14
Description: A vulnerability was found in itsourcecode Online Bookstore 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file bookPerPub.php. The manipulation of the argument pubid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-268459.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/LiuYongXiang-git/cve/issues/2; https://vuldb.com/?ctiid.268459; https://vuldb.com/?id.268459
CVE: CVE-2024-5984
Published: 2024-06-14
Description: A vulnerability was found in itsourcecode Online Bookstore 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file book.php. The manipulation of the argument bookisbn leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-268460.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/LiuYongXiang-git/cve/issues/3; https://vuldb.com/?ctiid.268460; https://vuldb.com/?id.268460
CVE: CVE-2024-5985
Published: 2024-06-14
Description: A vulnerability classified as critical has been found in SourceCodester Best Online News Portal 1.0. This affects an unknown part of the file /admin/index.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-268461 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/CveSecLook/cve/issues/45; https://vuldb.com/?ctiid.268461; https://vuldb.com/?id.268461
CVE: CVE-2024-27141
Published: 2024-06-14
Description: Toshiba printers use XML communication for the API endpoint provided by the printer. For the endpoint, XML parsing library is used and it is vulnerable to a time-based blind XML External Entity (XXE) vulnerability. An attacker can DoS the printers by sending a HTTP request without authentication. An attacker can exploit the XXE to retrieve information. As for the affected products/models/versions, see the reference URL.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-776
References: http://seclists.org/fulldisclosure/2024/Jul/1; https://jvn.jp/en/vu/JVNVU97136265/index.html; https://www.toshibatec.com/information/20240531_01.html
CVE: CVE-2024-27142
Published: 2024-06-14
Description: Toshiba printers use XML communication for the API endpoint provided by the printer. For the endpoint, XML parsing library is used and it is vulnerable to a time-based blind XML External Entity (XXE) vulnerability. An attacker can DoS the printers. An attacker can exploit the XXE to retrieve information. As for the affected products/models/versions, see the reference URL.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-776
References: http://seclists.org/fulldisclosure/2024/Jul/1; https://jvn.jp/en/vu/JVNVU97136265/index.html; https://www.toshibatec.com/information/20240531_01.html
CVE: CVE-2024-27143
Published: 2024-06-14
Description: Toshiba printers use SNMP for configuration. Using the private community, it is possible to remotely execute commands as root on the remote printer. Using this vulnerability will allow any attacker to get a root access on a remote Toshiba printer. This vulnerability can be executed in combination with other vulnerabilities and  difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the "Base Score" of this vulnerability. For detail on related other vulnerabilities, please ask to the below contact point.
 https://www.toshibatec.com/contacts/products/ 
As for the affected products/models/versions, see the reference URL.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-250
References: http://seclists.org/fulldisclosure/2024/Jul/1; https://jvn.jp/en/vu/JVNVU97136265/index.html; https://www.toshibatec.com/information/20240531_01.html
CVE: CVE-2024-27144
Published: 2024-06-14
Description: The Toshiba printers provide several ways to upload files using the web interface without authentication. An attacker can overwrite any insecure files. And the Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. The programs can be replaced by malicious programs by any local or remote attacker. This vulnerability can be executed in combination with other vulnerabilities and  difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the "Base Score" of this vulnerability. For detail on related other vulnerabilities, please ask to the below contact point.
 https://www.toshibatec.com/contacts/products/ 
As for the affected products/models/versions, see the reference URL.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-276
References: http://seclists.org/fulldisclosure/2024/Jul/1; https://jvn.jp/en/vu/JVNVU97136265/index.html; https://www.toshibatec.com/information/20240531_01.html
CVE: CVE-2024-27145
Published: 2024-06-14
Description: The Toshiba printers provide several ways to upload files using the admin web interface. An attacker can remotely compromise any Toshiba printer. An attacker can overwrite any insecure files. This vulnerability can be executed in combination with other vulnerabilities and  difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the "Base Score" of this vulnerability. For detail on related other vulnerabilities, please ask to the below contact point.
 https://www.toshibatec.com/contacts/products/ 
As for the affected products/models/versions, see the reference URL.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: http://seclists.org/fulldisclosure/2024/Jul/1; https://jvn.jp/en/vu/JVNVU97136265/index.html; https://www.toshibatec.com/information/20240531_01.html
CVE: CVE-2024-27146
Published: 2024-06-14
Description: The Toshiba printers do not implement privileges separation. As for the affected products/models/versions, see the reference URL.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-250
References: http://seclists.org/fulldisclosure/2024/Jul/1; https://jvn.jp/en/vu/JVNVU97136265/index.html; https://www.toshibatec.com/information/20240531_01.html
CVE: CVE-2024-27147
Published: 2024-06-14
Description: The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. As for the affected products/models/versions, see the reference URL.
CVSS Score: 7.4 (HIGH)
CWE: CWE-250
References: http://seclists.org/fulldisclosure/2024/Jul/1; https://jvn.jp/en/vu/JVNVU97136265/index.html; https://www.toshibatec.com/information/20240531_01.html
CVE: CVE-2024-27148
Published: 2024-06-14
Description: The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. As for the affected products/models/versions, see the reference URL.
CVSS Score: 7.4 (HIGH)
CWE: CWE-276
References: http://seclists.org/fulldisclosure/2024/Jul/1; https://jvn.jp/en/vu/JVNVU97136265/index.html; https://www.toshibatec.com/information/20240531_01.html
CVE: CVE-2024-27149
Published: 2024-06-14
Description: The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. As for the affected products/models/versions, see the reference URL.
CVSS Score: 7.4 (HIGH)
CWE: CWE-276
References: http://seclists.org/fulldisclosure/2024/Jul/1; https://jvn.jp/en/vu/JVNVU97136265/index.html; https://www.toshibatec.com/information/20240531_01.html