rainbutterfly/cve_corpus huggingface dataset:
CVE-2025-14219 Campcodes Retro Basketball Shoes Online Store admin_running.php unrestricted upload
A weakness has been identified in Campcodes Retro Basketball Shoes Online Store 1.0. The impacted element is an unknown function of the file /admin/admin_running.php. Executing a manipulation of the argument product_image can lead to unrestricted upload. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks.
Problem types: cwe_id: CWE-434
description: Unrestricted Upload
cwe_id: CWE-284
description: Improper Access Controls
Affected products: vendor: Campcodes
product: Retro Basketball Shoes Online Store
cpes: cpe:2.3:a:campcodes:retro_basketball_shoes_online_store:*:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseScore: 4.7
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
baseSeverity: MEDIUM
Credits: lang: en
value: Yueyue (VulDB User)
Published: 2025-12-08T06:02:07.585Z
CVE-2025-14220 ORICO CD3510 File Upload path traversal
A security vulnerability has been detected in ORICO CD3510 1.9.12. This affects an unknown function of the component File Upload. The manipulation leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Problem types: cwe_id: CWE-22
description: Path Traversal
Affected products: vendor: ORICO
product: CD3510
CVSS v3.1: version: 3.1
baseScore: 4.3
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R
baseSeverity: MEDIUM
Credits: lang: en
value: renguangyue (VulDB User)
Published: 2025-12-08T06:32:06.170Z
CVE-2025-14221 SourceCodester Online Banking System page cross site scripting
A vulnerability was detected in SourceCodester Online Banking System 1.0. This impacts an unknown function of the file /?page=user. The manipulation of the argument First Name/Last Name results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be used.
Problem types: cwe_id: CWE-79
description: Cross Site Scripting
cwe_id: CWE-94
description: Code Injection
Affected products: vendor: SourceCodester
product: Online Banking System
CVSS v3.1: version: 3.1
baseScore: 3.5
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R
baseSeverity: LOW
Credits: lang: en
value: fatmatrabelsi (VulDB User)
Published: 2025-12-08T07:02:06.112Z
CVE-2025-14222 code-projects Employee Profile Management System print_personnel_report.php sql injection
A flaw has been found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file /print_personnel_report.php. This manipulation of the argument per_id causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used.
Problem types: cwe_id: CWE-89
description: SQL Injection
cwe_id: CWE-74
description: Injection
Affected products: vendor: code-projects
product: Employee Profile Management System
cpes: cpe:2.3:a:code-projects:employee_profile_management_system:*:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseScore: 6.3
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
baseSeverity: MEDIUM
Credits: lang: en
value: xupxload (VulDB User)
Published: 2025-12-08T07:32:05.544Z
CVE-2025-14223 code-projects Simple Leave Manager request.php sql injection
A vulnerability has been found in code-projects Simple Leave Manager 1.0. Affected by this vulnerability is an unknown functionality of the file /request.php. Such manipulation of the argument staff_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Problem types: cwe_id: CWE-89
description: SQL Injection
cwe_id: CWE-74
description: Injection
Affected products: vendor: code-projects
product: Simple Leave Manager
CVSS v3.1: version: 3.1
baseScore: 7.3
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
baseSeverity: HIGH
Credits: lang: en
value: chaste (VulDB User)
Published: 2025-12-08T08:02:06.831Z
CVE-2025-14224 Yottamaster DM2/DM3/DM200 File Upload path traversal
A vulnerability was found in Yottamaster DM2, DM3 and DM200 up to 1.2.23/1.9.12. Affected by this issue is some unknown functionality of the component File Upload. Performing manipulation results in path traversal. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Problem types: cwe_id: CWE-22
description: Path Traversal
Affected products: vendor: Yottamaster
product: DM2
vendor: Yottamaster
product: DM3
vendor: Yottamaster
product: DM200
CVSS v3.1: version: 3.1
baseScore: 4.3
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R
baseSeverity: MEDIUM
Credits: lang: en
value: rgyue (VulDB User)
Published: 2025-12-08T08:32:06.058Z
CVE-2025-14225 D-Link DCS-930L alphapd setSystemAdmin command injection
A vulnerability was determined in D-Link DCS-930L 1.15.04. This affects an unknown part of the file /setSystemAdmin of the component alphapd. Executing manipulation of the argument AdminID can lead to command injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. This vulnerability only affects products that are no longer supported by the maintainer.
Problem types: cwe_id: CWE-77
description: Command Injection
cwe_id: CWE-74
description: Injection
Affected products: vendor: D-Link
product: DCS-930L
CVSS v3.1: version: 3.1
baseScore: 6.3
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
baseSeverity: MEDIUM
Credits: lang: en
value: jiahui2888 (VulDB User)
Published: 2025-12-08T09:02:08.244Z
CVE-2025-14226 itsourcecode Student Management System edit_user.php sql injection
A vulnerability was identified in itsourcecode Student Management System 1.0. This vulnerability affects unknown code of the file /edit_user.php. The manipulation of the argument fname leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. Other parameters might be affected as well.
Problem types: cwe_id: CWE-89
description: SQL Injection
cwe_id: CWE-74
description: Injection
Affected products: vendor: itsourcecode
product: Student Management System
CVSS v3.1: version: 3.1
baseScore: 7.3
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
baseSeverity: HIGH
Credits: lang: en
value: ekkojob (VulDB User)
Published: 2025-12-08T09:32:06.865Z
CVE-2025-14227 Philipinho Simple-PHP-Blog edit.php sql injection
A security flaw has been discovered in Philipinho Simple-PHP-Blog up to 94b5d3e57308bce5dfbc44c3edafa9811893d958. This issue affects some unknown processing of the file /edit.php. The manipulation results in sql injection. The attack may be performed from remote. The exploit has been released to the public and may be exploited. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The vendor was contacted early about this disclosure but did not respond in any way.
Problem types: cwe_id: CWE-89
description: SQL Injection
cwe_id: CWE-74
description: Injection
Affected products: vendor: Philipinho
product: Simple-PHP-Blog
CVSS v3.1: version: 3.1
baseScore: 6.3
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
baseSeverity: MEDIUM
Credits: lang: en
value: xiaofeifei (VulDB User)
Published: 2025-12-08T10:02:06.837Z
CVE-2025-14228 Yealink SIP-T21P E2 Local Directory cross site scripting
A weakness has been identified in Yealink SIP-T21P E2 52.84.0.15. Impacted is an unknown function of the component Local Directory Page. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.
Problem types: cwe_id: CWE-79
description: Cross Site Scripting
cwe_id: CWE-94
description: Code Injection
Affected products: vendor: Yealink
product: SIP-T21P E2
CVSS v3.1: version: 3.1
baseScore: 3.5
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R
baseSeverity: LOW
Credits: lang: en
value: cccll (VulDB User)
Published: 2025-12-08T10:32:06.266Z
CVE-2025-14229 SourceCodester Inventory Management System SVC Report Export csv injection
A security vulnerability has been detected in SourceCodester Inventory Management System 1.0. The affected element is an unknown function of the component SVC Report Export. Such manipulation leads to csv injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
Problem types: cwe_id: CWE-1236
description: CSV Injection
cwe_id: CWE-74
description: Injection
Affected products: vendor: SourceCodester
product: Inventory Management System
CVSS v3.1: version: 3.1
baseScore: 4.7
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
baseSeverity: MEDIUM
Credits: lang: en
value: Amit_singh (VulDB User)
Published: 2025-12-08T11:02:06.822Z
CVE-2025-14230 code-projects Daily Time Recording System add_payroll.php sql injection
A vulnerability was detected in code-projects Daily Time Recording System 4.5.0. The impacted element is an unknown function of the file /admin/add_payroll.php. Performing manipulation of the argument detail_Id results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used.
Problem types: cwe_id: CWE-89
description: SQL Injection
cwe_id: CWE-74
description: Injection
Affected products: vendor: code-projects
product: Daily Time Recording System
CVSS v3.1: version: 3.1
baseScore: 6.3
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
baseSeverity: MEDIUM
Credits: lang: en
value: chaste (VulDB User)
Published: 2025-12-08T11:32:07.210Z
CVE-2025-14231 
Buffer overflow in print job processing by WSD on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write
Affected products: vendor: Canon Inc.
product: Satera LBP670C Series
vendor: Canon Inc.
product: Satera MF750C Series
vendor: Canon Inc.
product: Color imageCLASS LBP630C
vendor: Canon Inc.
product: Color imageCLASS MF650C Series
vendor: Canon Inc.
product: imageCLASS LBP230 Series
vendor: Canon Inc.
product: imageCLASS X LBP1238 II
vendor: Canon Inc.
product: imageCLASS MF450 Series
vendor: Canon Inc.
product: imageCLASS X MF1238 II
vendor: Canon Inc.
product: imageCLASS X MF1643i II
vendor: Canon Inc.
product: imageCLASS X MF1643iF II
vendor: Canon Inc.
product: i-SENSYS LBP630C Series
vendor: Canon Inc.
product: i-SENSYS MF650C Series
vendor: Canon Inc.
product: i-SENSYS LBP230 Series
vendor: Canon Inc.
product: 1238P II
vendor: Canon Inc.
product: 1238Pr II
vendor: Canon Inc.
product: i-SENSYS MF450 Series
vendor: Canon Inc.
product: i-SENSYS MF550 Series
vendor: Canon Inc.
product: 1238i II
vendor: Canon Inc.
product: 1238iF II
vendor: Canon Inc.
product: imageRUNNER 1643i II
vendor: Canon Inc.
product: imageRUNNER 1643iF II
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2026-01-15T23:35:27.096Z
CVE-2025-14232 
Buffer overflow in XML processing of XPS file in Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write
Affected products: vendor: Canon Inc.
product: Satera LBP670C Series
vendor: Canon Inc.
product: Satera MF750C Series
vendor: Canon Inc.
product: Color imageCLASS LBP630C
vendor: Canon Inc.
product: Color imageCLASS MF650C Series
vendor: Canon Inc.
product: imageCLASS LBP230 Series
vendor: Canon Inc.
product: imageCLASS X LBP1238 II
vendor: Canon Inc.
product: imageCLASS MF450 Series
vendor: Canon Inc.
product: imageCLASS X MF1238 II
vendor: Canon Inc.
product: imageCLASS X MF1643i II
vendor: Canon Inc.
product: imageCLASS X MF1643iF II
vendor: Canon Inc.
product: i-SENSYS LBP630C Series
vendor: Canon Inc.
product: i-SENSYS MF650C Series
vendor: Canon Inc.
product: i-SENSYS LBP230 Series
vendor: Canon Inc.
product: 1238P II
vendor: Canon Inc.
product: 1238Pr II
vendor: Canon Inc.
product: i-SENSYS MF450 Series
vendor: Canon Inc.
product: i-SENSYS MF550 Series
vendor: Canon Inc.
product: 1238i II
vendor: Canon Inc.
product: 1238iF II
vendor: Canon Inc.
product: imageRUNNER 1643i II
vendor: Canon Inc.
product: imageRUNNER 1643iF II
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2026-01-15T23:36:27.072Z
CVE-2025-14233 
Invalid free in CPCA file deletion processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.
Problem types: cwe_id: CWE-763
description: CWE-763: Release of Invalid Pointer or Reference
Affected products: vendor: Canon Inc.
product: Satera LBP670C Series
vendor: Canon Inc.
product: Satera MF750C Series
vendor: Canon Inc.
product: Color imageCLASS LBP630C
vendor: Canon Inc.
product: Color imageCLASS MF650C Series
vendor: Canon Inc.
product: imageCLASS LBP230 Series
vendor: Canon Inc.
product: imageCLASS X LBP1238 II
vendor: Canon Inc.
product: imageCLASS MF450 Series
vendor: Canon Inc.
product: imageCLASS X MF1238 II
vendor: Canon Inc.
product: imageCLASS X MF1643i II
vendor: Canon Inc.
product: imageCLASS X MF1643iF II
vendor: Canon Inc.
product: i-SENSYS LBP630C Series
vendor: Canon Inc.
product: i-SENSYS MF650C Series
vendor: Canon Inc.
product: i-SENSYS LBP230 Series
vendor: Canon Inc.
product: 1238P II
vendor: Canon Inc.
product: 1238Pr II
vendor: Canon Inc.
product: i-SENSYS MF450 Series
vendor: Canon Inc.
product: i-SENSYS MF550 Series
vendor: Canon Inc.
product: 1238i II
vendor: Canon Inc.
product: 1238iF II
vendor: Canon Inc.
product: imageRUNNER 1643i II
vendor: Canon Inc.
product: imageRUNNER 1643iF II
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2026-01-15T23:37:29.921Z
CVE-2025-14234 
Buffer overflow in CPCA list processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write
Affected products: vendor: Canon Inc.
product: Satera LBP670C Series
vendor: Canon Inc.
product: Satera MF750C Series
vendor: Canon Inc.
product: Color imageCLASS LBP630C
vendor: Canon Inc.
product: Color imageCLASS MF650C Series
vendor: Canon Inc.
product: imageCLASS LBP230 Series
vendor: Canon Inc.
product: imageCLASS X LBP1238 II
vendor: Canon Inc.
product: imageCLASS MF450 Series
vendor: Canon Inc.
product: imageCLASS X MF1238 II
vendor: Canon Inc.
product: imageCLASS X MF1643i II
vendor: Canon Inc.
product: imageCLASS X MF1643iF II
vendor: Canon Inc.
product: i-SENSYS LBP630C Series
vendor: Canon Inc.
product: i-SENSYS MF650C Series
vendor: Canon Inc.
product: i-SENSYS LBP230 Series
vendor: Canon Inc.
product: 1238P II
vendor: Canon Inc.
product: 1238Pr II
vendor: Canon Inc.
product: i-SENSYS MF450 Series
vendor: Canon Inc.
product: i-SENSYS MF550 Series
vendor: Canon Inc.
product: 1238i II
vendor: Canon Inc.
product: 1238iF II
vendor: Canon Inc.
product: imageRUNNER 1643i II
vendor: Canon Inc.
product: imageRUNNER 1643iF II
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2026-01-15T23:38:13.313Z
CVE-2025-14235 
Buffer overflow in XPS font fpgm data processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write
Affected products: vendor: Canon Inc.
product: Satera LBP670C Series
vendor: Canon Inc.
product: Satera MF750C Series
vendor: Canon Inc.
product: Color imageCLASS LBP630C
vendor: Canon Inc.
product: Color imageCLASS MF650C Series
vendor: Canon Inc.
product: imageCLASS LBP230 Series
vendor: Canon Inc.
product: imageCLASS X LBP1238 II
vendor: Canon Inc.
product: imageCLASS MF450 Series
vendor: Canon Inc.
product: imageCLASS X MF1238 II
vendor: Canon Inc.
product: imageCLASS X MF1643i II
vendor: Canon Inc.
product: imageCLASS X MF1643iF II
vendor: Canon Inc.
product: i-SENSYS LBP630C Series
vendor: Canon Inc.
product: i-SENSYS MF650C Series
vendor: Canon Inc.
product: i-SENSYS LBP230 Series
vendor: Canon Inc.
product: 1238P II
vendor: Canon Inc.
product: 1238Pr II
vendor: Canon Inc.
product: i-SENSYS MF450 Series
vendor: Canon Inc.
product: i-SENSYS MF550 Series
vendor: Canon Inc.
product: 1238i II
vendor: Canon Inc.
product: 1238iF II
vendor: Canon Inc.
product: imageRUNNER 1643i II
vendor: Canon Inc.
product: imageRUNNER 1643iF II
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2026-01-15T23:38:53.584Z
CVE-2025-14236 
Buffer overflow in Address Book attribute tag processing on Small Office Multifunction Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write
Affected products: vendor: Canon Inc.
product: Satera LBP670C Series
vendor: Canon Inc.
product: Satera MF750C Series
vendor: Canon Inc.
product: Color imageCLASS LBP630C
vendor: Canon Inc.
product: Color imageCLASS MF650C Series
vendor: Canon Inc.
product: imageCLASS LBP230 Series
vendor: Canon Inc.
product: imageCLASS X LBP1238 II
vendor: Canon Inc.
product: imageCLASS MF450 Series
vendor: Canon Inc.
product: imageCLASS X MF1238 II
vendor: Canon Inc.
product: imageCLASS X MF1643i II
vendor: Canon Inc.
product: imageCLASS X MF1643iF II
vendor: Canon Inc.
product: i-SENSYS LBP630C Series
vendor: Canon Inc.
product: i-SENSYS MF650C Series
vendor: Canon Inc.
product: i-SENSYS LBP230 Series
vendor: Canon Inc.
product: 1238P II
vendor: Canon Inc.
product: 1238Pr II
vendor: Canon Inc.
product: i-SENSYS MF450 Series
vendor: Canon Inc.
product: i-SENSYS MF550 Series
vendor: Canon Inc.
product: 1238i II
vendor: Canon Inc.
product: 1238iF II
vendor: Canon Inc.
product: imageRUNNER 1643i II
vendor: Canon Inc.
product: imageRUNNER 1643iF II
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2026-01-15T23:39:50.760Z