https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:11:07 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-217322 EUVD-2026-217322 https://cve.radiocsirt.org/vuln/euvd-2026-217322 https://cve.radiocsirt.org/vuln/fkie_cve-2024-27162 <p>Toshiba printers provide a web interface that will load the JavaScript file. The file contains insecure codes vulnerable to XSS and is loaded inside all the webpages provided by the printer. An attacker can steal the cookie of an admin user. As for the affected products/models/versions, see the reference URL.</p> <p>Toshiba printers provide a web interface that will load the JavaScript file. The file contains insecure codes vulnerable to XSS and is loaded inside all the webpages provided by the printer. An attacker can steal the cookie of an admin user. As for the affected products/models/versions, see the reference URL.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-27162 https://cve.radiocsirt.org/vuln/ghsa-fg4v-424h-r9wv <p>Toshiba printers provide a web interface that will load the JavaScript file. The file contains insecure codes vulnerable to XSS and is loaded inside all the webpages provided by the printer. An attacker can steal the cookie of an admin user. As for the affected products/models/versions, see the reference URL.</p> <p>Toshiba printers provide a web interface that will load the JavaScript file. The file contains insecure codes vulnerable to XSS and is loaded inside all the webpages provided by the printer. An attacker can steal the cookie of an admin user. As for the affected products/models/versions, see the reference URL.</p> https://cve.radiocsirt.org/vuln/ghsa-fg4v-424h-r9wv https://cve.radiocsirt.org/vuln/gsd-2024-27162 gsd-2024-27162 https://cve.radiocsirt.org/vuln/gsd-2024-27162 https://cve.radiocsirt.org/vuln/jvndb-2024-003539 <p>MFPs (multifunction printers) provided by Toshiba Tec Corporation and Oki Electric Industry Co., Ltd. contain multiple vulnerabilities listed below. &lt;ul&gt; &lt;li&gt;&lt;b&gt;Improper Restriction of Recursive Entity References in DTDs (&amp;#39;XML Entity Expansion&amp;#39;) (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/776&#34;&gt;CWE-776&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27141, CVE-2024-27142&lt;/li&gt; &lt;li&gt;&lt;b&gt;Execution with Unnecessary Privileges (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/250&#34;&gt;CWE-250&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27143, CVE-2024-27146, CVE-2024-27147, CVE-2024-3498&lt;/li&gt; &lt;li&gt;&lt;b&gt;Incorrect Default Permissions (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/276&#34;&gt;CWE-276&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27148, CVE-2024-27149, CVE-2024-27150, CVE-2024-27151, CVE-2024-27152, CVE-2024-27153, CVE-2024-27155, CVE-2024-27167, CVE-2024-27171&lt;/li&gt; &lt;li&gt;&lt;b&gt;Path Traversal (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/22&#34;&gt;CWE-22&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27144, CVE-2024-27145, CVE-2024-27173, CVE-2024-27174, CVE-2024-27176, CVE-2024-27177, CVE-2024-27178&lt;/li&gt; &lt;li&gt;&lt;b&gt;Insertion of Sensitive Information into Log File (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/532&#34;&gt;CWE-532&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27154, CVE-2024-27156, CVE-2024-27157&lt;/li&gt; &lt;li&gt;&lt;b&gt;Plaintext Storage of a Password (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/256&#34;&gt;CWE-256&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27166&lt;/li&gt; &lt;li&gt;&lt;b&gt;Debug Messages Revealing Unnecessary Information (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/1295&#34;&gt;CWE-1295&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27179&lt;/li&gt; &lt;li…</p> <p>MFPs (multifunction printers) provided by Toshiba Tec Corporation and Oki Electric Industry Co., Ltd. contain multiple vulnerabilities listed below. &lt;ul&gt; &lt;li&gt;&lt;b&gt;Improper Restriction of Recursive Entity References in DTDs (&amp;#39;XML Entity Expansion&amp;#39;) (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/776&#34;&gt;CWE-776&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27141, CVE-2024-27142&lt;/li&gt; &lt;li&gt;&lt;b&gt;Execution with Unnecessary Privileges (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/250&#34;&gt;CWE-250&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27143, CVE-2024-27146, CVE-2024-27147, CVE-2024-3498&lt;/li&gt; &lt;li&gt;&lt;b&gt;Incorrect Default Permissions (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/276&#34;&gt;CWE-276&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27148, CVE-2024-27149, CVE-2024-27150, CVE-2024-27151, CVE-2024-27152, CVE-2024-27153, CVE-2024-27155, CVE-2024-27167, CVE-2024-27171&lt;/li&gt; &lt;li&gt;&lt;b&gt;Path Traversal (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/22&#34;&gt;CWE-22&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27144, CVE-2024-27145, CVE-2024-27173, CVE-2024-27174, CVE-2024-27176, CVE-2024-27177, CVE-2024-27178&lt;/li&gt; &lt;li&gt;&lt;b&gt;Insertion of Sensitive Information into Log File (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/532&#34;&gt;CWE-532&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27154, CVE-2024-27156, CVE-2024-27157&lt;/li&gt; &lt;li&gt;&lt;b&gt;Plaintext Storage of a Password (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/256&#34;&gt;CWE-256&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27166&lt;/li&gt; &lt;li&gt;&lt;b&gt;Debug Messages Revealing Unnecessary Information (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/1295&#34;&gt;CWE-1295&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27179&lt;/li&gt; &lt;li…</p> https://cve.radiocsirt.org/vuln/jvndb-2024-003539