Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 16:25:24 +0000 EUVD-2026-217323 https://cve.radiocsirt.org/vuln/euvd-2026-217323 EUVD-2026-217323 https://cve.radiocsirt.org/vuln/euvd-2026-217323 fkie_cve-2024-27163 https://cve.radiocsirt.org/vuln/fkie_cve-2024-27163 <p>Toshiba printers will display the password of the admin user in clear-text and additional passwords when sending 2 specific HTTP requests to the internal API. An attacker stealing the cookie of an admin or abusing a XSS vulnerability can recover this password in clear-text and compromise the printer. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the &#34;Base Score&#34; of this vulnerability. For detail on related other vulnerabilities, please ask to the below contact point. https://www.toshibatec.com/contacts/products/ As for the affected products/models/versions, see the reference URL.</p> <p>Toshiba printers will display the password of the admin user in clear-text and additional passwords when sending 2 specific HTTP requests to the internal API. An attacker stealing the cookie of an admin or abusing a XSS vulnerability can recover this password in clear-text and compromise the printer. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the &#34;Base Score&#34; of this vulnerability. For detail on related other vulnerabilities, please ask to the below contact point. https://www.toshibatec.com/contacts/products/ As for the affected products/models/versions, see the reference URL.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-27163 GHSA-wjcq-p2hh-4gr7 https://cve.radiocsirt.org/vuln/ghsa-wjcq-p2hh-4gr7 <p>Toshiba printers will display the password of the admin user in clear-text and additional passwords when sending 2 specific HTTP requests to the internal API. An attacker stealing the cookie of an admin or abusing a XSS vulnerability can recover this password in clear-text and compromise the printer. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the &#34;Base Score&#34; of this vulnerability. For detail on related other vulnerabilities, please ask to the below contact point. https://www.toshibatec.com/contacts/products/ As for the affected products/models/versions, see the reference URL.</p> <p>Toshiba printers will display the password of the admin user in clear-text and additional passwords when sending 2 specific HTTP requests to the internal API. An attacker stealing the cookie of an admin or abusing a XSS vulnerability can recover this password in clear-text and compromise the printer. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the &#34;Base Score&#34; of this vulnerability. For detail on related other vulnerabilities, please ask to the below contact point. https://www.toshibatec.com/contacts/products/ As for the affected products/models/versions, see the reference URL.</p> https://cve.radiocsirt.org/vuln/ghsa-wjcq-p2hh-4gr7 gsd-2024-27163 https://cve.radiocsirt.org/vuln/gsd-2024-27163 gsd-2024-27163 https://cve.radiocsirt.org/vuln/gsd-2024-27163 jvndb-2024-003539 https://cve.radiocsirt.org/vuln/jvndb-2024-003539 <p>MFPs (multifunction printers) provided by Toshiba Tec Corporation and Oki Electric Industry Co., Ltd. contain multiple vulnerabilities listed below. &lt;ul&gt; &lt;li&gt;&lt;b&gt;Improper Restriction of Recursive Entity References in DTDs (&amp;#39;XML Entity Expansion&amp;#39;) (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/776&#34;&gt;CWE-776&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27141, CVE-2024-27142&lt;/li&gt; &lt;li&gt;&lt;b&gt;Execution with Unnecessary Privileges (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/250&#34;&gt;CWE-250&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27143, CVE-2024-27146, CVE-2024-27147, CVE-2024-3498&lt;/li&gt; &lt;li&gt;&lt;b&gt;Incorrect Default Permissions (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/276&#34;&gt;CWE-276&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27148, CVE-2024-27149, CVE-2024-27150, CVE-2024-27151, CVE-2024-27152, CVE-2024-27153, CVE-2024-27155, CVE-2024-27167, CVE-2024-27171&lt;/li&gt; &lt;li&gt;&lt;b&gt;Path Traversal (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/22&#34;&gt;CWE-22&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27144, CVE-2024-27145, CVE-2024-27173, CVE-2024-27174, CVE-2024-27176, CVE-2024-27177, CVE-2024-27178&lt;/li&gt; &lt;li&gt;&lt;b&gt;Insertion of Sensitive Information into Log File (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/532&#34;&gt;CWE-532&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27154, CVE-2024-27156, CVE-2024-27157&lt;/li&gt; &lt;li&gt;&lt;b&gt;Plaintext Storage of a Password (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/256&#34;&gt;CWE-256&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27166&lt;/li&gt; &lt;li&gt;&lt;b&gt;Debug Messages Revealing Unnecessary Information (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/1295&#34;&gt;CWE-1295&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27179&lt;/li&gt; &lt;li…</p> <p>MFPs (multifunction printers) provided by Toshiba Tec Corporation and Oki Electric Industry Co., Ltd. contain multiple vulnerabilities listed below. &lt;ul&gt; &lt;li&gt;&lt;b&gt;Improper Restriction of Recursive Entity References in DTDs (&amp;#39;XML Entity Expansion&amp;#39;) (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/776&#34;&gt;CWE-776&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27141, CVE-2024-27142&lt;/li&gt; &lt;li&gt;&lt;b&gt;Execution with Unnecessary Privileges (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/250&#34;&gt;CWE-250&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27143, CVE-2024-27146, CVE-2024-27147, CVE-2024-3498&lt;/li&gt; &lt;li&gt;&lt;b&gt;Incorrect Default Permissions (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/276&#34;&gt;CWE-276&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27148, CVE-2024-27149, CVE-2024-27150, CVE-2024-27151, CVE-2024-27152, CVE-2024-27153, CVE-2024-27155, CVE-2024-27167, CVE-2024-27171&lt;/li&gt; &lt;li&gt;&lt;b&gt;Path Traversal (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/22&#34;&gt;CWE-22&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27144, CVE-2024-27145, CVE-2024-27173, CVE-2024-27174, CVE-2024-27176, CVE-2024-27177, CVE-2024-27178&lt;/li&gt; &lt;li&gt;&lt;b&gt;Insertion of Sensitive Information into Log File (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/532&#34;&gt;CWE-532&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27154, CVE-2024-27156, CVE-2024-27157&lt;/li&gt; &lt;li&gt;&lt;b&gt;Plaintext Storage of a Password (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/256&#34;&gt;CWE-256&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27166&lt;/li&gt; &lt;li&gt;&lt;b&gt;Debug Messages Revealing Unnecessary Information (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/1295&#34;&gt;CWE-1295&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27179&lt;/li&gt; &lt;li…</p> https://cve.radiocsirt.org/vuln/jvndb-2024-003539