Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:36:41 +0000 EUVD-2026-217338 https://cve.radiocsirt.org/vuln/euvd-2026-217338 EUVD-2026-217338 https://cve.radiocsirt.org/vuln/euvd-2026-217338 fkie_cve-2024-27178 https://cve.radiocsirt.org/vuln/fkie_cve-2024-27178 <p>An attacker can get Remote Code Execution by overwriting files. Overwriting files is enable by falsifying file name variable. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the &#34;Base Score&#34; of this vulnerability. For detail on related other vulnerabilities, please ask to the below contact point. https://www.toshibatec.com/contacts/products/ As for the affected products/models/versions, see the reference URL.</p> <p>An attacker can get Remote Code Execution by overwriting files. Overwriting files is enable by falsifying file name variable. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the &#34;Base Score&#34; of this vulnerability. For detail on related other vulnerabilities, please ask to the below contact point. https://www.toshibatec.com/contacts/products/ As for the affected products/models/versions, see the reference URL.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-27178 GHSA-v77q-2fpq-m43m https://cve.radiocsirt.org/vuln/ghsa-v77q-2fpq-m43m <p>An attacker can get Remote Code Execution by overwriting files. Overwriting files is enable by falsifying file name variable. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the &#34;Base Score&#34; of this vulnerability. For detail on related other vulnerabilities, please ask to the below contact point. https://www.toshibatec.com/contacts/products/ As for the affected products/models/versions, see the reference URL.</p> <p>An attacker can get Remote Code Execution by overwriting files. Overwriting files is enable by falsifying file name variable. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the &#34;Base Score&#34; of this vulnerability. For detail on related other vulnerabilities, please ask to the below contact point. https://www.toshibatec.com/contacts/products/ As for the affected products/models/versions, see the reference URL.</p> https://cve.radiocsirt.org/vuln/ghsa-v77q-2fpq-m43m gsd-2024-27178 https://cve.radiocsirt.org/vuln/gsd-2024-27178 gsd-2024-27178 https://cve.radiocsirt.org/vuln/gsd-2024-27178 jvndb-2024-003539 https://cve.radiocsirt.org/vuln/jvndb-2024-003539 <p>MFPs (multifunction printers) provided by Toshiba Tec Corporation and Oki Electric Industry Co., Ltd. contain multiple vulnerabilities listed below. &lt;ul&gt; &lt;li&gt;&lt;b&gt;Improper Restriction of Recursive Entity References in DTDs (&amp;#39;XML Entity Expansion&amp;#39;) (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/776&#34;&gt;CWE-776&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27141, CVE-2024-27142&lt;/li&gt; &lt;li&gt;&lt;b&gt;Execution with Unnecessary Privileges (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/250&#34;&gt;CWE-250&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27143, CVE-2024-27146, CVE-2024-27147, CVE-2024-3498&lt;/li&gt; &lt;li&gt;&lt;b&gt;Incorrect Default Permissions (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/276&#34;&gt;CWE-276&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27148, CVE-2024-27149, CVE-2024-27150, CVE-2024-27151, CVE-2024-27152, CVE-2024-27153, CVE-2024-27155, CVE-2024-27167, CVE-2024-27171&lt;/li&gt; &lt;li&gt;&lt;b&gt;Path Traversal (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/22&#34;&gt;CWE-22&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27144, CVE-2024-27145, CVE-2024-27173, CVE-2024-27174, CVE-2024-27176, CVE-2024-27177, CVE-2024-27178&lt;/li&gt; &lt;li&gt;&lt;b&gt;Insertion of Sensitive Information into Log File (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/532&#34;&gt;CWE-532&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27154, CVE-2024-27156, CVE-2024-27157&lt;/li&gt; &lt;li&gt;&lt;b&gt;Plaintext Storage of a Password (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/256&#34;&gt;CWE-256&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27166&lt;/li&gt; &lt;li&gt;&lt;b&gt;Debug Messages Revealing Unnecessary Information (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/1295&#34;&gt;CWE-1295&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27179&lt;/li&gt; &lt;li…</p> <p>MFPs (multifunction printers) provided by Toshiba Tec Corporation and Oki Electric Industry Co., Ltd. contain multiple vulnerabilities listed below. &lt;ul&gt; &lt;li&gt;&lt;b&gt;Improper Restriction of Recursive Entity References in DTDs (&amp;#39;XML Entity Expansion&amp;#39;) (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/776&#34;&gt;CWE-776&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27141, CVE-2024-27142&lt;/li&gt; &lt;li&gt;&lt;b&gt;Execution with Unnecessary Privileges (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/250&#34;&gt;CWE-250&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27143, CVE-2024-27146, CVE-2024-27147, CVE-2024-3498&lt;/li&gt; &lt;li&gt;&lt;b&gt;Incorrect Default Permissions (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/276&#34;&gt;CWE-276&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27148, CVE-2024-27149, CVE-2024-27150, CVE-2024-27151, CVE-2024-27152, CVE-2024-27153, CVE-2024-27155, CVE-2024-27167, CVE-2024-27171&lt;/li&gt; &lt;li&gt;&lt;b&gt;Path Traversal (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/22&#34;&gt;CWE-22&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27144, CVE-2024-27145, CVE-2024-27173, CVE-2024-27174, CVE-2024-27176, CVE-2024-27177, CVE-2024-27178&lt;/li&gt; &lt;li&gt;&lt;b&gt;Insertion of Sensitive Information into Log File (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/532&#34;&gt;CWE-532&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27154, CVE-2024-27156, CVE-2024-27157&lt;/li&gt; &lt;li&gt;&lt;b&gt;Plaintext Storage of a Password (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/256&#34;&gt;CWE-256&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27166&lt;/li&gt; &lt;li&gt;&lt;b&gt;Debug Messages Revealing Unnecessary Information (&lt;a href=&#34;https://cwe.mitre.org/data/definitions/1295&#34;&gt;CWE-1295&lt;/a&gt;) &lt;/b&gt;- CVE-2024-27179&lt;/li&gt; &lt;li…</p> https://cve.radiocsirt.org/vuln/jvndb-2024-003539