https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 03:34:19 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-197875 EUVD-2026-197875 https://cve.radiocsirt.org/vuln/euvd-2026-197875 https://cve.radiocsirt.org/vuln/fkie_cve-2024-47005 <p>Sharp and Toshiba Tec MFPs provide configuration related APIs. They are expected to be called by administrative users only, but insufficiently restricted. A non-administrative user may execute some configuration APIs.</p> <p>Sharp and Toshiba Tec MFPs provide configuration related APIs. They are expected to be called by administrative users only, but insufficiently restricted. A non-administrative user may execute some configuration APIs.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-47005 https://cve.radiocsirt.org/vuln/ghsa-29pv-3whx-cqwv <p>Sharp and Toshiba Tec MFPs provide configuration related APIs. They are expected to be called by administrative users only, but insufficiently restricted. A non-administrative user may execute some configuration APIs.</p> <p>Sharp and Toshiba Tec MFPs provide configuration related APIs. They are expected to be called by administrative users only, but insufficiently restricted. A non-administrative user may execute some configuration APIs.</p> https://cve.radiocsirt.org/vuln/ghsa-29pv-3whx-cqwv https://cve.radiocsirt.org/vuln/jvndb-2024-011256 <p>MFPs (multifunction printers) provided by Sharp and Toshiba Tec Corporation contain multiple vulnerabilites listed below. &lt;ul&gt; &lt;li&gt;Out-of-bounds Read (CWE-125) &lt;ul&gt; &lt;li&gt;CVE-2024-42420&lt;/li&gt; &lt;li&gt;Out-of-bounds read vulnerabilities coming from improper processing of keyword search input and improper processing of&amp;nbsp;SOAP messages&lt;/li&gt; &lt;/ul&gt; &lt;/li&gt; &lt;li&gt;Out-of-bounds Read (CWE-125) &lt;ul&gt; &lt;li&gt;CVE-2024-43424&lt;/li&gt; &lt;li&gt;Out-of-bounds read vulnerability coming from improper processing of HTTP request headers&lt;/li&gt; &lt;/ul&gt; &lt;/li&gt; &lt;li&gt;Out-of-bounds Read&amp;nbsp;(CWE-125) &lt;ul&gt; &lt;li&gt;CVE-2024-45829&lt;/li&gt; &lt;li&gt;Out-of-bounds read vulnerability in the web page providing data downloading, where query parameters in HTTP requests are improperly processed&lt;/li&gt; &lt;/ul&gt; &lt;/li&gt; &lt;li&gt;Path traversal&amp;nbsp;(CWE-22) &lt;ul&gt; &lt;li&gt;CVE-2024-45842&lt;/li&gt; &lt;li&gt;Improper processing of URI data in HTTP PUT requests leads to path traversal vulnerability, unintended internal files may be retrieved&lt;/li&gt; &lt;/ul&gt; &lt;/li&gt; &lt;li&gt;Improper access restriction on some configuration related&amp;nbsp;APIs (CWE-749) &lt;ul&gt; &lt;li&gt;CVE-2024-47005&lt;/li&gt; &lt;li&gt;Some configuration related APIs are expected to be called by administrative users only, but insufficiently restricted&lt;/li&gt; &lt;/ul&gt; &lt;/li&gt; &lt;li&gt;Authentication Bypass Using an Alternate Path&amp;nbsp;(CWE-288) &lt;ul&gt; &lt;li&gt;CVE-2024-47406&lt;/li&gt; &lt;li&gt;Improper processing of HTTP authentication requests may lead to authentication bypass&lt;/li&gt; &lt;/ul&gt;…</p> <p>MFPs (multifunction printers) provided by Sharp and Toshiba Tec Corporation contain multiple vulnerabilites listed below. &lt;ul&gt; &lt;li&gt;Out-of-bounds Read (CWE-125) &lt;ul&gt; &lt;li&gt;CVE-2024-42420&lt;/li&gt; &lt;li&gt;Out-of-bounds read vulnerabilities coming from improper processing of keyword search input and improper processing of&amp;nbsp;SOAP messages&lt;/li&gt; &lt;/ul&gt; &lt;/li&gt; &lt;li&gt;Out-of-bounds Read (CWE-125) &lt;ul&gt; &lt;li&gt;CVE-2024-43424&lt;/li&gt; &lt;li&gt;Out-of-bounds read vulnerability coming from improper processing of HTTP request headers&lt;/li&gt; &lt;/ul&gt; &lt;/li&gt; &lt;li&gt;Out-of-bounds Read&amp;nbsp;(CWE-125) &lt;ul&gt; &lt;li&gt;CVE-2024-45829&lt;/li&gt; &lt;li&gt;Out-of-bounds read vulnerability in the web page providing data downloading, where query parameters in HTTP requests are improperly processed&lt;/li&gt; &lt;/ul&gt; &lt;/li&gt; &lt;li&gt;Path traversal&amp;nbsp;(CWE-22) &lt;ul&gt; &lt;li&gt;CVE-2024-45842&lt;/li&gt; &lt;li&gt;Improper processing of URI data in HTTP PUT requests leads to path traversal vulnerability, unintended internal files may be retrieved&lt;/li&gt; &lt;/ul&gt; &lt;/li&gt; &lt;li&gt;Improper access restriction on some configuration related&amp;nbsp;APIs (CWE-749) &lt;ul&gt; &lt;li&gt;CVE-2024-47005&lt;/li&gt; &lt;li&gt;Some configuration related APIs are expected to be called by administrative users only, but insufficiently restricted&lt;/li&gt; &lt;/ul&gt; &lt;/li&gt; &lt;li&gt;Authentication Bypass Using an Alternate Path&amp;nbsp;(CWE-288) &lt;ul&gt; &lt;li&gt;CVE-2024-47406&lt;/li&gt; &lt;li&gt;Improper processing of HTTP authentication requests may lead to authentication bypass&lt;/li&gt; &lt;/ul&gt;…</p> https://cve.radiocsirt.org/vuln/jvndb-2024-011256