https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 12:04:27 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-278143 EUVD-2026-278143 https://cve.radiocsirt.org/vuln/euvd-2026-278143 https://cve.radiocsirt.org/vuln/fkie_cve-2024-51977 <p>An unauthenticated attacker who can access either the HTTP service (TCP port 80), the HTTPS service (TCP port 443), or the IPP service (TCP port 631), can leak several pieces of sensitive information from a vulnerable device. The URI path /etc/mnt_info.csv can be accessed via a GET request and no authentication is required. The returned result is a comma separated value (CSV) table of information. The leaked information includes the device’s model, firmware version, IP address, and serial number.</p> <p>An unauthenticated attacker who can access either the HTTP service (TCP port 80), the HTTPS service (TCP port 443), or the IPP service (TCP port 631), can leak several pieces of sensitive information from a vulnerable device. The URI path /etc/mnt_info.csv can be accessed via a GET request and no authentication is required. The returned result is a comma separated value (CSV) table of information. The leaked information includes the device’s model, firmware version, IP address, and serial number.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-51977 https://cve.radiocsirt.org/vuln/ghsa-27h4-8c24-mx7w <p>An unauthenticated attacker who can access either the HTTP service (TCP port 80), the HTTPS service (TCP port 443), or the IPP service (TCP port 631), can leak several pieces of sensitive information from a vulnerable device. The URI path /etc/mnt_info.csv can be accessed via a GET request and no authentication is required. The returned result is a comma separated value (CSV) table of information. The leaked information includes the device’s model, firmware version, IP address, and serial number.</p> <p>An unauthenticated attacker who can access either the HTTP service (TCP port 80), the HTTPS service (TCP port 443), or the IPP service (TCP port 631), can leak several pieces of sensitive information from a vulnerable device. The URI path /etc/mnt_info.csv can be accessed via a GET request and no authentication is required. The returned result is a comma separated value (CSV) table of information. The leaked information includes the device’s model, firmware version, IP address, and serial number.</p> https://cve.radiocsirt.org/vuln/ghsa-27h4-8c24-mx7w https://cve.radiocsirt.org/vuln/jvndb-2025-007519 <p>Multiple BROTHER products provided by BROTHER INDUSTRIES, LTD. contain multiple vulnerabilities listed below. * Exposure of sensitive system information to an unauthorized control sphere (CWE-497) - CVE-2024-51977 * Use of weak credentials (CWE-1391) - CVE-2024-51978 * Stack-based buffer overflow (CWE-121) - CVE-2024-51979 * Server-side request forgery (CWE-918) - CVE-2024-51980, CVE-2024-51981 * Improper handling of unexpected data type (CWE-241) - CVE-2024-51982 * Improper enforcement of behavioral workflow (CWE-841) - CVE-2024-51983 * Insufficiently protected credentials (CWE-522) - CVE-2024-51984 Stephen Fewer of Rapid7 reported this vulnerability to the developer. JPCERT/CC coordinated between the reporter and the developer.</p> <p>Multiple BROTHER products provided by BROTHER INDUSTRIES, LTD. contain multiple vulnerabilities listed below. * Exposure of sensitive system information to an unauthorized control sphere (CWE-497) - CVE-2024-51977 * Use of weak credentials (CWE-1391) - CVE-2024-51978 * Stack-based buffer overflow (CWE-121) - CVE-2024-51979 * Server-side request forgery (CWE-918) - CVE-2024-51980, CVE-2024-51981 * Improper handling of unexpected data type (CWE-241) - CVE-2024-51982 * Improper enforcement of behavioral workflow (CWE-841) - CVE-2024-51983 * Insufficiently protected credentials (CWE-522) - CVE-2024-51984 Stephen Fewer of Rapid7 reported this vulnerability to the developer. JPCERT/CC coordinated between the reporter and the developer.</p> https://cve.radiocsirt.org/vuln/jvndb-2025-007519