Skip to content
Noroxi

papercut records

34 published records for vendor papercut.

Researcher profile

Entered KEV
5 · 14.7%
Weaponized
5 · 14.7%
Pre-auth RCE
5
With a fix record
55.9%
Median publish → KEV
3 days

Records by year

  1. 19
  2. 23
  3. 24
  4. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

34 records
  • CVE-2023-27350
    99Now

    This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914).

    CriticalCVSS 9.8KEVWeaponizedEPSS 100%

    papercut · papercut mfApr 20, 2023

  • CVE-2023-27351
    83Now

    This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914).

    HighCVSS 7.5KEVWeaponizedEPSS 78%

    papercut · papercut mfApr 20, 2023

  • CVE-2023-2533
    74This week

    PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF

    HighCVSS 8.8KEVWeaponizedEPSS 29%

    papercut · papercut mfJun 20, 2023

  • CVE-2026-82078
    68This week

    PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector

    CriticalCVSS 9.4KEVWeaponizedEPSS 4%

    papercut · papercut mfAug 28, 2026

  • CVE-2026-81578
    66This week

    PaperCut MF/NG: Authentication Bypass

    HighCVSS 8.8KEVWeaponizedEPSS 4%

    papercut · papercut mfAug 28, 2026

  • CVE-2023-39143
    63This week

    PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabling attackers to upload, read, or delete arbitrary files.

    CriticalCVSS 9.8Proof of conceptEPSS 80%

    papercut · papercut mfAug 4, 2023

  • CVE-2024-1222
    58Plan

    Incorrect authorization controls in PaperCut NG/MF APIs

    CriticalCVSS 9.8No exploitEPSS 64%

    papercut · papercut mfMar 13, 2024

  • CVE-2023-3486
    54Plan

    PaperCut NG Unauthenticated File Upload

    HighCVSS 7.5No exploitEPSS 79%

    papercut · papercut mfJul 25, 2023

  • CVE-2023-39469
    46Plan

    PaperCut NG External User Lookup Code Injection Remote Code Execution Vulnerability

    HighCVSS 7.2No exploitEPSS 61%

    papercut · papercut mfMay 2, 2024

  • CVE-2024-1883
    42Plan

    Reflected XSS in PaperCut NG/MF

    MediumCVSS 6.1No exploitEPSS 61%

    papercut · papercut mfMar 14, 2024

  • CVE-2019-8948
    40Plan

    PaperCut MF before 18.3.6 and PaperCut NG before 18.3.6 allow script injection via the user interface, aka PC-15163.

    CriticalCVSS 9.8No exploitEPSS 4%

    papercut · papercut mfFeb 20, 2019

  • CVE-2019-12135
    40Plan

    An unspecified vulnerability in the application server in PaperCut MF and NG versions 18.3.8 and earlier and versions 19.0.3 and earlier all

    CriticalCVSS 9.8No exploitEPSS 2%

    papercut · papercut mfJun 6, 2019

  • CVE-2024-1884
    37Monitor

    Server Side Request Forgery in PaperCut NG/MF

    MediumCVSS 6.5No exploitEPSS 38%

    papercut · papercut mfMar 14, 2024

  • CVE-2024-4712
    31Monitor

    Arbitrary File Creation in PaperCut NG/MF Web Print Image Handler

    HighCVSS 7.8No exploitEPSS 0%

    papercut · papercut mfMay 14, 2024

  • CVE-2024-3037
    31Monitor

    Arbitrary File Deletion in PaperCut NG/MF Web Print

    HighCVSS 7.8No exploitEPSS 0%

    papercut · papercut mfMay 14, 2024

  • CVE-2024-8404
    31Monitor

    Arbitrary File Deletion in PaperCut NG/MF Web Print Hot folder

    HighCVSS 7.8No exploitEPSS 0%

    papercut · papercut mfSep 25, 2024

  • CVE-2014-2657
    30Monitor

    Unspecified vulnerability in the print release functionality in PaperCut MF before 14.1 (Build 26983) has unknown impact and remote vectors,

    HighCVSS 7.5No exploitEPSS 1%

    papercut · papercut mfApr 28, 2014

  • CVE-2023-39470
    29Monitor

    PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability

    HighCVSS 7.2No exploitEPSS 2%

    papercut · papercut ngNov 22, 2024

  • CVE-2024-1882
    28Monitor

    Server-side resource injection in PaperCut NG/MF

    HighCVSS 7.2No exploitEPSS 1%

    papercut · papercut mfMar 14, 2024

  • CVE-2024-1654
    28Monitor

    Unauthorized write operations in PaperCut NG/MF

    HighCVSS 7.2No exploitEPSS 1%

    papercut · papercut mfMar 13, 2024

  • CVE-2023-4568
    27Monitor

    PaperCut NG Unauthenticated XMLRPC

    MediumCVSS 6.5Proof of conceptEPSS 4%

    papercut · papercut ngSep 13, 2023

  • CVE-2014-2659
    27Monitor

    Cross-site request forgery (CSRF) vulnerability in the admin UI in Papercut MF and NG before 14.1 (Build 26983) allows remote attackers to h

    MediumCVSS 6.8No exploitEPSS 1%

    papercut · papercut mfApr 22, 2014

  • CVE-2023-31046
    26Monitor

    A Path Traversal vulnerability exists in PaperCut NG before 22.1.1 and PaperCut MF before 22.1.1.

    MediumCVSS 6.5No exploitEPSS 2%

    papercut · papercut mfOct 19, 2023

  • CVE-2023-6006
    26Monitor

    Privilege Escalation Vulnerability

    MediumCVSS 6.7No exploitEPSS 0%

    papercut · papercut mfNov 14, 2023

  • CVE-2023-2508
    26Monitor

    CSRF in PaperCutNG Mobility Print leads to sophisticated phishing

    MediumCVSS 6.5No exploitEPSS 0%

    papercut · mobility print serverSep 20, 2023