papercut kayıtları
papercut üreticisine ait 34 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 5 · %14,7
- Silahlaştırılmış
- 5 · %14,7
- Pre-auth RCE
- 5
- Düzeltme kaydı olan
- %55,9
- Yayından KEV’e ortanca
- 3 gün
Tekrar eden sınıflar
- CWE-352 Cross-Site Request Forgery (CSRF)3
- CWE-76 Improper Neutralization of Equivalent Special Elements3
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')2
- CWE-59 Improper Link Resolution Before File Access ('Link Following')2
- CWE-287 Improper Authentication2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
34 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
99Hemen | CVE-2023-27350Silahlaştırılmış | This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914).papercut · papercut mf · CWE-284 | Kritik9,8 | KEV | %100,0 | 20 Nis 2023 |
83Hemen | CVE-2023-27351Silahlaştırılmış | This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914).papercut · papercut mf · CWE-287 | Yüksek7,5 | KEV | %78,1 | 20 Nis 2023 |
74Bu hafta | CVE-2023-2533Silahlaştırılmış | PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRFpapercut · papercut mf · CWE-352 | Yüksek8,8 | KEV | %29,2 | 20 Haz 2023 |
68Bu hafta | CVE-2026-82078Silahlaştırılmış | PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connectorpapercut · papercut mf · CWE-470 | Kritik9,4 | KEV | %3,8 | 28 Ağu 2026 |
66Bu hafta | CVE-2026-81578Silahlaştırılmış | PaperCut MF/NG: Authentication Bypasspapercut · papercut mf · CWE-305 | Yüksek8,8 | KEV | %4,5 | 28 Ağu 2026 |
63Bu hafta | CVE-2023-39143Kavram kanıtı | PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabling attackers to upload, read, or delete arbitrary files.papercut · papercut mf · CWE-22 | Kritik9,8 | — | %80,1 | 4 Ağu 2023 |
58Planlayın | CVE-2024-1222İstismar yok | Incorrect authorization controls in PaperCut NG/MF APIspapercut · papercut mf · CWE-250 | Kritik9,8 | — | %64,0 | 13 Mar 2024 |
54Planlayın | CVE-2023-3486İstismar yok | PaperCut NG Unauthenticated File Uploadpapercut · papercut mf · CWE-434 | Yüksek7,5 | — | %79,2 | 25 Tem 2023 |
46Planlayın | CVE-2023-39469İstismar yok | PaperCut NG External User Lookup Code Injection Remote Code Execution Vulnerabilitypapercut · papercut mf · CWE-94 | Yüksek7,2 | — | %61,4 | 2 May 2024 |
42Planlayın | CVE-2024-1883İstismar yok | Reflected XSS in PaperCut NG/MFpapercut · papercut mf · CWE-76 | Orta6,1 | — | %61,5 | 14 Mar 2024 |
40Planlayın | CVE-2019-8948İstismar yok | PaperCut MF before 18.3.6 and PaperCut NG before 18.3.6 allow script injection via the user interface, aka PC-15163.papercut · papercut mf · CWE-74 | Kritik9,8 | — | %3,9 | 20 Şub 2019 |
40Planlayın | CVE-2019-12135İstismar yok | An unspecified vulnerability in the application server in PaperCut MF and NG versions 18.3.8 and earlier and versions 19.0.3 and earlier allpapercut · papercut mf | Kritik9,8 | — | %2,5 | 6 Haz 2019 |
37İzleyin | CVE-2024-1884İstismar yok | Server Side Request Forgery in PaperCut NG/MFpapercut · papercut mf · CWE-918 | Orta6,5 | — | %37,9 | 14 Mar 2024 |
31İzleyin | CVE-2024-4712İstismar yok | Arbitrary File Creation in PaperCut NG/MF Web Print Image Handlerpapercut · papercut mf · CWE-77 | Yüksek7,8 | — | %0,4 | 14 May 2024 |
31İzleyin | CVE-2024-3037İstismar yok | Arbitrary File Deletion in PaperCut NG/MF Web Printpapercut · papercut mf · CWE-59 | Yüksek7,8 | — | %0,4 | 14 May 2024 |
31İzleyin | CVE-2024-8404İstismar yok | Arbitrary File Deletion in PaperCut NG/MF Web Print Hot folderpapercut · papercut mf · CWE-59 | Yüksek7,8 | — | %0,4 | 25 Eyl 2024 |
30İzleyin | CVE-2014-2657İstismar yok | Unspecified vulnerability in the print release functionality in PaperCut MF before 14.1 (Build 26983) has unknown impact and remote vectors,papercut · papercut mf | Yüksek7,5 | — | %1,1 | 28 Nis 2014 |
29İzleyin | CVE-2023-39470İstismar yok | PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerabilitypapercut · papercut ng · CWE-749 | Yüksek7,2 | — | %1,8 | 22 Kas 2024 |
28İzleyin | CVE-2024-1882İstismar yok | Server-side resource injection in PaperCut NG/MFpapercut · papercut mf · CWE-76 | Yüksek7,2 | — | %1,4 | 14 Mar 2024 |
28İzleyin | CVE-2024-1654İstismar yok | Unauthorized write operations in PaperCut NG/MFpapercut · papercut mf · CWE-183 | Yüksek7,2 | — | %1,3 | 13 Mar 2024 |
27İzleyin | CVE-2023-4568Kavram kanıtı | PaperCut NG Unauthenticated XMLRPCpapercut · papercut ng · CWE-287 | Orta6,5 | — | %3,9 | 13 Eyl 2023 |
27İzleyin | CVE-2014-2659İstismar yok | Cross-site request forgery (CSRF) vulnerability in the admin UI in Papercut MF and NG before 14.1 (Build 26983) allows remote attackers to hpapercut · papercut mf · CWE-352 | Orta6,8 | — | %0,6 | 22 Nis 2014 |
26İzleyin | CVE-2023-31046İstismar yok | A Path Traversal vulnerability exists in PaperCut NG before 22.1.1 and PaperCut MF before 22.1.1.papercut · papercut mf · CWE-22 | Orta6,5 | — | %1,5 | 19 Eki 2023 |
26İzleyin | CVE-2023-6006İstismar yok | Privilege Escalation Vulnerabilitypapercut · papercut mf · CWE-250 | Orta6,7 | — | %0,4 | 14 Kas 2023 |
26İzleyin | CVE-2023-2508İstismar yok | CSRF in PaperCutNG Mobility Print leads to sophisticated phishingpapercut · mobility print server · CWE-352 | Orta6,5 | — | %0,3 | 20 Eyl 2023 |
- CVE-2023-2735099Hemen
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914).
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100papercut · papercut mf20 Nis 2023
- CVE-2023-2735183Hemen
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914).
YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %78papercut · papercut mf20 Nis 2023
- CVE-2023-253374Bu hafta
PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %29papercut · papercut mf20 Haz 2023
- CVE-2026-8207868Bu hafta
PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector
KritikCVSS 9,4KEVSilahlaştırılmışEPSS %4papercut · papercut mf28 Ağu 2026
- CVE-2026-8157866Bu hafta
PaperCut MF/NG: Authentication Bypass
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %4papercut · papercut mf28 Ağu 2026
- CVE-2023-3914363Bu hafta
PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabling attackers to upload, read, or delete arbitrary files.
KritikCVSS 9,8Kavram kanıtıEPSS %80papercut · papercut mf4 Ağu 2023
- CVE-2024-122258Planlayın
Incorrect authorization controls in PaperCut NG/MF APIs
KritikCVSS 9,8İstismar yokEPSS %64papercut · papercut mf13 Mar 2024
- CVE-2023-348654Planlayın
PaperCut NG Unauthenticated File Upload
YüksekCVSS 7,5İstismar yokEPSS %79papercut · papercut mf25 Tem 2023
- CVE-2023-3946946Planlayın
PaperCut NG External User Lookup Code Injection Remote Code Execution Vulnerability
YüksekCVSS 7,2İstismar yokEPSS %61papercut · papercut mf2 May 2024
- CVE-2024-188342Planlayın
Reflected XSS in PaperCut NG/MF
OrtaCVSS 6,1İstismar yokEPSS %61papercut · papercut mf14 Mar 2024
- CVE-2019-894840Planlayın
PaperCut MF before 18.3.6 and PaperCut NG before 18.3.6 allow script injection via the user interface, aka PC-15163.
KritikCVSS 9,8İstismar yokEPSS %4papercut · papercut mf20 Şub 2019
- CVE-2019-1213540Planlayın
An unspecified vulnerability in the application server in PaperCut MF and NG versions 18.3.8 and earlier and versions 19.0.3 and earlier all
KritikCVSS 9,8İstismar yokEPSS %2papercut · papercut mf6 Haz 2019
- CVE-2024-188437İzleyin
Server Side Request Forgery in PaperCut NG/MF
OrtaCVSS 6,5İstismar yokEPSS %38papercut · papercut mf14 Mar 2024
- CVE-2024-471231İzleyin
Arbitrary File Creation in PaperCut NG/MF Web Print Image Handler
YüksekCVSS 7,8İstismar yokEPSS %0papercut · papercut mf14 May 2024
- CVE-2024-303731İzleyin
Arbitrary File Deletion in PaperCut NG/MF Web Print
YüksekCVSS 7,8İstismar yokEPSS %0papercut · papercut mf14 May 2024
- CVE-2024-840431İzleyin
Arbitrary File Deletion in PaperCut NG/MF Web Print Hot folder
YüksekCVSS 7,8İstismar yokEPSS %0papercut · papercut mf25 Eyl 2024
- CVE-2014-265730İzleyin
Unspecified vulnerability in the print release functionality in PaperCut MF before 14.1 (Build 26983) has unknown impact and remote vectors,
YüksekCVSS 7,5İstismar yokEPSS %1papercut · papercut mf28 Nis 2014
- CVE-2023-3947029İzleyin
PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability
YüksekCVSS 7,2İstismar yokEPSS %2papercut · papercut ng22 Kas 2024
- CVE-2024-188228İzleyin
Server-side resource injection in PaperCut NG/MF
YüksekCVSS 7,2İstismar yokEPSS %1papercut · papercut mf14 Mar 2024
- CVE-2024-165428İzleyin
Unauthorized write operations in PaperCut NG/MF
YüksekCVSS 7,2İstismar yokEPSS %1papercut · papercut mf13 Mar 2024
- CVE-2023-456827İzleyin
PaperCut NG Unauthenticated XMLRPC
OrtaCVSS 6,5Kavram kanıtıEPSS %4papercut · papercut ng13 Eyl 2023
- CVE-2014-265927İzleyin
Cross-site request forgery (CSRF) vulnerability in the admin UI in Papercut MF and NG before 14.1 (Build 26983) allows remote attackers to h
OrtaCVSS 6,8İstismar yokEPSS %1papercut · papercut mf22 Nis 2014
- CVE-2023-3104626İzleyin
A Path Traversal vulnerability exists in PaperCut NG before 22.1.1 and PaperCut MF before 22.1.1.
OrtaCVSS 6,5İstismar yokEPSS %2papercut · papercut mf19 Eki 2023
- CVE-2023-600626İzleyin
Privilege Escalation Vulnerability
OrtaCVSS 6,7İstismar yokEPSS %0papercut · papercut mf14 Kas 2023
- CVE-2023-250826İzleyin
CSRF in PaperCutNG Mobility Print leads to sophisticated phishing
OrtaCVSS 6,5İstismar yokEPSS %0papercut · mobility print server20 Eyl 2023