CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 0CVE-2019-8948
https://notcve.org/view.php?id=CVE-2019-8948
PaperCut MF before 18.3.6 and PaperCut NG before 18.3.6 allow script injection via the user interface, aka PC-15163. PaperCut MF, en versiones anteriores a la 18.3.6, y PaperCut NG, en versiones anteriores a la 18.3.6, permiten la inyección de scripts mediante la interfaz de usuario, también conocida como PC-15163. • https://www.papercut.com/products/mf/release-history https://www.papercut.com/products/ng/release-history • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') •
CVSS: 5.0EPSS: 0%CPEs: 28EXPL: 0CVE-2014-2658
https://notcve.org/view.php?id=CVE-2014-2658
Unspecified vulnerability in Papercut MF and NG before 14.1 (Build 26983) allows attacker to cause a denial of service via unknown vectors. Vulnerabilidad no especificada en Papercut MF y NG anterior a 14.1 (Build 26983) permite a atacantes causar una denegación de servicio a través de vectores desconocidos. • http://secunia.com/advisories/58037 http://www.papercut-mf.com/release-history http://www.papercut.com/release-history https://exchange.xforce.ibmcloud.com/vulnerabilities/92649 •
CVSS: 6.8EPSS: 0%CPEs: 28EXPL: 0CVE-2014-2659
https://notcve.org/view.php?id=CVE-2014-2659
Cross-site request forgery (CSRF) vulnerability in the admin UI in Papercut MF and NG before 14.1 (Build 26983) allows remote attackers to hijack the authentication of administrators via unspecified vectors. Vulnerabilidad de CSRF en la interfaz de usuario de administración en Papercut MF y NG anterior a 14.1 (Build 26983) permite a atacantes remotos secuestrar la autenticación de administradores a través de vectores no especificados. • http://secunia.com/advisories/58037 http://www.papercut-mf.com/release-history http://www.papercut.com/release-history https://exchange.xforce.ibmcloud.com/vulnerabilities/92648 • CWE-352: Cross-Site Request Forgery (CSRF) •