CVSS: 9.8EPSS: 0%CPEs: 5821EXPL: 0CVE-2021-3942
https://notcve.org/view.php?id=CVE-2021-3942
Certain HP Print products and Digital Sending products may be vulnerable to potential remote code execution and buffer overflow with use of Link-Local Multicast Name Resolution or LLMNR. Ciertos productos HP Print y productos Digital Sending pueden ser vulnerables a una posible ejecución remota de código y desbordamiento de búfer con el uso de resolución de nombres de multidifusión local de enlace o LLMNR. • https://support.hp.com/us-en/document/ish_5948778-5949142-16/hpsbpi03780 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.8EPSS: 0%CPEs: 1523EXPL: 0CVE-2020-28419
https://notcve.org/view.php?id=CVE-2020-28419
During installation with certain driver software or application packages an arbitrary code execution could occur. Durante la instalación con determinados paquetes de software de controladores o aplicaciones podría producirse una ejecución de código arbitrario • https://support.hp.com/us-en/document/c07058567 •
CVSS: 8.8EPSS: 0%CPEs: 394EXPL: 0CVE-2018-5921
https://notcve.org/view.php?id=CVE-2018-5921
A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129_000052 and other firmware versions. This vulnerability is known as Cross Site Request Forgery, and could potentially be exploited remotely to allow elevation of privilege. Se ha identificado una potencial vulnerabilidad de seguridad en ciertas impresoras HP y MFP en versiones de firmware 2405129_000052 y otras. Esta vulnerabilidad se conoce como Cross-Site Request Forgery (CSRF) y podría explotarse remotamente para permitir la elevación de privilegios. • https://support.hp.com/us-en/document/c05949322 • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 6.1EPSS: 0%CPEs: 176EXPL: 0CVE-2017-2743
https://notcve.org/view.php?id=CVE-2017-2743
HP has identified a potential security vulnerability with HP Enterprise LaserJet Printers and MFPs, HP OfficeJet Enterprise Color Printers and MFP, HP PageWide Color Printers and MPS before 2308214_000901, 2308214_000900, and other firmware versions. The vulnerability could be exploited to perform a cross site scripting (XSS) attack. HP ha identificado una vulnerabilidad de seguridad potencial con HP Enterprise LaserJet Printers and MFPs, HP OfficeJet Enterprise Color Printers and MFP, HP PageWide Color Printers and MPS en versiones anteriores a la 2308214_000901, 2308214_000900, y otras versiones de firmware. Esto podría ser explotado para realizar un ataque de Cross-Site Scripting (XSS). • https://support.hp.com/us-en/document/c05541569 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.9EPSS: 0%CPEs: 55EXPL: 0CVE-2016-2244
https://notcve.org/view.php?id=CVE-2016-2244
HP LaserJet printers and MFPs and OfficeJet Enterprise printers with firmware before 3.7.01 allow remote attackers to obtain sensitive information via unspecified vectors. Impresoras HP LaserJet e impresoras MFPs OfficeJet Enterprise con firmware anterior a 3.7.01 permiten a atacantes remotos obtener información sensible a través de vectores no especificados. • http://www.securitytracker.com/id/1035191 https://h20565.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c05030353 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •