Latest high and critical flaws
- CVE-2024-3498 Attackers can then execute malicious files by enabling certain services of the printer via the web configuration page and elevate its privileges to root.High 7.8 · Jun 14, 2024
- CVE-2024-3497 Path traversal vulnerability in the web server of the Toshiba printer enables attacker to overwrite orginal files or add new ones to the printer.High 8.8 · Jun 14, 2024
- CVE-2024-3496 Attackers can bypass the web login authentication process to gain access to the printer's system information and upload malicious drivers to the printer.High 8.8 · Jun 14, 2024
- CVE-2024-27178 An attacker can get Remote Code Execution by overwriting files.High 7.2 · Jun 14, 2024
- CVE-2024-27177 An attacker can get Remote Code Execution by overwriting files.High 7.2 · Jun 14, 2024
- CVE-2024-27176 An attacker can get Remote Code Execution by overwriting files.High 7.2 · Jun 14, 2024
- CVE-2024-27174 Remote Command program allows an attacker to get Remote Code Execution.Critical 9.8 · Jun 14, 2024
- CVE-2024-27173 Remote Command program allows an attacker to get Remote Code Execution by overwriting existing Python files containing executable code.Critical 9.8 · Jun 14, 2024
- CVE-2024-27172 Remote Command program allows an attacker to get Remote Code Execution.Critical 9.8 · Jun 14, 2024
- CVE-2024-27171 A remote attacker using the insecure upload functionality will be able to overwrite any Python file and get Remote Code Execution.High 7.4 · Jun 14, 2024
- CVE-2024-27170 It was observed that all the Toshiba printers contain credentials used for WebDAV access in the readable file.High 7.4 · Jun 14, 2024
- CVE-2024-27169 Toshiba printers provides API without authentication for internal access.High 8.4 · Jun 14, 2024
- CVE-2024-27168 It appears that some hardcoded keys are used for authentication to internal API.High 7.1 · Jun 14, 2024
- CVE-2024-27167 Toshiba printers use Sendmail to send emails to recipients.High 7.4 · Jun 14, 2024
- CVE-2024-27166 Coredump binaries in Toshiba printers have incorrect permissions.High 7.4 · Jun 14, 2024
- CVE-2024-27165 Toshiba printers contain a suidperl binary and it has a Local Privilege Escalation vulnerability.High 7.8 · Jun 14, 2024
- CVE-2024-27164 Toshiba printers contain hardcoded credentials.High 7.1 · Jun 14, 2024
- CVE-2024-27158 All the Toshiba printers share the same hardcoded root password.High 7.4 · Jun 14, 2024
- CVE-2024-27155 The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability.High 7.7 · Jun 14, 2024
- CVE-2024-27153 The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability.High 7.4 · Jun 13, 2024
- CVE-2024-27152 The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability.High 7.4 · Jun 13, 2024
- CVE-2024-27151 The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability.High 7.4 · Jun 13, 2024
- CVE-2024-27150 The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability.High 7.4 · Jun 13, 2024
- CVE-2024-27149 The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability.High 7.4 · Jun 13, 2024
- CVE-2024-27148 The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability.High 7.4 · Jun 13, 2024
Part of our vulnerability database: the whole National Vulnerability Database plus CISA’s exploited list, refreshed twice a day. This is general guidance, not a review of your systems.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.