Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 52

Export CSV
CVE-2018-17312

On the RICOH Aficio MP 301 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.

CVSS 3.0 · 6.1 Medium EPSS 1.0% KEV · Not listed
Vendors
Ricoh
Products
Aficio Mp 301spf Aficio Mp 301spf Firmware
CVE-2018-17311

On the RICOH MP C6503 Plus printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.

CVSS 3.0 · 6.1 Medium EPSS 1.0% KEV · Not listed
Vendors
Ricoh
Products
Mp C6503 Mp C6503 Firmware
CVE-2018-17310

On the RICOH MP C1803 JPN printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.

CVSS 3.0 · 6.1 Medium EPSS 2.3% KEV · Not listed
Vendors
Ricoh
Products
Mp C1803 Jpn Mp C1803 Jpn Firmware
CVE-2018-17309

On the RICOH MP C406Z printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.

CVSS 3.0 · 6.1 Medium EPSS 1.0% KEV · Not listed
Vendors
Ricoh
Products
Mp C406z Mp C406zspf Firmware
CVE-2018-17002

On the RICOH MP 2001 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.

CVSS 3.0 · 6.1 Medium EPSS 1.0% KEV · Not listed
Vendors
Ricoh
Products
Mp 2001sp Mp 2001sp Firmware
CVE-2018-17001

On the RICOH SP 4510SF printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.

CVSS 3.0 · 6.1 Medium EPSS 1.0% KEV · Not listed
Vendors
Ricoh
Products
Sp 4510sf Sp 4510sf Firmware
CVE-2018-16188

SQL injection vulnerability in the RICOH Interactive Whiteboard D2200 V1.3 to V2.2, D5500 V1.3 to V2.2, D5510 V1.3 to V2.2, the display versions with RICOH Interactive Whiteboard Controller Type1 V1.3 to V2.2 attached (D5520, D6500, D6510, D7500, D8400), and the display versions with RICOH Interactive Whiteboard Controller Type2 V3.0 to V3.1.10137.0 attached (D5520, D6510, D7500, D8400) allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 3.0 · 9.8 Critical EPSS 1.9% KEV · Not listed
Vendors
Ricoh
Products
D2200 D2200 Firmware D5500 and 13 more
CVE-2018-16187

The RICOH Interactive Whiteboard D2200 V1.3 to V2.2, D5500 V1.3 to V2.2, D5510 V1.3 to V2.2, the display versions with RICOH Interactive Whiteboard Controller Type1 V1.3 to V2.2 attached (D5520, D6500, D6510, D7500, D8400), and the display versions with RICOH Interactive Whiteboard Controller Type2 V3.0 to V3.1.10137.0 attached (D5520, D6510, D7500, D8400) does not verify its server certificates, which allows man-in-the-middle attackers to eversdrop on encrypted communication.

CVSS 3.0 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Ricoh
Products
D2200 D2200 Firmware D5500 and 13 more
CVE-2018-16186

RICOH Interactive Whiteboard D2200 V1.1 to V2.2, D5500 V1.1 to V2.2, D5510 V1.1 to V2.2, the display versions with RICOH Interactive Whiteboard Controller Type1 V1.1 to V2.2 attached (D5520, D6500, D6510, D7500, D8400), and the display versions with RICOH Interactive Whiteboard Controller Type2 V3.0 to V3.1.10137.0 attached (D5520, D6510, D7500, D8400) uses hard-coded credentials, which may allow an attacker on the same network segments to login to the administrators settings screen and change the configuration.

CVSS 3.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Ricoh
Products
D2200 D2200 Firmware D5500 and 13 more
CVE-2018-16185

RICOH Interactive Whiteboard D2200 V1.1 to V2.2, D5500 V1.1 to V2.2, D5510 V1.1 to V2.2, the display versions with RICOH Interactive Whiteboard Controller Type1 V1.1 to V2.2 attached (D5520, D6500, D6510, D7500, D8400), and the display versions with RICOH Interactive Whiteboard Controller Type2 V3.0 to V3.1.10137.0 attached (D5520, D6510, D7500, D8400) allows remote attackers to execute a malicious program.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Ricoh
Products
D2200 D2200 Firmware D5500 and 13 more
CVE-2018-16184

RICOH Interactive Whiteboard D2200 V1.6 to V2.2, D5500 V1.6 to V2.2, D5510 V1.6 to V2.2, and the display versions with RICOH Interactive Whiteboard Controller Type1 V1.6 to V2.2 attached (D5520, D6500, D6510, D7500, D8400) allows remote attackers to execute arbitrary commands via unspecified vectors.

CVSS 3.0 · 9.8 Critical EPSS 4.3% KEV · Not listed
Vendors
Ricoh
Products
D2200 D2200 Firmware D5500 and 13 more