Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (78 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2019-6489 1 Lexmark 80 6500e, 6500e Firmware, Cx310 and 77 more 2024-11-21 N/A
Certain Lexmark CX, MX, X, XC, XM, XS, and 6500e devices before 2019-02-11 allow remote attackers to erase stored shortcuts.
CVE-2019-19773 1 Lexmark 160 6500e, 6500e Firmware, C734 and 157 more 2024-11-21 5.4 Medium
Various Lexmark products have stored XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index?page=content&id=TE935&locale=en&userlocale=EN_US.
CVE-2019-19772 1 Lexmark 160 6500e, 6500e Firmware, C734 and 157 more 2024-11-21 5.4 Medium
Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index?page=content&id=TE935&locale=en&userlocale=EN_US.
CVE-2019-18791 1 Lexmark 160 6500e, 6500e Firmware, C734 and 157 more 2024-11-21 5.4 Medium
Lexmark printer MS812 and multiple older generation Lexmark devices have a stored XSS vulnerability in the embedded web server. The vulnerability can be exploited to expose session credentials and other information via the users web browser.
CVE-2019-16758 1 Lexmark 2 Services Monitor, Services Monitor Firmware 2024-11-21 7.5 High
In Lexmark Services Monitor 2.27.4.0.39 (running on TCP port 2070), a remote attacker can use a directory traversal technique using /../../../ or ..%2F..%2F..%2F to obtain local files on the host operating system.
CVE-2019-10059 1 Lexmark 142 6500e, 6500e Firmware, C734 and 139 more 2024-11-21 N/A
The legacy finger service (TCP port 79) is enabled by default on various older Lexmark devices.
CVE-2019-10058 1 Lexmark 148 6500e, 6500e Firmware, C734 and 145 more 2024-11-21 N/A
Various Lexmark products have Incorrect Access Control.
CVE-2019-10057 1 Lexmark 50 Cs31x, Cs31x Firmware, Cs41x and 47 more 2024-11-21 N/A
Various Lexmark products have CSRF.
CVE-2018-18894 1 Lexmark 98 6500e, 6500e Firmware, C748 and 95 more 2024-11-21 7.5 High
Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory traversal vulnerability in the embedded web server.
CVE-2018-17944 1 Lexmark 16 Cx725h, Cx725h Firmware, Cx820 and 13 more 2024-11-21 N/A
On certain Lexmark devices that communicate with an LDAP or SMTP server, a malicious administrator can discover LDAP or SMTP credentials by changing that server's hostname to one that they control, and then capturing the credentials that are sent there. This occurs because stored credentials are not automatically deleted upon that type of hostname change.
CVE-2018-15520 1 Lexmark 68 Cx421, Cx421 Firmware, Cx522 and 65 more 2024-11-21 N/A
Various Lexmark devices have a Buffer Overflow (issue 2 of 2).
CVE-2018-15519 1 Lexmark 64 6500, 6500 Firmware, Cx310 and 61 more 2024-11-21 N/A
Various Lexmark devices have a Buffer Overflow (issue 1 of 2).
CVE-2016-6918 1 Lexmark 1 Markvision Enterprise 2024-11-21 9.8 Critical
Lexmark Markvision Enterprise (MVE) before 2.4.1 allows remote attackers to execute arbitrary commands by uploading files. (
CVE-2016-1487 1 Lexmark 1 Markvision Enterprise 2024-11-21 8.8 High
Lexmark Markvision Enterprise before 2.3.0 misuses the Apache Commons Collections Library, leading to remote code execution because of Java deserialization.
CVE-2014-8742 1 Lexmark 1 Markvision Enterprise 2024-11-21 7.5 High
Directory traversal vulnerability in the ReportDownloadServlet servlet in Lexmark MarkVision Enterprise before 2.1 allows remote attackers to read arbitrary files via unspecified vectors.
CVE-2014-8741 1 Lexmark 1 Markvision Enterprise 2024-11-21 9.8 Critical
Directory traversal vulnerability in the GfdFileUploadServerlet servlet in Lexmark MarkVision Enterprise before 2.1 allows remote attackers to write to arbitrary files via unspecified vectors.
CVE-2011-4538 1 Lexmark 66 C540, C540 Firmware, C543 and 63 more 2024-11-21 5.3 Medium
Lexmark X, W, T, E, and C devices before 2012-02-09 allow attackers to obtain sensitive information by reading passwords within exported settings.
CVE-2011-3269 1 Lexmark 168 25xxn, 25xxn Firmware, 6500e and 165 more 2024-11-21 7.5 High
Lexmark X, W, T, E, C, 6500e, and 25xxN devices before 2011-11-15 allow attackers to obtain sensitive information via a hidden email address in a Scan To Email shortcut.