Vulnerabilities in Toshiba Tec Corporation
72 resultsCVE-2024-27155HIGHLocal Privilege Escalation and Remote Code Execution using insecure permissionsEPSS 0.4%CVE-2024-27151HIGHLocal Privilege Escalation and Remote Code Execution using insecure permissionsEPSS 0.4%CVE-2026-60011MEDIUMSharp and Toshiba Tec MFPs (multifunction printers) fail to properly authorize requests to directly access certain image data stored to the EPSS 0.4%CVE-2024-47801HIGHSharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cross-site scripting vulnerabilityEPSS 0.4%CVE-2024-47549HIGHSharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination of unintended data to HTTP reEPSS 0.4%CVE-2024-48870MEDIUMSharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cross-site scripting vulnerabilityEPSS 0.3%CVE-2024-21824MEDIUMImproper authentication vulnerability in exists in multiple printers and scanners which implement Web Based Management provided by BROTHER IEPSS 0.3%CVE-2024-3498HIGHIncorrect Permission Assignment Privilege Escalation VulnerabilityEPSS 0.3%CVE-2024-27169HIGHLack of authenticationEPSS 0.3%CVE-2024-27168HIGHHardcoded keys used to generate authentication cookiesEPSS 0.3%CVE-2024-22475MEDIUMCross-site request forgery vulnerability in multiple printers and scanners which implement Web Based Management provided by BROTHER INDUSTRIEPSS 0.3%CVE-2024-27158HIGHHardcoded root passwordEPSS 0.3%CVE-2024-27170HIGHHardcoded credentials for WebDAV accessEPSS 0.3%CVE-2024-27180MEDIUMTOCTOU vulnerabilityEPSS 0.3%CVE-2024-27147HIGHLocal Privilege Escalation and Remote Code Execution using snmpdEPSS 0.3%CVE-2024-27159MEDIUMHardcoded password used to encrypt logsEPSS 0.3%CVE-2024-27179MEDIUMSession disclosure inside the log filesEPSS 0.3%CVE-2024-27164HIGHHardcoded credentialsEPSS 0.3%CVE-2024-27154MEDIUMPasswords are stored in clear-text logs.EPSS 0.3%CVE-2024-27148HIGHLocal Privilege Escalation and Remote Code Execution using insecure PATHEPSS 0.2%