Browse CVEs

HIGH 7.5 CVE-2024-39921 Observable timing discrepancy issue exists in IPCOM EX2 Series V01L02NF0001 to V01L06NF0401, V01L20NF0001 to V01L20NF0401, V02L20NF0001 to V02L21NF03… Ipcom Ve2 Ls 100 Firmware Mitigation only Fix from $1,9502024-09-04 MEDIUM 6.5 CVE-2024-40617 Path traversal vulnerability exists in FUJITSU Network Edgiot GW1500 (M2M-GW for FENICS). If a remote authenticated attacker with User Class privileg… Network Edgiot Gw1500 Firmware Mitigation only Fix from $1,6002024-07-17 MEDIUM 5.5 CVE-2023-40238 A LogoFAIL issue was discovered in BmpDecoderDxe in Insyde InsydeH2O with kernel 5.2 before 05.28.47, 5.3 before 05.37.47, 5.4 before 05.45.47, 5.5 b… Esprimo D556\/2 Firmware 1.31.0 / 1.35.0+ Fix from $1,6002023-12-07 HIGH 8.2 CVE-2023-4096 Weak password recovery mechanism vulnerability in Fujitsu Arconte Áurea version 1.5.0.0, which exploitation could allow an attacker to perform a brut… Arconte Aurea Mitigation only Fix from $1,9502023-09-19 MEDIUM 5.3 CVE-2023-4095 User enumeration vulnerability in Arconte Áurea 1.5.0.0 version. The exploitation of this vulnerability could allow an attacker to obtain a list of r… Arconte Aurea Mitigation only Fix from $1,6002023-09-19 HIGH 8.2 CVE-2023-4094 ARCONTE Aurea's authentication system, in its 1.5.0.0 version, could allow an attacker to make incorrect access requests in order to block each legit… Arconte Aurea Mitigation only Fix from $1,9502023-09-19 MEDIUM 6.1 CVE-2023-4093 Reflected and persistent XSS vulnerability in Arconte Áurea, in its 1.5.0.0 version. The exploitation of this vulnerability could allow an attacker t… Arconte Aurea Mitigation only Fix from $1,6002023-09-19 CRITICAL 9.8 CVE-2023-4092 SQL injection vulnerability in Arconte Áurea, in its 1.5.0.0 version. The exploitation of this vulnerability could allow an attacker to read sensitiv… Arconte Aurea No fix yet Fix from $2,3002023-09-19 MEDIUM 5.0 CVE-2023-39903 An issue was discovered in Fujitsu Software Infrastructure Manager (ISM) before 2.8.0.061. The ismsnap component (in this specific case at /var/log/f… Software Infrastructure Manager 2.8.0.061+ Fix from $1,6002023-08-07 HIGH 7.5 CVE-2023-39379 Fujitsu Software Infrastructure Manager (ISM) stores sensitive information at the product's maintenance data (ismsnap) in cleartext form. As a result… Software Infrastructure Manager Mitigation only Fix from $1,9502023-08-04 HIGH 8.8 CVE-2023-38555 Authentication bypass vulnerability in Fujitsu network devices Si-R series and SR-M series allows a network-adjacent unauthenticated attacker to obta… Si R 30b Firmware after 02.54 Fix from $1,9502023-07-26 HIGH 7.5 CVE-2023-38433 Fujitsu Real-time Video Transmission Gear "IP series" use hard-coded credentials, which may allow a remote unauthenticated attacker to initialize or … Ip He950e Firmware Mitigation only Fix from $1,9502023-07-26 HIGH 7.4 CVE-2023-22377 Improper restriction of XML external entity reference (XXE) vulnerability exists in tsClinical Define.xml Generator all versions (v1.0.0 to v1.4.0) a… Tsclinical Define.xml Generator 1.1.1+ Fix from $1,9502023-02-15 CRITICAL 9.8 CVE-2022-31794 An issue was discovered on Fujitsu ETERNUS CentricStor CS8000 (Control Center) devices before 8.1A SP02 P04. The vulnerability resides in the request… Eternus Cs8000 Firmware 8.1+ Fix from $2,3002022-06-20 CRITICAL 9.8 CVE-2022-31795 An issue was discovered on Fujitsu ETERNUS CentricStor CS8000 (Control Center) devices before 8.1A SP02 P04. The vulnerability resides in the grel_fi… Eternus Cs8000 Firmware 8.1+ Fix from $2,3002022-06-20 CRITICAL 9.8 CVE-2022-29516 The web console of FUJITSU Network IPCOM series (IPCOM EX2 IN(3200, 3500), IPCOM EX2 LB(1100, 3200, 3500), IPCOM EX2 SC(1100, 3200, 3500), IPCOM EX2 … Ipcom Ex2 Nw 1100 Firmware Mitigation only Fix from $2,3002022-05-18 HIGH 7.8 CVE-2022-28806 An issue was discovered on certain Fujitsu LIEFBOOK devices (A3510, U9310, U7511/U7411/U7311, U9311, E5510/E5410, U7510/U7410/U7310, E459/E449) with … Lifebook A3510 Firmware 1.09 / 2.17+ Fix from $1,9502022-05-04 HIGH 7.8 CVE-2022-27089 In Fujitsu PlugFree Network <= 7.3.0.3, an Unquoted service path in PFNService.exe software allows a local attacker to potentially escalate privilege… Plugfree Network after 7.3.0.3 Fix from $1,9502022-04-11 HIGH 7.8 CVE-2021-20722 Untrusted search path vulnerability in the installers of ScanSnap Manager prior to versions V7.0L20 and the Software Download Installer prior to WinS… Scansnap Manager 7.0l20+ Fix from $1,9502021-05-24 MEDIUM 5.4 CVE-2020-17457 Fujitsu ServerView Suite iRMC before 9.62F allows XSS. An authenticated attacker can store an XSS payload in the PSCU_FILE_INIT field of a Save Confi… Serverview Remote Management 9.62f+ Fix from $1,6002021-03-17 CRITICAL 9.8 CVE-2020-29127 An issue was discovered on Fujitsu Eternus Storage DX200 S4 devices through 2020-11-25. After logging into the portal as a root user (using any web b… Eternus Storage Dx200 S4 Firmware after 2020-11-25 Fix from $2,3002020-11-30 MEDIUM 5.9 CVE-2019-13163 The Fujitsu TLS library allows a man-in-the-middle attack. This affects Interstage Application Development Cycle Manager V10 and other versions, Inte… Gp7000f Firmware Mitigation only Fix from $1,6002020-02-07 CRITICAL 9.8 CVE-2019-18200 An issue was discovered on Fujitsu Wireless Keyboard Set LX390 GK381 devices. Because of the lack of proper encryption of 2.4 GHz communication, they… Lx390 Firmware No fix yet Fix from $2,3002019-10-24 HIGH 7.5 CVE-2019-18201 An issue was discovered on Fujitsu Wireless Keyboard Set LX390 GK381 devices. Because of the lack of proper encryption of 2.4 GHz communication, an a… Lx390 Firmware No fix yet Fix from $1,9502019-10-24 MEDIUM 6.6 CVE-2019-18199 An issue was discovered on Fujitsu Wireless Keyboard Set LX390 GK381 devices. Because of the lack of proper encryption of 2.4 GHz communication, and … Lx390 Firmware No fix yet Fix from $1,6002019-10-24 HIGH 7.8 CVE-2018-16156 In PaperStream IP (TWAIN) 1.42.0.5685 (Service Update 7), the FJTWSVIC service running with SYSTEM privilege processes unauthenticated messages recei… Paperstream Ip \(twain\) No fix yet Fix from $1,9502019-05-17 CRITICAL 9.6 CVE-2019-9835 The receiver (aka bridge) component of Fujitsu Wireless Keyboard Set LX901 GK900 devices allows Keystroke Injection. This occurs because it accepts u… Lx901 Firmware No fix yet Fix from $2,3002019-03-15 HIGH 7.8 CVE-2017-10855 Untrusted search path vulnerability in FENCE-Explorer for Windows V8.4.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in … Fence Explorer after 8.4.1 Fix from $1,9502017-09-15 HIGH 7.2 CVE-2014-7253 FUJITSU F-12C, ARROWS Tab LTE F-01D, ARROWS Kiss F-03D, and REGZA Phone T-01D for Android allows local users to execute arbitrary commands via unspec… Arrows Kiss F 03d Mitigation only Fix from $1,9502014-12-05 HIGH 10.0 CVE-2013-7105 Buffer overflow in the Interstage HTTP Server log functionality, as used in Fujitsu Interstage Application Server 9.0.0, 9.1.0, 9.2.0, 9.3.1, and 10.… Interstage Application Server Mitigation only Fix from $1,9502013-12-14