Vulnerability index

Browse CVEs

28 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Papercut Mf HIGH 8.1
CVE-2026-6180

A race condition exists in PaperCut MF when processing badge-swipe data from certain HP multifunction devices. Under specific network conditions invo…

Fix: 24.1.9 / 25.0.10+
Fix from $1,950 2026-05-05
Papercut Mf HIGH 7.5
CVE-2026-5115

The PaperCut NG/MF (specifically, the embedded application for Konica Minolta devices) is vulnerable to session hijacking. The PaperCut NG/MF Embedde…

Fix: 25.0.5 / 25.0.9+
Fix from $1,950 2026-03-31
Papercut Mf MEDIUM 5.4
CVE-2024-9672

A reflected cross-site scripting (XSS) vulnerability exists in PaperCut NG/MF. This issue can be used to execute specially created JavaScript payload…

Fix: 24.1.1+
Fix from $1,600 2024-12-10
Papercut Ng HIGH 7.2
CVE-2023-39470

PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exec…

Fix: 22.1.1+
Fix from $1,950 2024-11-22
Papercut Mf MEDIUM 5.5
CVE-2024-8405

An arbitrary file creation vulnerability exists in PaperCut NG/MF that only affects Windows servers with Web Print enabled. This specific flaw exists…

Fix: 23.0.9+
Fix from $1,600 2024-09-26
Papercut Mf HIGH 7.8
CVE-2024-8404

An arbitrary file deletion vulnerability exists in PaperCut NG/MF, specifically affecting Windows servers with Web Print enabled. To exploit this vul…

Fix: 23.0.9+
Fix from $1,950 2024-09-26
Papercut Mf HIGH 7.8
CVE-2024-4712

An arbitrary file creation vulnerability exists in PaperCut NG/MF that only affects Windows servers with Web Print enabled. This specific flaw exists…

Fix: 23.0.9+
Fix from $1,950 2024-05-14
Papercut Mf HIGH 7.8
CVE-2024-3037

An arbitrary file deletion vulnerability exists in PaperCut NG/MF, specifically affecting Windows servers with Web Print enabled. To exploit this vul…

Fix: 23.0.9+
Fix from $1,950 2024-05-14
Papercut Mf HIGH 7.2
CVE-2023-39469EPSS 58%

PaperCut NG External User Lookup Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary …

Fix: 22.1.1+
Fix from $1,950 2024-05-03
Papercut Mf HIGH 7.2
CVE-2024-1882

This vulnerability allows an already authenticated admin user to create a malicious payload that could be leveraged for remote code execution on the …

Fix: 20.1.10 / 21.2.14+
Fix from $1,950 2024-03-14
Papercut Mf MEDIUM 6.5
CVE-2024-1884EPSS 38%

This is a Server-Side Request Forgery (SSRF) vulnerability in the PaperCut NG/MF server-side module that allows an attacker to induce the server-sid…

Fix: 20.1.10 / 21.2.14+
Fix from $1,600 2024-03-14
Papercut Mf MEDIUM 6.1
CVE-2024-1883EPSS 61%

This is a reflected cross site scripting vulnerability in the PaperCut NG/MF application server. An attacker can exploit this weakness by crafting a …

Fix: 20.1.10 / 21.2.14+
Fix from $1,600 2024-03-14
Papercut Mf HIGH 7.2
CVE-2024-1654

This vulnerability potentially allows unauthorized write operations which may lead to remote code execution. An attacker must already have authentica…

Fix: 20.1.10 / 21.2.14+
Fix from $1,950 2024-03-14
Papercut Mf CRITICAL 9.8
CVE-2024-1222EPSS 64%

This allows attackers to use a maliciously formed API request to gain access to an API authorization level with elevated privileges. This applies to …

Fix: 20.1.10 / 21.2.14+
Fix from $2,300 2024-03-14
Papercut Mf MEDIUM 6.7
CVE-2023-6006

This vulnerability potentially allows local attackers to escalate privileges on affected installations of PaperCut NG. An attacker must have local wr…

Fix: 23.0.1+
Fix from $1,600 2023-11-14
Papercut Mf MEDIUM 6.5
CVE-2023-31046

A Path Traversal vulnerability exists in PaperCut NG before 22.1.1 and PaperCut MF before 22.1.1. Under specific conditions, this could potentially a…

Fix: 22.1.1+
Fix from $1,600 2023-10-19
Mobility Print Server MEDIUM 6.5
CVE-2023-2508

The `PaperCutNG Mobility Print` version 1.0.3512 application allows an unauthenticated attacker to perform a CSRF attack on an instance administrat…

No fix yet
Fix from $1,600 2023-09-20
Papercut Ng MEDIUM 6.5
CVE-2023-4568

PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versi…

Fix: after 22.0.12
Fix from $1,600 2023-09-13
Papercut Mf CRITICAL 9.8
CVE-2023-39143EPSS 80%

PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabling attackers to upload, read, or delete arbitrary files. This leads …

Fix: 22.1.3+
Fix from $2,300 2023-08-04
Papercut Mf HIGH 7.5
CVE-2023-3486EPSS 79%

An authentication bypass exists in PaperCut NG versions 22.0.12 and prior that could allow a remote, unauthenticated attacker to upload arbitrary fil…

Fix: 22.1.3+
Fix from $1,950 2023-07-25
Papercut Mf HIGH 8.8
CVE-2023-2533 KEVEPSS 29%

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in PaperCut NG/MF, which, under specific conditions, could potentially enable a…

Fix: 20.1.8 / 21.2.12+
Fix from $1,950 2023-06-20
Papercut Mf CRITICAL 9.8
CVE-2023-27350 KEVEPSS 100%

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is …

Fix: 20.1.7 / 21.2.11+
Fix from $2,300 2023-04-20
Papercut Mf HIGH 7.5
CVE-2023-27351 KEVEPSS 77%

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is …

Fix: 20.1.7 / 21.2.11+
Fix from $1,950 2023-04-20
Papercut Mf CRITICAL 9.8
CVE-2019-12135

An unspecified vulnerability in the application server in PaperCut MF and NG versions 18.3.8 and earlier and versions 19.0.3 and earlier allows remot…

Fix: after 19.0.3
Fix from $2,300 2019-06-06
Papercut Mf CRITICAL 9.8
CVE-2019-8948

PaperCut MF before 18.3.6 and PaperCut NG before 18.3.6 allow script injection via the user interface, aka PC-15163.

Fix: 18.3.6+
Fix from $2,300 2019-02-20
Papercut Mf HIGH 7.5
CVE-2014-2657

Unspecified vulnerability in the print release functionality in PaperCut MF before 14.1 (Build 26983) has unknown impact and remote vectors, related …

No fix yet
Fix from $1,950 2014-04-28
Papercut Mf MEDIUM 5.0
CVE-2014-2658

Unspecified vulnerability in Papercut MF and NG before 14.1 (Build 26983) allows attacker to cause a denial of service via unknown vectors.

Fix: after 14.1
Fix from $1,600 2014-04-28
Papercut Mf MEDIUM 6.8
CVE-2014-2659

Cross-site request forgery (CSRF) vulnerability in the admin UI in Papercut MF and NG before 14.1 (Build 26983) allows remote attackers to hijack the…

Fix: after 14.1
Fix from $1,600 2014-04-22