Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2737▼ 484 respecto a la semana anterior

Críticas / altas1302▼ 187 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)227▼ 275 respecto a la semana anterior

65 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2018-16184	Modificada	Crítica (9.8)	4.3%	—	Ricoh D2200 Firmware Ricoh D5500 Firmware Ricoh D5510 Firmware Ricoh D5520 Firmware+4	9/1/2019	17/6/2026	RICOH Interactive Whiteboard D2200 V1.6 to V2.2, D5500 V1.6 to V2.2, D5510 V1.6 to V2.2, and the display versions with RICOH Interactive Whiteboard Controller Type1 V1.6 to V2.2 attached (D5520, D6500, D6510, D7500, D8400) allows remote attackers to execute arbitrary commands via unspecified vectors.
CVE-2018-18006	Modificada	Crítica (9.8)	21%	—	Ricoh Myprint	14/12/2018	17/6/2026	Hardcoded credentials in the Ricoh myPrint application 2.9.2.4 for Windows and 2.2.7 for Android give access to any externally disclosed myPrint WSDL API, as demonstrated by discovering API secrets of related Google cloud printers, encrypted passwords of mail servers, and names of printed files.
CVE-2018-17316	Modificada	Media (6.1)	1.0%	—	Ricoh MP C6003 Firmware	26/9/2018	17/6/2026	On the RICOH MP C6003 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.
CVE-2018-17315	Modificada	Media (6.1)	1.0%	—	Ricoh MP C2003sp Firmware	26/9/2018	17/6/2026	On the RICOH MP C2003 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.
CVE-2018-17314	Modificada	Media (6.1)	1.0%	—	Ricoh MP 305+ Firmware	26/9/2018	17/6/2026	On the RICOH Aficio MP 305+ printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.
CVE-2018-17313	Modificada	Media (6.1)	2.3%	💥 Exploit	Ricoh MP C307 Firmware	26/9/2018	17/6/2026	On the RICOH MP C307 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.
CVE-2018-17312	Modificada	Media (6.1)	1.0%	—	Ricoh Aficio MP 301spf Firmware	26/9/2018	17/6/2026	On the RICOH Aficio MP 301 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.
CVE-2018-17311	Modificada	Media (6.1)	1.0%	—	Ricoh MP C6503 Firmware	26/9/2018	17/6/2026	On the RICOH MP C6503 Plus printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.
CVE-2018-17310	Modificada	Media (6.1)	2.3%	💥 Exploit	Ricoh MP C1803 JPN Firmware	26/9/2018	17/6/2026	On the RICOH MP C1803 JPN printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.
CVE-2018-17309	Modificada	Media (6.1)	1.0%	—	Ricoh MP C406zspf Firmware	26/9/2018	17/6/2026	On the RICOH MP C406Z printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.
CVE-2018-17002	Modificada	Media (6.1)	1.0%	—	Ricoh MP 2001sp Firmware	21/9/2018	17/6/2026	On the RICOH MP 2001 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.
CVE-2018-17001	Modificada	Media (6.1)	1.0%	—	Ricoh SP 4510sf Firmware	21/9/2018	17/6/2026	On the RICOH SP 4510SF printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.
CVE-2018-15884	Modificada	Alta (8.8)	2.5%	💥 Exploit	Ricoh MP C4504ex Firmware	28/8/2018	17/6/2026	RICOH MP C4504ex devices allow HTML Injection via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn parameter.
CVE-2015-6750	Modificada	Alta (7.5)	7.7%	💥 Exploit	Ricoh Dl-1 Sr10	31/8/2015	17/6/2026	Buffer overflow in Ricoh DL FTP Server 1.1.0.6 and earlier allows remote attackers to execute arbitrary code via a long USER command.
CVE-2012-5002	Modificada	Media (6.8)	31%	💥 Exploit	Ricoh Dl-10 Ricoh Sr10 FTP Server	19/9/2012	16/6/2026	Stack-based buffer overflow in SR10 FTP server (SR10.exe) 1.1.0.6 in Ricoh DC Software DL-10 4.5.0.1, when the Log file name option is enabled, allows remote attackers to execute arbitrary code via a long USER FTP command.