Vulnerabilidades de Fujitsu
CVEs publicadas que afetam produtos de Fujitsu: 12 registro(s), com severidade, exploração e correções.
M10-1 Firmware 7M10-4 Firmware 7M10-4s Firmware 7M12-1 Firmware 7M12-2 Firmware 7M12-2s Firmware 7Interstage Business Process Manager Analytics 1Paperstream Ip (twain) 1Scansnap Manager 1i-FILTER Browser & Cloud MultiAgent for Windows 1Fbiosdrv.sys 1
CVE-2026-28267
Média · 5.5
CWE-276 10/03/2026
Incorrect Default Permissions em Digital Arts Inc. i-フィルター 10 (Windows version only)
Multiple i-フィルター products are configured with improper file access permission settings. Files may be created or overwritten in the system directory or backup directory by a non-administrative user.
CVE-2025-65001
Alta · 8.2
CWE-787 12/11/2025
Out-of-bounds Write em Fujitsu Fbiosdrv.sys
Fujitsu fbiosdrv.sys before 2.5.0.0 allows an attacker to potentially affect system confidentiality, integrity, and availability.
CVE-2021-20722
Alta · 7.8
CWE-427 24/05/2021
Uncontrolled Search Path Element em Fujitsu Scansnap Manager
Untrusted search path vulnerability in the installers of ScanSnap Manager prior to versions V7.0L20 and the Software Download Installer prior to WinSSInst2JP.exe and WinSSInst2iX1500JP.exe allows an attacker to gain privileges and execute arbitrary code with the privilege of the user invoking the installer via a Trojan horse DLL in an unspecified directory.
CVE-2021-3326
Alta · 7.5
CWE-617 27/01/2021
The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing...
The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.
CVE-2020-8177
Alta · 7.8
CWE-74 14/12/2020
Injection em Haxx Curl
curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used.
CVE-2020-8285
Alta · 7.5
CWE-674 14/12/2020
curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack...
curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.
CVE-2020-8284
Baixa · 3.7
CWE-200 14/12/2020
A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting...
A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions.
CVE-2018-16156
Alta · 7.8
Exploit público CWE-426 17/05/2019
Untrusted Search Path em Fujitsu Paperstream Ip (twain)
In PaperStream IP (TWAIN) 1.42.0.5685 (Service Update 7), the FJTWSVIC service running with SYSTEM privilege processes unauthenticated messages received over the FjtwMkic_Fjicube_32 named pipe. One of these message processing functions attempts to dynamically load the UninOldIS.dll library and executes an exported function named ChangeUninstallString. The default install does not contain this library and therefore if any DLL with that name exists in any directory listed in the PATH variable, it can be used to escalate to SYSTEM level privilege.
CVE-2019-6111
Média · 5.9
Exploit público CWE-22 31/01/2019
An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp...
An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious scp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the scp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh/authorized_keys file).
CVE-2019-6109
Média · 6.8
CWE-116 31/01/2019
An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display...
An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server (or Man-in-The-Middle attacker) can employ crafted object names to manipulate the client output, e.g., by using ANSI control codes to hide additional files being transferred. This affects refresh_progress_meter() in progressmeter.c.
CVE-2018-1000007
Crítica · 9.8
24/01/2018
libcurl: vazamento de cabeçalhos de autenticação em redirecionamentos
libcurl 7.1 até 7.57.0 pode vazar acidentalmente dados de autenticação para terceiros. Quando solicitado a enviar cabeçalhos personalizados em suas requisições HTTP, o libcurl envia esse conjunto de cabeçalhos primeiro ao host da URL inicial, mas também, se solicitado a seguir redirecionamentos e uma resposta HTTP 30X for retornada, ao host mencionado na URL no valor do cabeçalho de resposta Location:. Enviar o mesmo conjunto de cabeçalhos a hosts subsequentes é um problema particular para aplicações que repassam cabeçalhos Authorization: personalizados, já que esse cabeçalho frequentemente contém informações sensíveis de privacidade ou dados que podem permitir que outros se passem pela requisição do cliente que usa libcurl.
CVE-2013-2251
Crítica · 9.8
KEV Urgente · 83 Exploit público CWE-74 20/07/2013
Apache Struts Improper Input Validation Vulnerability
Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction: prefix.