Priority HIGH 69
Improper Authentication vulnerability in Toshiba Storage Security Software V1.2.0.7413 is that allows for sensitive information to be obtained via(local) password authentication module.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00346 · Published 2023-01-31 · No fix listed CWE-287
Priority MEDIUM 47
Unspecified vulnerability in the Toshiba Bluetooth stack allows remote attackers to gain administrative access (aka Remote Root) via unspecified vectors.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.02342 · Published 2007-01-08 · No fix listed
Priority MEDIUM 46
Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01979 · Published 2017-07-07 · No fix listed CWE-78
Priority MEDIUM 46
Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier, Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier may allow remote attackers to access a non-documented developer screen to p…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01786 · Published 2017-07-07 · No fix listed
Priority MEDIUM 46
Unspecified vulnerability in Toshiba Bluetooth Stack before 4.20.01 has unspecified impact and attack vectors, related to the 4.20.01(T) "Security fix." NOTE: due to the lack of details in the vendor advisory, it is not…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.01353 · Published 2006-10-31 · No fix listed
Priority MEDIUM 45
Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier, Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier uses hard-coded credentials, which may allow attackers to perform operation…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0142 · Published 2017-07-07 · No fix listed CWE-798
Priority MEDIUM 45
Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01483 · Published 2017-07-07 · No fix listed
Priority MEDIUM 44
Toshiba ConfigFree 8.0.38 has a CF7 File Remote Command Execution Vulnerability
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.03364 · Published 2020-01-23 · No fix listed CWE-78
Priority MEDIUM 43
Untrusted search path vulnerability in installers of the software for SDHC/SDXC Memory Card with embedded NFC functionality Software Update Tool V1.00.03 and earlier, SDHC Memory Card with embedded wireless LAN functiona…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.0299 · Published 2017-04-28 · No fix listed CWE-426
Priority MEDIUM 41
Multiple buffer overflows in Toshiba Surveillance (Surveillix) RecordSend ActiveX control (MeIpCamX.DLL 1.0.0.4) allow remote attackers to execute arbitrary code via long arguments to the (1) SetPort and (2) SetIpAddress…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.07984 · Published 2008-01-23 · No fix listed CWE-119
Priority LOW 39
Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier uses hard-coded credentials, which may allow an attacker on the same network segment to login to the administrators setti…
CVSS 3.0HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00602 · Published 2019-01-09 · No fix listed CWE-798
Priority LOW 39
Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier allows an attacker on the same network segment to execute arbitrary OS commands.
CVSS 3.0HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.0065 · Published 2019-01-09 · No fix listed CWE-78
Priority LOW 39
Cross-site request forgery (CSRF) vulnerability in Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier and Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier allows remote attacke…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.00769 · Published 2017-07-07 · No fix listed CWE-352
Priority LOW 38
Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier may allow an attacker on the same network segment to access a non-documented developer screen to perform operations on th…
CVSS 3.0HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.0047 · Published 2019-01-09 · No fix listed
Priority LOW 38
Multiple stack-based buffer overflows in CFProfile.exe in Toshiba ConfigFree Utility 8.0.38 allow user-assisted attackers to execute arbitrary code.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02153 · Published 2019-12-27 · No fix listed CWE-787
Priority LOW 36
An unquoted search path vulnerability exists in HDD Password tool (for Windows) version 1.20.6620 and earlier which is stored in CANVIO PREMIUM 3TB(HD-MB30TY, HD-MA30TY, HD-MB30TS, HD-MA30TS), CANVIO PREMIUM 2TB(HD-MB20T…
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.0036 · Published 2020-04-20 · No fix listed CWE-428
Priority LOW 31
Unquoted Windows search path vulnerability in Toshiba Bluetooth Stack for Windows before 9.10.32(T) and Service Station before 2.2.14 allows local users to gain privileges via a Trojan horse application with a name compo…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00382 · Published 2015-02-28 · No fix listed
Priority LOW 30
Toshiba Face Recognition 2.0.2.32 allows physically proximate attackers to obtain notebook access by presenting a large number of images for which the viewpoint and lighting have been modified to match a stored image of…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00364 · Published 2009-02-20 · No fix listed CWE-255
Priority LOW 29
Generic IO & Memory Access driver for PCs provided by TOSHIBA CORPORATION and Dynabook Inc.
CVSS 4.0MEDIUM 6.8· Local · Low privileges · No interaction · EPSS 0.00165 · Published 2026-06-25 · No fix listed CWE-782
Priority LOW 29
Cross-site scripting vulnerability in Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier allows an remote attacker to inject arbitrary web script or HTML via unspecified ve…
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00788 · Published 2019-01-09 · No fix listed CWE-79
Priority LOW 29
Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier allows an attacker on the same network segment to bypass access restriction to access the information and files stored on…
CVSS 3.0MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00503 · Published 2019-01-09 · No fix listed
Priority LOW 29
Coordinate Plus App for Android 1.0.2 and earlier and Coordinate Plus App for iOS 1.0.2 and earlier do not verify SSL certificates.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.0108 · Published 2017-04-21 · No fix listed CWE-295
Priority LOW 28
Unspecified vulnerability in Toshiba Bluetooth wireless device driver 3.x and 4 through 4.00.35, as used in multiple products, allows physically proximate attackers to cause a denial of service (crash), corrupt memory, a…
CVSS 2.0MEDIUM 6.2· Local · No auth · Interaction — · EPSS 0.00378 · Published 2006-10-19 · No fix listed
Priority LOW 28
The TOSRFBD.SYS driver for Toshiba Bluetooth Stack 4.00.29 and earlier on Windows allows remote attackers to cause a denial of service (reboot) via a L2CAP echo request that triggers an out-of-bounds memory access, simil…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02508 · Published 2006-06-22 · No fix listed CWE-119
Priority LOW 28
Directory traversal vulnerability in OBEX Push services in Toshiba Bluetooth Stack 4.00.23(T) and earlier allows remote attackers to upload arbitrary files to arbitrary remote locations specified by ..
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0255 · Published 2006-01-14 · No fix listed
Load more