Vulners
Lucene search
| Reporter | Title | Published | Views | Family All 102 |
|---|---|---|---|---|
 | CUPS 2.0.3 - Multiple Vulnerabilities | 23 Jun 201500:00 | – | zdt |
| CUPS 2.0.3 - Remote Command Execution Exploit | 3 Feb 201700:00 | – | zdt |
 | Security Bulletin: Multiple vulnerabilities in cups, curl, libxfont affect IBM SmartCloud Provisioning for IBM Software Virtual Appliance | 17 Jun 201822:30 | – | ibm |
| Security Bulletin: PowerKVM is affected by cups vulnerabilities (multiple CVEs) | 18 Jun 201801:28 | – | ibm |
 | cups -- multiple vulnerabilities | 9 Jun 201500:00 | – | freebsd |
 | Medium: cups | 7 Jul 201500:00 | – | amazon |
 | Amazon Linux AMI : cups (ALAS-2015-559) | 8 Jul 201500:00 | – | nessus |
| CentOS 6 / 7 : cups (CESA-2015:1123) | 19 Jun 201500:00 | – | nessus |
| CUPS < 2.0.3 Multiple Vulnerabilities | 12 Jun 201500:00 | – | nessus |
| Debian DLA-239-1 : cups security update | 10 Jun 201500:00 | – | nessus |
10
10
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| ipp attributes (e.g., printer-uri, requesting-user-name, job-name, copies, finishings, job-id) | request body | /printers | IPP Create/Send Job request in CUPS that can trigger improper free operations on multi-value job-originating-host-name attributes leading to remote code execution. | CWE-254 |
| config content via PUT to overwrite cupsd.conf | request body | /admin/conf/cupsd.conf | Overwriting cupsd.conf through IPP/HTTP interface enables manipulation to run injected payloads (poisoned configuration) as part of the exploit chain. | CWE-254 |
| poisoned config via LD_PRELOAD injection | request body | /admin/conf/cupsd.conf | Overwriting cupsd.conf through IPP/HTTP interface enables manipulation to run injected payloads (poisoned configuration) as part of the exploit chain. | CWE-254 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 00:21Current
7.5High risk
Vulners AI Score7.5
CVSS 210
EPSS0.29913