Lucene search
+L

47 matches found

OSV
OSV
added 2025/09/11 6:15 p.m.12 views

ALPINE-CVE-2025-58364

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, an unsafe deserialization and validation of printer attributes causes null dereference in the libcups library. This is a remote DoS vulnerability available in local...

6.5CVSS6.7AI score0.01067EPSS
SaveExploits1References1
OSV
OSV
added 2025/09/11 6:15 p.m.11 views

AZL-67136 CVE-2025-58364 affecting package cups for versions less than 2.4.13-1

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, an unsafe deserialization and validation of printer attributes causes null dereference in the libcups library. This is a remote DoS vulnerability available in local...

6.5CVSS6.7AI score0.01067EPSS
SaveExploits1References1
NVD
NVD
added 2025/09/11 6:15 p.m.11 views

CVE-2025-58060

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, when the AuthType is set to anything but Basic, if the request contains an Authorization: Basic ... header, the password is not checked. This results in...

8CVSS0.00968EPSS
SaveExploits1References4
OSV
OSV
added 2025/09/11 6:15 p.m.10 views

AZL-67269 CVE-2025-58060 affecting package cups for versions less than 2.3.3op2-10

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, when the AuthType is set to anything but Basic, if the request contains an Authorization: Basic ... header, the password is not checked. This results in...

8CVSS7.1AI score0.00968EPSS
SaveExploits1References1
Snyk
Snyk
added 2025/09/11 5:43 p.m.2 views

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation due to a logic error in ippreadio which is called internally by cupsDoRequest, ippValidateAttributes has a null dereference. An attacker can cause the application to crash by sending specially crafted data over...

7.1CVSS6.7AI score0.01067EPSS
SaveExploits1References2
Snyk
Snyk
added 2025/09/11 5:43 p.m.3 views

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication via the AuthType configuration when it is set to any value other than Basic and the request contains an Authorization: Basic ... header. An attacker can gain unauthorized access by sending a specially crafted...

8CVSS7AI score0.00968EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/09/11 5:26 p.m.3 views

CVE-2025-58364 cups: Remote DoS via null dereference

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, an unsafe deserialization and validation of printer attributes causes null dereference in the libcups library. This is a remote DoS vulnerability available in local...

6.5CVSS6.4AI score0.01067EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
added 2025/09/11 5:26 p.m.5 views

CVE-2025-58364

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, an unsafe deserialization and validation of printer attributes causes null dereference in the libcups library. This is a remote DoS vulnerability available in local...

6.5CVSS6.8AI score0.01067EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/08/29 12:00 a.m.10 views

PT-2025-37253

Name of the Vulnerable Software and Affected Versions: CUPS versions 2.4.12 and earlier Description: CUPS Common Unix Printing System is an open-source printing system for Linux and Unix-like operating systems. Versions 2.4.12 and earlier are susceptible to a remote denial of service due to unsaf...

9.8CVSS8AI score0.63607EPSS
SaveExploits8References71
Positive Technologies
Positive Technologies
added 2024/08/01 12:00 a.m.25 views

PT-2024-28567 · Motopress · Motopress Timetable/Event Schedule

Name of the Vulnerable Software and Affected Versions: MotoPress Timetable and Event Schedule versions 2.4.13 and earlier Description: The issue is related to the deserialization of untrusted data, allowing object injection. Recommendations: For versions 2.4.13 and earlier, update to a version...

5.5CVSS7.2AI score0.00298EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2024/07/22 7:12 p.m.10 views

WordPress Timetable and Event Schedule by MotoPress plugin <= 2.4.13 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by VNPT Nguyễn Phương Bắc Patchstack Alliance in WordPress Plugin Timetable and Event Schedule versions = 2.4.13...

5.5CVSS7.3AI score0.00298EPSS
SaveExploits0Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 3:40 a.m.6 views

SUSE CVE-2021-32813

Traefik is an HTTP reverse proxy and load balancer. Prior to version 2.4.13, there exists a potential header vulnerability in Traefik's handling of the Connection header. Active exploitation of this issue is unlikely, as it requires that a removed header would lead to a privilege escalation,...

8.1CVSS8AI score0.011EPSS
SaveExploits0References3
OSV
OSV
added 2022/04/04 8:15 p.m.7 views

CVE-2021-36826

Authenticated subscriber or higher user role if allowed to access projects Stored Cross-Site Scripting XSS vulnerability in weDevs WP Project Manager plugin = 2.4.13 versions...

5.4CVSS5.8AI score0.00618EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/04/04 7:46 p.m.19 views

CVE-2021-36826 WordPress WP Project Manager plugin <= 2.4.13 - Stored Cross-Site Scripting (XSS) vulnerability

Authenticated subscriber or higher user role if allowed to access projects Stored Cross-Site Scripting XSS vulnerability in weDevs WP Project Manager plugin = 2.4.13 versions...

5.4CVSS5.4AI score0.00618EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/08/05 12:00 a.m.64 views

Containous Traefik Elevation of Privilege Vulnerability

Containous Traefik is a reverse proxy and load balancer from the US company Containous. versions prior to Traefik 2.4.13 have a security vulnerability that can be exploited by attackers to elevate privileges...

8.1CVSS5.3AI score0.011EPSS
SaveExploits0References1
NVD
NVD
added 2021/08/03 11:15 p.m.25 views

CVE-2021-32813

Traefik is an HTTP reverse proxy and load balancer. Prior to version 2.4.13, there exists a potential header vulnerability in Traefik's handling of the Connection header. Active exploitation of this issue is unlikely, as it requires that a removed header would lead to a privilege escalation,...

8.1CVSS0.011EPSS
SaveExploits0References3
Prion
Prion
added 2021/08/03 11:15 p.m.27 views

Design/Logic Flaw

Traefik is an HTTP reverse proxy and load balancer. Prior to version 2.4.13, there exists a potential header vulnerability in Traefik's handling of the Connection header. Active exploitation of this issue is unlikely, as it requires that a removed header would lead to a privilege escalation,...

6.8CVSS7.9AI score0.011EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2021/08/03 12:00 a.m.15 views

PT-2021-19947 · Traefik +1 · Traefik +1

Name of the Vulnerable Software and Affected Versions: Traefik versions prior to 2.4.13 Description: The issue concerns Traefik's handling of the Connection header, which could potentially lead to a header vulnerability. Active exploitation of this issue is unlikely as it requires a removed heade...

8.1CVSS7.2AI score0.011EPSS
SaveExploits0References14
OpenVAS
OpenVAS
added 2019/04/12 12:00 a.m.39 views

Wireshark 2.4.14, 2.6.8, 3.0.1 Security Updates (Apr 2019) - Windows

Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...

7.5CVSS7.8AI score0.05803EPSS
SaveExploits6References6
Tenable Nessus
Tenable Nessus
added 2019/04/03 12:00 a.m.35 views

openSUSE Security Update : wireshark (openSUSE-2019-1108)

This update for wireshark to version 2.4.13 fixes the following issues : Security issues fixed : - CVE-2019-9214: Avoided a dereference of a null coversation which could make RPCAP dissector crash bsc1127367. - CVE-2019-9209: Fixed a buffer overflow in time values which could make ASN.1 BER and...

7.5CVSS6.9AI score0.03863EPSS
SaveExploits2References7
Rows per page
Query Builder