47 matches found
ALPINE-CVE-2025-58364
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, an unsafe deserialization and validation of printer attributes causes null dereference in the libcups library. This is a remote DoS vulnerability available in local...
AZL-67136 CVE-2025-58364 affecting package cups for versions less than 2.4.13-1
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, an unsafe deserialization and validation of printer attributes causes null dereference in the libcups library. This is a remote DoS vulnerability available in local...
CVE-2025-58060
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, when the AuthType is set to anything but Basic, if the request contains an Authorization: Basic ... header, the password is not checked. This results in...
AZL-67269 CVE-2025-58060 affecting package cups for versions less than 2.3.3op2-10
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, when the AuthType is set to anything but Basic, if the request contains an Authorization: Basic ... header, the password is not checked. This results in...
Improper Input Validation
Overview Affected versions of this package are vulnerable to Improper Input Validation due to a logic error in ippreadio which is called internally by cupsDoRequest, ippValidateAttributes has a null dereference. An attacker can cause the application to crash by sending specially crafted data over...
Improper Authentication
Overview Affected versions of this package are vulnerable to Improper Authentication via the AuthType configuration when it is set to any value other than Basic and the request contains an Authorization: Basic ... header. An attacker can gain unauthorized access by sending a specially crafted...
CVE-2025-58364 cups: Remote DoS via null dereference
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, an unsafe deserialization and validation of printer attributes causes null dereference in the libcups library. This is a remote DoS vulnerability available in local...
CVE-2025-58364
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, an unsafe deserialization and validation of printer attributes causes null dereference in the libcups library. This is a remote DoS vulnerability available in local...
PT-2025-37253
Name of the Vulnerable Software and Affected Versions: CUPS versions 2.4.12 and earlier Description: CUPS Common Unix Printing System is an open-source printing system for Linux and Unix-like operating systems. Versions 2.4.12 and earlier are susceptible to a remote denial of service due to unsaf...
PT-2024-28567 · Motopress · Motopress Timetable/Event Schedule
Name of the Vulnerable Software and Affected Versions: MotoPress Timetable and Event Schedule versions 2.4.13 and earlier Description: The issue is related to the deserialization of untrusted data, allowing object injection. Recommendations: For versions 2.4.13 and earlier, update to a version...
WordPress Timetable and Event Schedule by MotoPress plugin <= 2.4.13 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by VNPT Nguyễn Phương Bắc Patchstack Alliance in WordPress Plugin Timetable and Event Schedule versions = 2.4.13...
SUSE CVE-2021-32813
Traefik is an HTTP reverse proxy and load balancer. Prior to version 2.4.13, there exists a potential header vulnerability in Traefik's handling of the Connection header. Active exploitation of this issue is unlikely, as it requires that a removed header would lead to a privilege escalation,...
CVE-2021-36826
Authenticated subscriber or higher user role if allowed to access projects Stored Cross-Site Scripting XSS vulnerability in weDevs WP Project Manager plugin = 2.4.13 versions...
CVE-2021-36826 WordPress WP Project Manager plugin <= 2.4.13 - Stored Cross-Site Scripting (XSS) vulnerability
Authenticated subscriber or higher user role if allowed to access projects Stored Cross-Site Scripting XSS vulnerability in weDevs WP Project Manager plugin = 2.4.13 versions...
Containous Traefik Elevation of Privilege Vulnerability
Containous Traefik is a reverse proxy and load balancer from the US company Containous. versions prior to Traefik 2.4.13 have a security vulnerability that can be exploited by attackers to elevate privileges...
CVE-2021-32813
Traefik is an HTTP reverse proxy and load balancer. Prior to version 2.4.13, there exists a potential header vulnerability in Traefik's handling of the Connection header. Active exploitation of this issue is unlikely, as it requires that a removed header would lead to a privilege escalation,...
Design/Logic Flaw
Traefik is an HTTP reverse proxy and load balancer. Prior to version 2.4.13, there exists a potential header vulnerability in Traefik's handling of the Connection header. Active exploitation of this issue is unlikely, as it requires that a removed header would lead to a privilege escalation,...
PT-2021-19947 · Traefik +1 · Traefik +1
Name of the Vulnerable Software and Affected Versions: Traefik versions prior to 2.4.13 Description: The issue concerns Traefik's handling of the Connection header, which could potentially lead to a header vulnerability. Active exploitation of this issue is unlikely as it requires a removed heade...
Wireshark 2.4.14, 2.6.8, 3.0.1 Security Updates (Apr 2019) - Windows
Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...
openSUSE Security Update : wireshark (openSUSE-2019-1108)
This update for wireshark to version 2.4.13 fixes the following issues : Security issues fixed : - CVE-2019-9214: Avoided a dereference of a null coversation which could make RPCAP dissector crash bsc1127367. - CVE-2019-9209: Fixed a buffer overflow in time values which could make ASN.1 BER and...