37 matches found
CLSA-2026-1777480368 cups: Fix of CVE-2026-34980
CVE-2026-34980: filter control characters from option values in the scheduler to prevent PPD keyword injection via Print-Job...
CLSA-2026-1777392877 cups: Fix of CVE-2026-34980
CVE-2026-34980: filter control characters from IPP option values and allowlist PPD keywords returned by filters so a remote attacker cannot inject cupsFilter/cupsFilter2 entries on a shared PostScript queue and gain code execution as the cupsd user...
CLSA-2026-1777022893 Fix CVE(s): CVE-2026-34980
SECURITY UPDATE: arbitrary PPD keyword injection via job options - debian/patches/CVE-2026-34980.patch: filter control characters from option values and allowlist PPD keywords from filters in scheduler/job.c - CVE-2026-34980...
CLSA-2026-1777042487 Fix CVE(s): CVE-2026-34980
SECURITY UPDATE: filter control characters from option values in the scheduler to prevent PPD keyword injection via Print-Job. - debian/patches/CVE-2026-34980.patch: filter out control characters from IPP option values in scheduler/job.c and filter out special PPD keywords in the CUPSDLOGPPD bran...
CLSA-2026-1776788057 cups: Fix of CVE-2026-34980
CVE-2026-34980: filter control characters from option values in the scheduler to prevent PPD keyword injection via Print-Job...
Linux Distros Unpatched Vulnerability : CVE-2026-34980
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, in a network-exposed cupsd wi...
BELL-CVE-2026-34980
Bulletin has no description...
CVE-2026-34980
creationtimestamp| type| source ---|---|--- 2026-03-31 23:29:02+00:00| published-proof-of-concept| https://github.com/OpenPrinting/cups/security/advisories/GHSA-4852-v58g-6cwf 2026-04-08 06:58:20+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3mixpqgctwh2s 2026-04-08...
Qnap QTS and QuTS hero Improper Neutralization of Special Elements used in an OS Command (CVE-2023-34980)
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 4.5.4.2627...
CVE-2021-34980
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.781.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setupwizard.cgi page. When parsing the SOAPLOGINTOKEN...
CVE-2023-34980
creationtimestamp| type| source ---|---|--- 2024-03-08 18:26:55+00:00| seen| https://t.me/ctinow/203488 2024-03-08 18:32:01+00:00| seen| https://t.me/ctinow/203500...
CVE-2023-34980 QTS, QuTS hero
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 4.5.4.2627...
CVE-2023-34980 QTS, QuTS hero
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 4.5.4.2627...
CVE-2023-34980
CVE-2023-34980 affects QNAP QTS and QuTS hero (h4.5.4.2626/2627+) with an OS command injection vulnerability. The issue is described as improper neutralization of special elements used in an OS command, enabling an authenticated administrator to execute commands over the network. Affected product...
CVE-2021-34980
The CVE-2021-34980 entry concerns NETGEAR R6260 routers (1.1.0.78_1.0.1). The vulnerability is a stack-based buffer overflow in setupwizard.cgi triggered by parsing the SOAP_LOGIN_TOKEN environment variable, where input length is not validated before copying into a fixed-size stack buffer. This a...