EulerOS 2.0 SP3 : foomatic (EulerOS-SA-2019-2579)

According to the versions of the foomatic packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x...

CVE-2019-8560

CVE-2019-8560 affects Apple Disk Images: an out-of-bounds read could allow a malicious app to read restricted memory. Affected platforms include iOS 12.3+, macOS Mojave 10.14.5+, tvOS 12.3, and watchOS 5.2.1. Fixes are implemented via improved bounds checking and memory handling in the listed upd...

EulerOS 2.0 SP5 : foomatic (EulerOS-SA-2019-1964)

According to the versions of the foomatic packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was discovered that foomatic-rip failed to remove all shell special characters from inputs used to construct command lines for external...

Apple TV 12.0.0 and < 12.3 Multiple Vulnerabilities

Binary data 700719.prm...

macOS 10.x < 10.14.5 Multiple Vulnerabilities (APPLE-SA-2019-05-09)

Binary data 700667.prm...

About the security content of iOS 12.3

About the security content of iOS 12.3 This document describes the security content of iOS 12.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recen...

About the security content of tvOS 12.3

About the security content of tvOS 12.3 This document describes the security content of tvOS 12.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

About the security content of watchOS 5.2.1

About the security content of watchOS 5.2.1 This document describes the security content of watchOS 5.2.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

Arbitrary Code Execution

Foomatic is a comprehensive, spooler-independent database of printers, printer drivers, and driver descriptions. The package also includes spooler-independent command line interfaces to manipulate queues and to print files and manipulate print jobs. It was discovered that the unhtmlify function o...

Arbitrary Code Execution

Foomatic is a comprehensive, spooler-independent database of printers, printer drivers, and driver descriptions. The package also includes spooler-independent command line interfaces to manipulate queues and to print files and manipulate print jobs. It was discovered that the unhtmlify function o...

KB4018588: Security Update for Microsoft Exchange Server

The remote Microsoft Exchange Server is missing a security update. It is, therefore, affected by multiple vulnerabilities : - Multiple cross-site scripting XSS vulnerabilities exist in Microsoft Exchange Outlook Web Access OWA due to improper validation of user-supplied input in web requests. An...

CVE-2017-8560

CVE-2017-8560 affects Microsoft Exchange Server 2010 SP3, 2013 SP3, 2013 CU16, and 2016 CU5. The vulnerability is an elevation of privilege caused by the way Exchange Outlook Web Access (OWA) handles web requests. Connected documents corroborate the cross-site scripting context and attribution to...

Description of the security update for Microsoft Exchange: July 11, 2017

None None...

Microsoft Exchange Server CVE-2017-8560 Remote Privilege Escalation Vulnerability

Description Microsoft Exchange Server is prone to a remote privilege-escalation vulnerability. Attackers can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Exchange Server 2013 Cumulative Update 16 Microsoft Exchange Server 2013 SP1 Microsoft Exchange Server 2016...

CVE-2016-8560

This CVE-2016-8560 entry is rejected/not used and does not represent an active vulnerability.

CVE-2016-8560

...

Amazon Linux: Security Advisory (ALAS-2016-690)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux AMI : foomatic (ALAS-2016-690)

It was discovered that foomatic-rip failed to remove all shell special characters from inputs used to construct command lines for external programs run by the filter. An attacker could possibly use this flaw to execute arbitrary commands. CVE-2015-8560 It was discovered that the unhtmlify functio...

Medium: foomatic

Issue Overview: It was discovered that foomatic-rip failed to remove all shell special characters from inputs used to construct command lines for external programs run by the filter. An attacker could possibly use this flaw to execute arbitrary commands. CVE-2015-8560 It was discovered that the...

CVE-2015-8560

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via a ; semicolon character in a print job, a different vulnerability than CVE-2015-8327...