Lucene search
+L

5571 matches found

Tenable Nessus
Tenable Nessus
added 2019/05/29 12:00 a.m.25 views

EulerOS 2.0 SP5 : cups (EulerOS-SA-2019-1568)

According to the versions of the cups packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - CUPS printing system provides a portable printing layer for UNIXAr operating systems. It has been developed by Apple Inc.to promote a standard...

5.9CVSS6.5AI score0.01841EPSS
SaveExploits1References2
Debian
Debian
added 2019/05/20 2:03 a.m.114 views

[SECURITY] [DLA 1792-2] cups-filters regression update

Package : cups-filters Version : 1.0.61-5+deb8u4 Debian Bug : 926576 928936 928952 The update for ghostscript released as DLA-1792-1 uncovered an issue in cups-filters which was using the undocumented Ghostscript internal "pdfdict" now hidden in the ghostscript update. Updated cups-filters packag...

5.7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/05/20 12:00 a.m.24 views

Debian DLA-1792-2 : cups-filters regression update

The update for ghostscript released as DLA-1792-1 uncovered an issue in cups-filters which was using the undocumented Ghostscript internal 'pdfdict' now hidden in the ghostscript update. Updated cups-filters packages are now available to correct this issue. For Debian 8 'Jessie', this problem has...

5.3AI score
SaveExploits0References2
OSV
OSV
added 2019/05/19 12:00 a.m.10 views

DLA-1792-2 cups-filters - regression update

Bulletin has no description...

7.2AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2019/05/14 11:52 a.m.27 views

CVE-2017-18190

A localhost.localdomain whitelist entry in validhost in scheduler/client.c in CUPS before 2.2.2 allows remote attackers to execute arbitrary IPP commands by sending POST requests to the CUPS daemon in conjunction with DNS rebinding. The localhost.localdomain name is often resolved via a DNS serve...

7.5CVSS6AI score0.02923EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2019/05/14 12:00 a.m.35 views

EulerOS Virtualization 3.0.1.0 : cups (EulerOS-SA-2019-1432)

According to the versions of the cups package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A cross-site scripting flaw was found in the cups web templating engine. An attacker could use this flaw to bypass the default...

10CVSS7.4AI score0.29913EPSS
SaveExploits10References9
Debian
Debian
added 2019/05/13 9:42 p.m.192 views

[SECURITY] [DSA 4442-2] cups-filters regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4442-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 13, 2019 https://www.debian.org/security/faq -...

6.8AI score
SaveExploits0
Debian
Debian
added 2019/05/13 9:42 p.m.20 views

[SECURITY] [DSA 4442-2] cups-filters regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4442-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 13, 2019 https://www.debian.org/security/faq -...

0.8AI score
SaveExploits0
OSV
OSV
added 2019/05/13 12:00 a.m.10 views

DSA-4442-2 cups-filters - regression update

Bulletin has no description...

7.2AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/05/10 12:00 a.m.30 views

EulerOS Virtualization 2.5.3 : cups (EulerOS-SA-2019-1352)

According to the version of the cups package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized scripted access to the web...

5.9CVSS6.6AI score0.01841EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2019/05/07 12:00 a.m.79 views

Fedora Update for cups FEDORA-2018-09b23ed9e5

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.8AI score
SaveExploits1References2
Veracode
Veracode
added 2019/05/02 5:17 a.m.51 views

Denial Of Service (DoS)

CUPS provides a portable printing layer for Linux, UNIX, and similar operating systems. A string reference count bug was found in cupsd, causing premature freeing of string objects. An attacker can submit a malicious print job that exploits this flaw to dismantle ACLs protecting privileged...

10CVSS6.4AI score0.29913EPSS
SaveExploits9References19Affected Software1
Veracode
Veracode
added 2019/05/02 5:17 a.m.27 views

Arbitrary Code Execution

CUPS provides a portable printing layer for Linux, UNIX, and similar operating systems. A string reference count bug was found in cupsd, causing premature freeing of string objects. An attacker can submit a malicious print job that exploits this flaw to dismantle ACLs protecting privileged...

10CVSS6.4AI score0.29913EPSS
SaveExploits9References42Affected Software1
Veracode
Veracode
added 2019/05/02 5:12 a.m.27 views

Information Disclosure

cups is vulnerable to information disclosure. The vulnerability exists as the web interface allows local users in the lp group to read arbitrary files using symlinks...

1.2CVSS5.4AI score0.00379EPSS
SaveExploits0References23Affected Software1
Veracode
Veracode
added 2019/05/02 5:12 a.m.27 views

Information Disclosure

cups is vulnerable to information disclosure. The vulnerability exists as the web interface allows local users in the Ip group to read arbitrary files through symlinks. This vulnerability exists through an incomplete fix for CVE-2014-3537...

1.5CVSS5.5AI score0.00379EPSS
SaveExploits0References15Affected Software1
Veracode
Veracode
added 2019/05/02 5:12 a.m.18 views

Information Disclosure

cups is vulnerable to information disclosure. The vulnerability exists as cups allows local users to read arbitrary files through symlinks...

1.9CVSS5.4AI score0.00362EPSS
SaveExploits0References15Affected Software1
Veracode
Veracode
added 2019/05/02 5:12 a.m.19 views

Information Disclosure

cups is vulnerable to information disclosure. The vulnerability exists as the web interface in cups do not check if the files have world-readable permissions...

5CVSS5.6AI score0.02911EPSS
SaveExploits0References15Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/25 12:00 a.m.17 views

The vulnerability of the CUPS printing server, related to authentication errors, allows a perpetrator to gain access to confidential data.

The vulnerability of the CUPS printing server is related to the improper handling of certain include directives. This allows unprivileged users to gain access to and read arbitrary files from the superuser’s perspective. Exploiting this vulnerability enables a perpetrator to gain access to...

5.5CVSS6.6AI score0.00452EPSS
SaveExploits0References6Affected Software2
Tenable Nessus
Tenable Nessus
added 2019/04/10 12:00 a.m.32 views

macOS < 10.14 Multiple Vulnerabilities

Binary data 700518.prm...

10CVSS7.6AI score0.60631EPSS
SaveExploits21References57
RedhatCVE
RedhatCVE
added 2019/04/03 11:21 p.m.34 views

CVE-2018-4300

The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized scripted access to the web interface when the web interface is enabled. This issue affected versions prior to v2.2.10...

8.1CVSS4.6AI score0.01841EPSS
SaveExploits1References2
Rows per page
Query Builder