Lucene search
K

17 matches found

RedHat Linux
RedHat Linux
added yesterday2 views

samba: Samba: Remote Code Execution in printing subsystem via unescaped job description

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by...

9.8CVSS6.4AI score0.00389EPSS
Exploits1References5
SUSE CVE
SUSE CVE
added 2026/05/27 2:53 a.m.5 views

SUSE CVE-2026-4480

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by...

10CVSS6.4AI score0.00389EPSS
Exploits1References9
OSV
OSV
added 2026/05/26 3:16 p.m.1 views

ALPINE-CVE-2026-4480

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by...

9.8CVSS6.4AI score0.00389EPSS
Exploits1References1
NVD
NVD
added 2026/05/26 3:16 p.m.6 views

CVE-2026-4480

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by...

9.8CVSS0.00389EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2026/05/26 1:56 p.m.4 views

CVE-2026-4480

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by...

9.8CVSS6.4AI score0.00389EPSS
Exploits1References6
CVE
CVE
added 2026/05/26 1:56 p.m.94 views

CVE-2026-4480

CVE-2026-4480 : A flaw in the Samba printing subsystem causes the client-controlled job description string passed to the print command via %J to be executed without escaping shell meta characters, enabling remote code execution. Root cause: unescaped shell metacharacters in print job descriptions...

9.8CVSS6.4AI score0.00389EPSS
Exploits1References5Affected Software3
AlpineLinux
AlpineLinux
added 2026/05/26 1:56 p.m.10 views

CVE-2026-4480

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by...

9.8CVSS6.4AI score0.00389EPSS
Exploits1
Debian CVE
Debian CVE
added 2026/05/26 1:56 p.m.5 views

CVE-2026-4480

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by...

9.8CVSS6.4AI score0.00389EPSS
Exploits1
Cvelist
Cvelist
added 2026/05/26 1:56 p.m.37 views

CVE-2026-4480 Samba: samba: remote code execution in printing subsystem via unescaped job description

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by...

9CVSS0.00389EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2026/05/26 1:51 p.m.3 views

CVE-2026-4480

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by...

9.8CVSS6.4AI score0.00389EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2026/05/26 12:0 a.m.6 views

PT-2026-43438

Name of the Vulnerable Software and Affected Versions Samba affected versions not specified Description A flaw exists in the handling of certificate auto-enrollment Group Policy. When this feature is enabled, Samba may retrieve a CA certificate via an unencrypted HTTP connection and install it in...

8CVSS5.8AI score0.00005EPSS
Exploits0References39
UbuntuCve
UbuntuCve
added 2026/05/26 12:0 a.m.2 views

CVE-2026-4480

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by...

9.8CVSS6.4AI score0.00389EPSS
Exploits1References2
Samba
Samba
added 2026/05/26 12:0 a.m.5 views

Unauthenticated Remote Code Execution

Description Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. This leads to a remote code execution vulnerability. Print servers configured with "printing...

9.8CVSS6.4AI score0.00389EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2026/05/26 12:0 a.m.3 views

PT-2026-43256

Name of the Vulnerable Software and Affected Versions Samba versions prior to 4.22.10 Samba versions prior to 4.23.8 Samba versions prior to 4.24.3 Description A flaw exists in the Samba printing subsystem where the software passes a client-controlled job description string to the command...

10CVSS6.3AI score0.00389EPSS
Exploits1References34
Citrix
Citrix
added 2018/10/09 12:0 a.m.5 views

Windows 10 v1903 and v1909 – Citrix Known Issues

Microsoft releases software updates for Windows 10 twice a year through the Semi-Annual Channel. Microsoft released its Semi-Annual Channel called 'May 2019 Update' v1903 in May 2019 and released its nextSemi-Annual Channel called 'November 2019 Update' v1909 in November 2019. This article is...

6.9AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2013/07/26 12:0 a.m.28 views

Microsoft Internet Explorer CMarkup Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.5CVSS4.3AI score0.10951EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2010/01/13 11:0 a.m.13 views

CVE-2009-3637

Stack-based buffer overflow in the MAddToServerList function in client/menu.c in Red Planet Arena Alien Arena 7.30 allows remote attackers to execute arbitrary code via a packet with a crafted server description to UDP port 27901 followed by a packet with a long print command...

10CVSS7.8AI score0.12449EPSS
Exploits1
Rows per page
Query Builder