6796 matches found
Microsoft Windows Print Spooler Components Security Vulnerability
Microsoft Windows Print Spooler Components is a printing background processor component from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Print Spooler Components. An attacker could exploit the vulnerability to gain elevated privileges. The following products an...
CVE-2024-0053
In getCustomPrinterIcon of PrintManagerService.java, there is a possible way to view other user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
UBUNTU-CVE-2024-0053
In getCustomPrinterIcon of PrintManagerService.java, there is a possible way to view other user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2024-15326 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a confused deputy in the getCustomPrinterIcon function of PrintManagerService.java, allowing an attacker to view other users' images. This could lead to local...
[SECURITY] Fedora 40 Update: fop-2.9-6.fc40
FOP is the world's first print formatter driven by XSL formatting objects. It is a Java application that reads a formatting object tree and then turns it into a PDF document. The formatting object tree, can be in the form of an XML document output by an XSLT engine like XT or Xalan or can be pass...
CVE-2024-1869
CVE-2024-1869 relates to HP DesignJet print products, where memory out-of-bounds access through the general-purpose gateway (GGW) on port 9220 can disclose information. Public sources confirm HP DesignJet is affected by an information-disclosure vulnerability via GGW, with remediation guidance to...
Certain HP DesignJet Print Products – Potential Information Disclosure
Certain HP DesignJet print products are potentially vulnerable to information disclosure related to accessing memory out-of-bounds when using the general-purpose gateway GGW over port 9220. Update your printer firmware...
The vulnerability of the MyQ Print Server printing server lies in its improper handling of code generation, allowing attackers to execute arbitrary codes.
The vulnerability of the MyQ Print Server printer server is related to improper management of code generation. Exploiting this vulnerability allows a remote attacker to generate arbitrary codes...
CUPS: Multiple Vulnerabilities
Background CUPS, the Common Unix Printing System, is a full-featured print server. Description Multiple vulnerabilities have been discovered in CUPS. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There i...
CVE-2023-40112
In ippSetValueTag of ipp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure of past print jobs or other print-related information, with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2023-40112
In ippSetValueTag of ipp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure of past print jobs or other print-related information, with no additional execution privileges needed. User interaction is not needed for exploitation...
Out-of-bounds
In ippSetValueTag of ipp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure of past print jobs or other print-related information, with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2023-40112
In ippSetValueTag of ipp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure of past print jobs or other print-related information, with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2023-40112
In ippSetValueTag of ipp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure of past print jobs or other print-related information, with no additional execution privileges needed. User interaction is not needed for exploitation...
Android App "Mopria Print Service" vulnerable to improper intent handling
Overview Android app "Mopria Print Service" provided by Mopria Alliance is vulnerable to improper intent handling CWE-668. Johan Francsics reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact When a malicious app is installed on the victim user's Android...
PT-2024-12850 · Cups · Cups
Name of the Vulnerable Software and Affected Versions: CUPS affected versions not specified Description: The issue is related to a missing bounds check in the ippSetValueTag function of ipp.c, which could lead to a possible out of bounds read. This might result in local information disclosure of...
Mopria Print Service Security Vulnerability
Mopria Print Service is an Android application. It is designed to streamline the printing process and improve collaboration. A security vulnerability exists in Mopria Print Service versions prior to 2.17. An attacker could retrieve sensitive information by exploiting the vulnerability...
CVE-2024-22130
Print preview option in SAP CRM WebClient UI - versions S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, S4FND 107, S4FND 108, WEBCUIF 700, WEBCUIF 701, WEBCUIF 730, WEBCUIF 731, WEBCUIF 746, WEBCUIF 747, WEBCUIF 748, WEBCUIF 800, WEBCUIF 801, does not sufficiently encode user-controlled...
CVE-2024-22130
The CVE-2024-22130 entry applies to SAP CRM WebClient UI, affecting SAP CRM WebClient UI versions S4FND 102–108 and WEBCUIF 700–801. The root cause is insufficient encoding of user-controlled inputs in the Print preview option, leading to a Cross‑Site Scripting (XSS) vulnerability. An attacker wi...
