Lucene search
+L

6753 matches found

OSV
OSV
added 2019/07/22 6:15 p.m.21 views

CVE-2019-1010220

tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. The impact is: May expose Saved Frame Pointer, Return Address etc. on stack. The component is: line 234: "NDPRINTndo, "%s", buf;", in function named "printprefix", in "print-hncp.c". The attack vector is: The victim must open a...

3.3CVSS6.5AI score
SaveExploits0References11
Prion
Prion
added 2019/07/22 6:15 p.m.25 views

Design/Logic Flaw

tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. The impact is: May expose Saved Frame Pointer, Return Address etc. on stack. The component is: line 234: "NDPRINTndo, "%s", buf;", in function named "printprefix", in "print-hncp.c". The attack vector is: The victim must open a...

4.3CVSS5.4AI score0.01348EPSS
SaveExploits0References11Affected Software1
UbuntuCve
UbuntuCve
added 2019/07/22 6:15 p.m.32 views

CVE-2019-1010220

tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. The impact is: May expose Saved Frame Pointer, Return Address etc. on stack. The component is: line 234: "NDPRINTndo, "%s", buf;", in function named "printprefix", in "print-hncp.c". The attack vector is: The victim must open a...

4.3CVSS6.4AI score0.01348EPSS
SaveExploits0References6
NVD
NVD
added 2019/07/20 12:15 a.m.17 views

CVE-2018-17210

An issue was discovered in PrinterOn Central Print Services CPS through 4.1.4. The core components that create and launch a print job do not perform complete verification of the session cookie that is supplied to them. As a result, an attacker with guest/pseudo-guest level permissions can bypass...

8.8CVSS8.6AI score0.01658EPSS
SaveExploits1References1
OSV
OSV
added 2019/07/20 12:15 a.m.6 views

CVE-2018-17210

An issue was discovered in PrinterOn Central Print Services CPS through 4.1.4. The core components that create and launch a print job do not perform complete verification of the session cookie that is supplied to them. As a result, an attacker with guest/pseudo-guest level permissions can bypass...

8.8CVSS5.8AI score0.01658EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2019/07/19 11:19 p.m.21 views

CVE-2018-17210

An issue was discovered in PrinterOn Central Print Services CPS through 4.1.4. The core components that create and launch a print job do not perform complete verification of the session cookie that is supplied to them. As a result, an attacker with guest/pseudo-guest level permissions can bypass...

8.7AI score0.01658EPSS
SaveExploits1References1
CVE
CVE
added 2019/07/19 11:19 p.m.205 views

CVE-2018-17210

CVE-2018-17210 affects PrinterOn Central Print Services (CPS) up to version 4.1.4. The core components that create and launch print jobs do not perform complete verification of the session cookie, enabling an attacker with guest/pseudo-guest permissions to bypass session checks by calling the cor...

8.8CVSS8.5AI score0.01658EPSS
SaveExploits1References1Affected Software1
CNVD
CNVD
added 2019/07/17 12:0 a.m.5 views

Oracle E-Business Suite Component Access Control Error Vulnerability (CNVD-2019-28436)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software, the software provides customer relationship management, service management, financial management and other functions. The software provides customer...

8.2CVSS6.7AI score0.01314EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/07/17 12:0 a.m.6 views

Oracle E-Business Suite Component Access Control Error Vulnerability (CNVD-2019-28437)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software, the software provides customer relationship management, service management, financial management and other functions. The software provides customer...

8.2CVSS6.7AI score0.01314EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/07/17 12:0 a.m.9 views

Oracle E-Business Suite Component Access Control Error Vulnerability (CNVD-2019-28429)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software, the software provides customer relationship management, service management, financial management and other functions. The software provides customer...

8.2CVSS6.7AI score0.01314EPSS
SaveExploits0References1
Citrix
Citrix
added 2019/06/13 12:0 a.m.11 views

Citrix PDF Printer Not Auto Creating With Workspace app for Chrome OS

Customer having an issue with Workspace on the Chromebooks. The "Citrix PDF Printer" is not auto creating when logging into a Windows 10 desktop session. The "Auto-Create PDF Universal Printer" policy is set to enabled, but it's not creating the printer when logging into a session. Logging in fro...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2019/06/04 12:0 a.m.7 views

Arbitrary File Read Vulnerability in Pleasure Print RiTrac

Enjoy Print RiTrac is a server-based, entry-level smart office copy solution. An arbitrary file read vulnerability exists in Enjoy Print RiTrac. An attacker can exploit the vulnerability to obtain sensitive information...

6.8AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2019/05/31 12:0 a.m.9 views

The vulnerability of the Oracle One-to-One Fulfillment sub-component, the Print Server component of the Oracle E-Business Suite, allows a perpetrator to access confidential information.

The vulnerability of the Oracle One-to-One Fulfillment sub-component, the Print Server, within the Oracle E-Business Suite system for enterprise automation activities is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to...

8.2CVSS7.5AI score0.01287EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/05/31 12:0 a.m.6 views

The vulnerability of the Oracle One-to-One Fulfillment sub-component, the Print Server component of the Oracle E-Business Suite, allows a perpetrator to access confidential information.

The vulnerability of the Oracle One-to-One Fulfillment sub-component, the Print Server, within the Oracle E-Business Suite automation system, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information...

8.2CVSS7.5AI score0.01287EPSS
SaveExploits0References3
Prion
Prion
added 2019/05/24 4:29 p.m.11 views

Cross site scripting

Samsung SCX-824 printers allow a reflected Cross-Site-Scripting XSS vulnerability that can be triggered by using the "print from file" feature, as demonstrated by the sws/swsAlert.sws?popupid=successMsg msg parameter...

4.3CVSS6.2AI score0.00802EPSS
SaveExploits0References1
CVE
CVE
added 2019/05/24 3:23 p.m.51 views

CVE-2019-12315

CVE-2019-12315 concerns Samsung SCX-824 printers, where a reflected XSS vulnerability exists in the web/print workflow. The issue is triggered via the printer’s “print from file” feature, specifically through the sws/swsAlert.sws?popupid=successMsg msg parameter. Multiple connected records consis...

6.1CVSS6.1AI score0.00802EPSS
SaveExploits0References1Affected Software1
exploitpack
exploitpack
added 2019/05/20 12:0 a.m.40 views

Solaris 789 (SPARC) - dtprintinfo Local Privilege Escalation (2)

Solaris 789 SPARC - dtprintinfo Local Privilege Escalation 2 / raptordtprintnamesparc2.c - dtprintinfo 0day, Solaris/SPARC Copyright c 2004-2019 Marco Ivaldi 0day buffer overflow in the dtprintinfo1 CDE Print Viewer, leading to local root. Many thanks to Dave Aitel for discovering this...

0.4AI score
SaveExploits0
exploitpack
exploitpack
added 2019/05/20 12:0 a.m.26 views

Solaris 10 113 (Intel) - dtprintinfo Local Privilege Escalation

Solaris 10 113 Intel - dtprintinfo Local Privilege Escalation / raptordtprintnameintel.c - dtprintinfo 0day, Solaris/Intel Copyright c 2004-2019 Marco Ivaldi 0day buffer overflow in the dtprintinfo1 CDE Print Viewer, leading to local root. Many thanks to Dave Aitel for discovering this...

0.5AI score
SaveExploits0
zdt
zdt
added 2019/05/20 12:0 a.m.229 views

Solaris 7/8/9 (#SPARC) - (dtprintinfo) Local Privilege Escalation (1) Exploit

Exploit for solaris platform in category local exploits / raptordtprintnamesparc.c - dtprintinfo 0day, Solaris/SPARC Copyright c 2004-2019 Marco Ivaldi 0day buffer overflow in the dtprintinfo1 CDE Print Viewer, leading to local root. Many thanks to Dave Aitel for discovering this vulnerability an...

0.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2019/05/20 12:0 a.m.227 views

Solaris 7/8/9 (SPARC) - 'dtprintinfo' Local Privilege Escalation (2)

/ raptordtprintnamesparc2.c - dtprintinfo 0day, Solaris/SPARC Copyright c 2004-2019 Marco Ivaldi 0day buffer overflow in the dtprintinfo1 CDE Print Viewer, leading to local root. Many thanks to Dave Aitel for discovering this vulnerability and for his interesting research activities on...

5.3AI score
SaveExploits0
Rows per page
Query Builder