Lucene search
+L

30 matches found

BDU FSTEC
BDU FSTEC
•added 2021/02/02 12:00 a.m.•22 views

The vulnerability in the web interface of the CUPS printing server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability in the web interface of the CUPS printing server relates to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.1CVSS6.5AI score0.01841EPSS
SaveExploits1References9Affected Software4
BDU FSTEC
BDU FSTEC
•added 2020/04/14 12:00 a.m.•16 views

The vulnerability of the array_find function in the CUPS printing server, related to reading beyond the buffer memory limit, allows an attacker to access confidential data.

The vulnerability of the arrayfind function in the CUPS printing server is related to incorrect memory boundary checking. Exploiting this vulnerability could allow an attacker to access confidential data...

5.5CVSS6.2AI score0.00203EPSS
SaveExploits0References9Affected Software4
RedHat Linux
RedHat Linux
•added 2020/03/31 8:58 p.m.•16 views

cups: Predictable session cookie breaks CSRF protection

REJECTED CVE A predictable session cookie vulnerability was identified in the CUPS printing server. Insufficient randomness in session cookie generation made it easy to guess, undermining CSRF protection. This flaw allowed unauthorized scripted access to the CUPS web interface when enabled, posin...

7.3AI score
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2019/10/01 12:00 a.m.•21 views

The vulnerability of the add_job function (scheduler/ipp.c) in the CUPS printing server allows a attacker to compromise data integrity.

The vulnerability of the addjob function in the scheduler/ipp.c file of the CUPS print server is related to insufficient validation of input data when D-Bus support is enabled. Exploiting this vulnerability could allow a malicious actor to compromise data integrity...

5.3CVSS5.5AI score0.02178EPSS
SaveExploits1References7Affected Software2
BDU FSTEC
BDU FSTEC
•added 2019/04/25 12:00 a.m.•17 views

The vulnerability of the CUPS printing server, related to authentication errors, allows a hacker to execute arbitrary code with root privileges.

The vulnerability of the CUPS printing server is related to the SetEnv and PassEnv directives. Exploiting this vulnerability allows an attacker to execute arbitrary code with root privileges...

7.8CVSS7.7AI score0.00454EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
•added 2019/04/25 12:00 a.m.•24 views

The vulnerability of the CUPS printing server, related to authentication errors, allows a perpetrator to gain access to confidential data.

The vulnerability of the CUPS printing server is related to the improper handling of certain include directives. This allows unprivileged users to gain access to and read arbitrary files from the superuser’s perspective. Exploiting this vulnerability enables a perpetrator to gain access to...

5.5CVSS6.6AI score0.00452EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
•added 2018/12/10 12:00 a.m.•23 views

The vulnerability of the CUPS printing server lies in its ability to execute arbitrary IPP commands, allowing users to compromise the integrity of data.

The vulnerability of the CUPS printing server relates to the ability to execute arbitrary IPP commands. Exploiting this vulnerability allows a malicious actor to compromise data integrity by sending POST requests to the CUPS service along with reattached DNS information...

7.5CVSS7.2AI score0.02923EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2018/01/12 5:29 p.m.•22 views

DEBIAN-CVE-2014-8166

The browsing feature in the server in CUPS does not filter ANSI escape sequences from shared printer names, which might allow remote attackers to execute arbitrary code via a crafted printer name...

8.8CVSS8.7AI score0.03703EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2016/07/07 12:00 a.m.•19 views

The vulnerability of the CUPS printing server allows a attacker to modify the device configuration file or execute arbitrary code.

The vulnerability of the addjob function in the scheduler/ipp.c file of the CUPS printing server is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to modify the device configuration file remotely or execute arbitrary code using specially crafted...

10CVSS7.7AI score0.29726EPSS
SaveExploits8References8Affected Software1
OpenVAS
OpenVAS
•added 2009/04/28 12:00 a.m.•33 views

SUSE: Security Advisory for cups (SUSE-SA:2009:024)

The remote host is missing updates announced in advisory SUSE-SA:2009:024. Copyright C 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

10CVSS8.1AI score0.07347EPSS
SaveExploits3References1
Rows per page
Query Builder