Lucene search
+L

3180 matches found

Prion
Prion
added 2016/09/18 10:59 p.m.18 views

Design/Logic Flaw

Printing UIKit in Apple iOS before 10 mishandles environment variables, which allows local users to discover cleartext AirPrint preview content by reading a temporary file...

2.1CVSS5.8AI score0.00319EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2016/09/18 10:00 p.m.68 views

CVE-2016-4749

CVE-2016-4749 affects Printing UIKit in iOS prior to 10. The issue arises from mishandling environment variables during AirPrint preview, allowing a local user to read a temporary file and disclose cleartext AirPrint preview content. Apple’s security content for iOS 10 notes this as an AirPrint/P...

3.3CVSS4.3AI score0.00319EPSS
SaveExploits0References5Affected Software1
CNVD
CNVD
added 2016/09/18 12:00 a.m.13 views

Apple iOS Security Restriction Bypass Vulnerability (CNVD-2016-07686)

Apple iOS is an operating system developed by Apple for mobile devices. A security restriction bypass vulnerability exists in the Printing UIKit in Apple iOS versions prior to 10. An attacker can exploit this vulnerability to bypass security restrictions, perform unauthorized actions, or obtain...

3.3CVSS6.4AI score0.00319EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2016/09/15 12:00 a.m.36 views

Apple iOS < 10 Multiple Vulnerabilities (BlueBorne)

Binary data appleios100check.nbin...

7.9CVSS4.6AI score0.01761EPSS
SaveExploits1References12
VMware
VMware
added 2016/09/11 12:00 a.m.82 views

VMSA-2016-0014:VMware ESXi, Workstation, Fusion, and Tools updates address multiple security issues

VMSA-2016-0014.1 VMware ESXi, Workstation, Fusion, and Tools updates address multiple security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0014.1 VMware Security Advisory Severity: Critical VMware Security Advisory Synopsis: VMware ESXi, Workstation, Fusion, an...

7.8CVSS8.5AI score0.01522EPSS
SaveExploits5References18Affected Software3
Microsoft KB
Microsoft KB
added 2016/08/09 7:00 a.m.70 views

MS16-098: Description of the security update for Windows kernel-mode drivers: August 9, 2016

None None...

7.8CVSS7AI score0.20625EPSS
SaveExploits8
The Hacker News
The Hacker News
added 2016/07/21 7:56 a.m.15 views

Police Unlock Dead Man's Phone by 3D-Printing his Fingerprint

Now no more fight with Apple or any smartphone maker, as federal authorities have discovered a new tool for unlocking phones, as far as your phone is using any biometric sensor… 3D Printing! Yes, Police in Michigan is considering 3D printing a dead man’s fingers so they could unlock smartphones i...

6.6AI score
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2016/07/16 12:00 a.m.43 views

CUPS: Buffer overflow

Background CUPS, the Common Unix Printing System, is a full-featured print server. Description A vulnerability has been discovered in CUPS concerning the handling of compressed raster files. Impact A remote attacker could possibly execute arbitrary code with the privileges of the process...

6.8CVSS7.3AI score0.04633EPSS
SaveExploits0
ThreatPost
ThreatPost
added 2016/07/12 4:01 p.m.32 views

July 2016 Microsoft Patch Tuesday Security Patches

Networked printers have always posed an interesting attack vector, mostly for academics looking for vulnerabilities, and vandals sending garbage to the print bin. Microsoft, today, however patched a legitimate vulnerability that an attacker could abuse to attack corporate and home networks...

9.3CVSS1.5AI score0.35421EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2016/07/07 12:00 a.m.12 views

The vulnerability of the CUPS printing server allows a attacker to modify the device configuration file or execute arbitrary code.

The vulnerability of the addjob function in the scheduler/ipp.c file of the CUPS printing server is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to modify the device configuration file remotely or execute arbitrary code using specially crafted...

10CVSS7.7AI score0.29913EPSS
SaveExploits8References8Affected Software1
Check Point Advisories
Check Point Advisories
added 2016/06/30 12:00 a.m.19 views

Microsoft IIS 5.0 ISAPI Internet Printing Protocol Extension Buffer Overflow - ver 2 (CVE-2001-0241)

A buffer overflow in this extension IIS 5.0 can permit remote attackers to execute arbitrary code on the web server with the same privileges as the web server. The ISAPI .printer extension permits the submitting and controlling of print jobs over HTTP. There exists an unchecked buffer in the Host...

10CVSS7.7AI score0.85698EPSS
SaveExploits16
Openbugbounty
Openbugbounty
added 2016/05/22 4:41 a.m.8 views

webmail.sheridanprinting.com XSS vulnerability

Vulnerable URL: http://webmail.sheridanprinting.com/webmail/?color=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 11:05 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

6.3AI score
SaveExploits0
CNVD
CNVD
added 2016/03/24 12:00 a.m.7 views

foomatic-rip Arbitrary Command Execution Vulnerability

Foomatic is a database-driven printing system developed by the Linux Foundation's OpenPrinting Working Group, which integrates a general-purpose back-end printing system for Unix with an open-source printer driver. foomatic-rip a.k.a. foomatic-filters is an internal component that helps the...

7.5CVSS7.3AI score0.05251EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/03/24 12:00 a.m.9 views

foomatic-rip memory corruption vulnerability

Foomatic is a database-driven printing system developed by the Linux Foundation's OpenPrinting Working Group, which integrates a general-purpose back-end printing system for Unix with an open-source printer driver. foomatic-rip a.k.a. foomatic-filters is an internal component that helps the...

9.8CVSS7.3AI score0.05483EPSS
SaveExploits0References1
seebug.org
seebug.org
added 2016/03/10 12:00 a.m.28 views

Zyxel NSA310远程命令执行漏洞

漏洞效果 打印/etc/passwd 演示在存在漏洞主机上注入系统命令打印/etc/passwd: $ telnet 192.168.219.101 21 Trying 192.168.219.101... Connected to 192.168.219.101. Escape character is '^'. 220­­­­­­­­­­ Welcome to Pure­FTPd TLS ­­­­­­­­­­ 220­ You are user number 1 of 10 allowed. 220 ­Local time is now 22:46. Server port: 21...

6.9AI score
SaveExploits0
OSV
OSV
added 2016/03/01 2:38 p.m.9 views

USN-2914-1 openssl vulnerabilities

Yuval Yarom, Daniel Genkin, and Nadia Heninger discovered that OpenSSL was vulnerable to a side-channel attack on modular exponentiation. On certain CPUs, a local attacker could possibly use this issue to recover RSA keys. This flaw is known as CacheBleed. CVE-2016-0702 Adam Langley discovered th...

10CVSS7AI score0.32414EPSS
SaveExploits1References6
OPENSUSE Linux
OPENSUSE Linux
added 2016/01/28 1:11 a.m.56 views

Security update for Java7 (important)

Update OpenJDK to 7u95 / IcedTea 2.6.4 including the following fixes: Security fixes - S8059054, CVE-2016-0402: Better URL processing - S8130710, CVE-2016-0448: Better attributes processing - S8132210: Reinforce JMX collector internals - S8132988: Better printing dialogues - S8133962,...

10CVSS6.4AI score0.14714EPSS
SaveExploits0References2
CNVD
CNVD
added 2016/01/23 12:00 a.m.5 views

Unspecified Vulnerability in Oracle E-Business Suite Oracle Project Contracts Printing Component

Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle Project Contracts Printing component of Oracle E-Business Suite, which could be exploited by a remote attacker to submit a special request to modify data...

4.3CVSS6.8AI score0.01451EPSS
SaveExploits0References1
NVD
NVD
added 2016/01/21 3:01 a.m.18 views

CVE-2016-0534

Unspecified vulnerability in the Oracle Project Contracts component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Printing...

4.3CVSS5.7AI score0.01451EPSS
SaveExploits0References2
OSV
OSV
added 2016/01/21 3:01 a.m.6 views

CVE-2016-0534

Unspecified vulnerability in the Oracle Project Contracts component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Printing...

5.8AI score0.01451EPSS
SaveExploits0References2
Rows per page
Query Builder