Lucene search
+L

711 matches found

Fedora
Fedora
•added 2026/04/25 1:58 a.m.•40 views

[SECURITY] Fedora 44 Update: cups-2.4.17-1.fc44

CUPS printing system provides a portable printing layer for UNIX=C2=AE operating systems. It has been developed by Apple Inc. to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...

7.8CVSS6.2AI score0.0042EPSS
SaveExploits18
Debian CVE
Debian CVE
•added 2026/04/24 4:54 p.m.•54 views

CVE-2026-41079

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.17, a network-adjacent attacker can send a crafted SNMP response to the CUPS SNMP backend that causes an out-of-bounds read of up to 176 bytes past a stack buffer. The leaked memory i...

5.4CVSS5.7AI score0.00409EPSS
SaveExploits1
Chainguard
Chainguard
•added 2026/04/17 1:17 p.m.•24 views

CVE-2026-5860 vulnerabilities

Vulnerabilities for packages: chromium...

8.8CVSS7.6AI score0.00523EPSS
SaveExploits0
osv_cleanstart
osv_cleanstart
•added 2026/04/10 12:57 a.m.•30 views

CLEANSTART-2026-RJ58492 On Unix platforms, when listing the contents of a directory using File

Multiple security vulnerabilities affect the kyverno-fips package. On Unix platforms, when listing the contents of a directory using File. See references for individual vulnerability details...

9.8CVSS6.9AI score0.01688EPSS
SaveExploits1References20
NVD
NVD
•added 2026/04/08 10:16 p.m.•16 views

CVE-2026-40032

UAC Unix-like Artifacts Collector before 3.3.0-rc1 contains a command injection vulnerability in the placeholder substitution and command execution pipeline where the runcommand function passes constructed command strings directly to eval without proper sanitization. Attackers can inject shell...

8.5CVSS0.01184EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•9 views

CVE-2026-40032: Improper Neutralization of Special Elements used in an OS Command

UAC Unix-like Artifacts Collector before 3.3.0-rc1 contains a command injection vulnerability in the placeholder substitution and command execution pipeline where the runcommand function passes constructed command strings directly to eval without proper sanitization. Attackers can inject shell...

8.5CVSS6.2AI score0.01184EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/04/07 5:00 p.m.•17 views

CVE-2026-39316

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, a use-after-free vulnerability exists in the CUPS scheduler cupsd when temporary printers are automatically deleted. cupsdDeleteTemporaryPrinters in...

6.2CVSS6.5AI score0.00182EPSS
SaveExploits1
osv_ubuntu
osv_ubuntu
•added 2026/04/03 10:16 p.m.•19 views

UBUNTU-CVE-2026-34980

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, in a network-exposed cupsd with a shared target queue, an unauthorized client can send a Print-Job to that shared PostScript queue without authentication. The server...

7.5CVSS6.6AI score0.00335EPSS
SaveExploits2References5
UbuntuCve
UbuntuCve
•added 2026/04/03 10:16 p.m.•16 views

CVE-2026-27447

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, CUPS daemon cupsd contains an authorization bypass vulnerability due to case-insensitive username comparison during authorization checks. The vulnerability allows an...

6.3CVSS5.7AI score0.0026EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/03 12:00 a.m.•6 views

CVE-2026-34979: Heap-based Buffer Overflow

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, there is a heap-based buffer overflow in the CUPS scheduler when building filter option strings from job attribute. At time of publication, there are no publicly...

5.3CVSS6.2AI score0.00413EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/03 12:00 a.m.•8 views

CVE-2026-27447: Incorrect Authorization

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, CUPS daemon cupsd contains an authorization bypass vulnerability due to case-insensitive username comparison during authorization checks. The vulnerability allows an...

6.3CVSS5.8AI score0.0026EPSS
SaveExploits1References4
osv_oesa
osv_oesa
•added 2026/03/27 11:10 a.m.•19 views

OESA-2026-1781 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

5.6CVSS6.9AI score0.00931EPSS
SaveExploits0References2
osv_alpine
osv_alpine
•added 2026/03/24 8:16 p.m.•19 views

ALPINE-CVE-2026-33412

Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob function on Unix-like systems. By including a newline character \n in a pattern passed to glob, an attacker may be able to execute arbitrary shell commands. This...

7.3CVSS7AI score0.00931EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2026/03/24 8:16 p.m.•14 views

AZL-80532 CVE-2026-33412 affecting package vim for versions less than 9.2.0240-1

Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob function on Unix-like systems. By including a newline character \n in a pattern passed to glob, an attacker may be able to execute arbitrary shell commands. This...

7.3CVSS7AI score0.00931EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2026/03/24 8:16 p.m.•21 views

UBUNTU-CVE-2026-33412

Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob function on Unix-like systems. By including a newline character \n in a pattern passed to glob, an attacker may be able to execute arbitrary shell commands. This...

7.3CVSS7AI score0.00931EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2026/03/24 7:43 p.m.•17 views

CVE-2026-33412 Vim affected by Command injection via newline in glob()

Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob function on Unix-like systems. By including a newline character \n in a pattern passed to glob, an attacker may be able to execute arbitrary shell commands. This...

5.6CVSS6AI score
SaveExploits0References39
Vulnrichment
Vulnrichment
•added 2026/03/24 7:43 p.m.•8 views

CVE-2026-33412 Vim affected by Command injection via newline in glob()

Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob function on Unix-like systems. By including a newline character \n in a pattern passed to glob, an attacker may be able to execute arbitrary shell commands. This...

5.6CVSS7AI score0.00931EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/03/24 7:43 p.m.•66 views

CVE-2026-33412 Vim affected by Command injection via newline in glob()

Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob function on Unix-like systems. By including a newline character \n in a pattern passed to glob, an attacker may be able to execute arbitrary shell commands. This...

5.6CVSS0.00931EPSS
SaveExploits0References3
Mend
Mend
•added 2026/03/24 7:43 p.m.•3 views

CVE-2026-33412

Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob function on Unix-like systems. By including a newline character \n in a pattern passed to glob, an attacker may be able to execute arbitrary shell commands. This...

7.3CVSS7AI score0.00931EPSS
SaveExploits0References39
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/24 12:00 a.m.•6 views

CVE-2026-33412: Improper Neutralization of Special Elements used in an OS Command

Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob function on Unix-like systems. By including a newline character \n in a pattern passed to glob, an attacker may be able to execute arbitrary shell commands. This...

7.3CVSS7AI score0.00931EPSS
SaveExploits0References5
Rows per page
Query Builder