Lucene search
K

569 matches found

Fedora
Fedora
added 2026/04/25 1:58 a.m.4 views

[SECURITY] Fedora 44 Update: cups-2.4.17-1.fc44

CUPS printing system provides a portable printing layer for UNIX=C2=AE operating systems. It has been developed by Apple Inc. to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...

7.8CVSS5.5AI score0.00036EPSS
Exploits7
Debian CVE
Debian CVE
added 2026/04/24 4:54 p.m.2 views

CVE-2026-41079

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.17, a network-adjacent attacker can send a crafted SNMP response to the CUPS SNMP backend that causes an out-of-bounds read of up to 176 bytes past a stack buffer. The leaked memory i...

5.4CVSS5.3AI score0.00022EPSS
Exploits1
Chainguard
Chainguard
added 2026/04/17 1:17 p.m.4 views

CVE-2026-5860 vulnerabilities

Vulnerabilities for packages: chromium...

8.8CVSS7.4AI score0.00134EPSS
Exploits0
OSV
OSV
added 2026/04/10 12:57 a.m.5 views

CLEANSTART-2026-RJ58492 On Unix platforms, when listing the contents of a directory using File

Multiple security vulnerabilities affect the kyverno-fips package. On Unix platforms, when listing the contents of a directory using File. See references for individual vulnerability details...

9.8CVSS6.9AI score0.00073EPSS
Exploits1References20
NVD
NVD
added 2026/04/08 10:16 p.m.2 views

CVE-2026-40032

UAC Unix-like Artifacts Collector before 3.3.0-rc1 contains a command injection vulnerability in the placeholder substitution and command execution pipeline where the runcommand function passes constructed command strings directly to eval without proper sanitization. Attackers can inject shell...

8.5CVSS0.0002EPSS
Exploits0References7
Debian CVE
Debian CVE
added 2026/04/07 5:0 p.m.2 views

CVE-2026-39316

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, a use-after-free vulnerability exists in the CUPS scheduler cupsd when temporary printers are automatically deleted. cupsdDeleteTemporaryPrinters in...

6.2CVSS5.5AI score0.00022EPSS
Exploits1
OSV
OSV
added 2026/04/03 10:16 p.m.1 views

UBUNTU-CVE-2026-34980

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, in a network-exposed cupsd with a shared target queue, an unauthorized client can send a Print-Job to that shared PostScript queue without authentication. The server...

7.5CVSS5.9AI score0.00036EPSS
Exploits1References4
UbuntuCve
UbuntuCve
added 2026/04/03 10:16 p.m.0 views

CVE-2026-27447

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, CUPS daemon cupsd contains an authorization bypass vulnerability due to case-insensitive username comparison during authorization checks. The vulnerability allows an...

6.3CVSS5.9AI score0.00016EPSS
Exploits1References2
OSV
OSV
added 2026/03/27 2:8 p.m.1 views

OESA-2026-1781 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

7.3CVSS6AI score0.00011EPSS
Exploits0References2
OSV
OSV
added 2026/03/24 8:16 p.m.2 views

ALPINE-CVE-2026-33412

Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob function on Unix-like systems. By including a newline character \n in a pattern passed to glob, an attacker may be able to execute arbitrary shell commands. This...

7.3CVSS6AI score0.00011EPSS
Exploits0References1
OSV
OSV
added 2026/03/24 8:16 p.m.1 views

UBUNTU-CVE-2026-33412

Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob function on Unix-like systems. By including a newline character \n in a pattern passed to glob, an attacker may be able to execute arbitrary shell commands. This...

7.3CVSS6.2AI score0.00011EPSS
Exploits0References4
OSV
OSV
added 2026/03/24 7:43 p.m.1 views

CVE-2026-33412 Vim affected by Command injection via newline in glob()

Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob function on Unix-like systems. By including a newline character \n in a pattern passed to glob, an attacker may be able to execute arbitrary shell commands. This...

5.6CVSS6AI score0.00011EPSS
Exploits0References6
Cvelist
Cvelist
added 2026/03/24 7:43 p.m.19 views

CVE-2026-33412 Vim affected by Command injection via newline in glob()

Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob function on Unix-like systems. By including a newline character \n in a pattern passed to glob, an attacker may be able to execute arbitrary shell commands. This...

5.6CVSS0.00011EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/03/24 7:43 p.m.0 views

CVE-2026-33412 Vim affected by Command injection via newline in glob()

Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob function on Unix-like systems. By including a newline character \n in a pattern passed to glob, an attacker may be able to execute arbitrary shell commands. This...

5.6CVSS6AI score0.00011EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/03/24 12:0 a.m.3 views

Vim 安全漏洞

Vim is an open-source, cross-platform text editor developed by Vim developers. Versions of Vim prior to 9.2.0202 contained security vulnerabilities. These vulnerabilities were caused by command injection through the glob function on Unix-like systems, which could lead to the execution of arbitrar...

7.3CVSS7AI score0.00011EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2026/03/22 12:23 a.m.2 views

SUSE CVE-2026-33412

Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob function on Unix-like systems. By including a newline character \n in a pattern passed to glob, an attacker may be able to execute arbitrary shell commands. This...

5.3CVSS6AI score0.00011EPSS
Exploits0References19
Packet Storm
Packet Storm
added 2026/02/20 12:0 a.m.121 views

📄 SmarterMail 100.0.9413 GUID File Remote Code Execution

This PHP code implements a fully automated remote exploitation framework targeting SmarterMail version 100.0.9413. It is designed to identify the service, determine the underlying operating system, abuse a file upload mechanism with path traversal, and achieve arbitrary file write leading to remo...

10CVSS8AI score0.89112EPSS
Exploits15
Snyk
Snyk
added 2026/01/26 9:29 p.m.2 views

Directory Traversal

Overview @pnpm/package-bins is a that returns bins of a package. Affected versions of this package are vulnerable to Directory Traversal via the getBinsFromPackageManifest function. An attacker can modify file permissions outside the intended directory by supplying a crafted value in the...

7CVSS6.3AI score0.00007EPSS
Exploits1References3
Debian CVE
Debian CVE
added 2025/12/24 1:6 p.m.2 views

CVE-2023-54098

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gvt: fix gvt debugfs destroy When gvt debug fs is destroyed, need to have a sane check if drm minor's debugfs root is still available or not, otherwise in case like device remove through unbinding, drm minor's debugfs...

5.4AI score0.00029EPSS
Exploits0
Debian CVE
Debian CVE
added 2025/12/22 4:14 p.m.3 views

CVE-2025-68336

In the Linux kernel, the following vulnerability has been resolved: locking/spinlock/debug: Fix data-race in dorawwritelock KCSAN reports: BUG: KCSAN: data-race in dorawwritelock / dorawwritelock write marked to 0xffff800009cf504c of 4 bytes by task 1102 on cpu 1: dorawwritelock+0x120/0x204...

5.2AI score0.00058EPSS
Exploits0
Rows per page
Query Builder