Lucene search
+L

36 matches found

OSV
OSV
added 2026/05/26 3:16 p.m.8 views

ALPINE-CVE-2026-4480

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by...

9CVSS6.4AI score0.1393EPSS
SaveExploits9References1
NVD
NVD
added 2026/05/26 3:16 p.m.19 views

CVE-2026-4480

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by...

9.8CVSS0.1393EPSS
SaveExploits9References15
Debian CVE
Debian CVE
added 2026/05/26 1:56 p.m.13 views

CVE-2026-4480

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by...

9.8CVSS6.4AI score0.1393EPSS
SaveExploits9
AlpineLinux
AlpineLinux
added 2026/05/26 1:56 p.m.27 views

CVE-2026-4480

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by...

9.8CVSS6.4AI score0.1393EPSS
SaveExploits9
ATTACKERKB
ATTACKERKB
added 2026/05/26 1:56 p.m.56 views

CVE-2026-4480

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by...

9.8CVSS6.4AI score0.1393EPSS
SaveExploits9References16
Cvelist
Cvelist
added 2026/05/26 1:56 p.m.89 views

CVE-2026-4480 Samba: samba: remote code execution in printing subsystem via unescaped job description

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by...

9CVSS0.1393EPSS
SaveExploits9References14
OSV
OSV
added 2026/05/26 1:56 p.m.8 views

CVE-2026-4480 Samba: samba: remote code execution in printing subsystem via unescaped job description

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by...

9CVSS6.6AI score
SaveExploits0References18
CVE
CVE
added 2026/05/26 1:56 p.m.280 views

CVE-2026-4480

CVE-2026-4480 affects the Samba printing subsystem. The flaw allows a remote attacker to execute arbitrary code by sending a print job whose description uses the client-controlled %J substitution without escaping shell metacharacters, enabling remote code execution on affected systems. Public adv...

9.8CVSS6.4AI score0.1393EPSS
SaveIn wildExploits9References15Affected Software3
RedhatCVE
RedhatCVE
added 2026/05/26 1:51 p.m.11 views

CVE-2026-4480

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by...

9.8CVSS6.4AI score0.1393EPSS
SaveExploits9References4
Samba
Samba
added 2026/05/26 12:0 a.m.15 views

Unauthenticated Remote Code Execution

Description Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. This leads to a remote code execution vulnerability. Print servers configured with "printing...

9.8CVSS6.4AI score0.1393EPSS
SaveExploits9
UbuntuCve
UbuntuCve
added 2026/05/26 12:0 a.m.11 views

CVE-2026-4480

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by...

9.8CVSS6.4AI score0.1393EPSS
SaveExploits9References3
Positive Technologies
Positive Technologies
added 2026/05/26 12:0 a.m.11 views

PT-2026-43256

Name of the Vulnerable Software and Affected Versions Samba versions prior to 4.22.10 Samba versions prior to 4.23.8 Samba versions prior to 4.24.3 Description A flaw exists in the Samba printing subsystem where the software passes a client-controlled job description string to the command...

10CVSS8.9AI score0.1393EPSS
SaveExploits9References126
Positive Technologies
Positive Technologies
added 2026/05/26 12:0 a.m.23 views

PT-2026-43438

Name of the Vulnerable Software and Affected Versions Samba affected versions not specified Description A flaw exists in the handling of certificate auto-enrollment Group Policy. When this feature is enabled, Samba may retrieve a CA certificate via an unencrypted HTTP connection and install it in...

8CVSS5.8AI score0.02669EPSS
SaveExploits0References103
Citrix
Citrix
added 2018/10/09 12:0 a.m.10 views

Windows 10 v1903 and v1909 – Citrix Known Issues

Microsoft releases software updates for Windows 10 twice a year through the Semi-Annual Channel. Microsoft released its Semi-Annual Channel called 'May 2019 Update' v1903 in May 2019 and released its nextSemi-Annual Channel called 'November 2019 Update' v1909 in November 2019. This article is...

6.9AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2013/07/26 12:0 a.m.32 views

Microsoft Internet Explorer CMarkup Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.5CVSS4.3AI score0.25039EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2010/01/13 11:0 a.m.66 views

CVE-2009-3637

Stack-based buffer overflow in the MAddToServerList function in client/menu.c in Red Planet Arena Alien Arena 7.30 allows remote attackers to execute arbitrary code via a packet with a crafted server description to UDP port 27901 followed by a packet with a long print command...

10CVSS7.8AI score0.07641EPSS
SaveExploits1
Rows per page
Query Builder