Lucene search
+L

8358 matches found

attackerkb
attackerkb
•added 2026/04/22 4:09 p.m.•12 views

CVE-2026-35379

A logic error in the tr utility of uutils coreutils causes the program to incorrectly define the :graph: and :print: character classes. The implementation mistakenly includes the ASCII space character 0x20 in the :graph: class and excludes it from the :print: class, effectively reversing the...

3.3CVSS5.7AI score0.00154EPSS
SaveExploits1References3
OSV
OSV
•added 2026/04/22 4:09 p.m.•17 views

CVE-2026-35379 uutils coreutils tr Local Logic Error and Data Integrity Issue in Character Class Handling

A logic error in the tr utility of uutils coreutils causes the program to incorrectly define the :graph: and :print: character classes. The implementation mistakenly includes the ASCII space character 0x20 in the :graph: class and excludes it from the :print: class, effectively reversing the...

3.3CVSS6AI score
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/04/22 4:09 p.m.•12 views

CVE-2026-35379 uutils coreutils tr Local Logic Error and Data Integrity Issue in Character Class Handling

A logic error in the tr utility of uutils coreutils causes the program to incorrectly define the :graph: and :print: character classes. The implementation mistakenly includes the ASCII space character 0x20 in the :graph: class and excludes it from the :print: class, effectively reversing the...

3.3CVSS6.1AI score0.00154EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/04/22 4:08 p.m.•15 views

CVE-2026-35371 uutils coreutils id Misleading Identity Reporting in Pretty Print Mode

The id utility in uutils coreutils exhibits incorrect behavior in its "pretty print" output when the real UID and effective UID differ. The implementation incorrectly uses the effective GID instead of the effective UID when performing a name lookup for the effective user. This results in misleadi...

3.3CVSS5.9AI score0.00137EPSS
SaveExploits1References1
CVE
CVE
•added 2026/04/22 4:08 p.m.•52 views

CVE-2026-35371

CVE-2026-35371 concerns the id utility in the uutils coreutils package. The vulnerability arises in the pretty print mode, where the tool incorrectly uses the effective GID instead of the effective UID when performing a name lookup for the effective user. This causes the output to misreport the i...

3.3CVSS5.9AI score0.00137EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2026/04/22 4:08 p.m.•68 views

CVE-2026-35371 uutils coreutils id Misleading Identity Reporting in Pretty Print Mode

The id utility in uutils coreutils exhibits incorrect behavior in its "pretty print" output when the real UID and effective UID differ. The implementation incorrectly uses the effective GID instead of the effective UID when performing a name lookup for the effective user. This results in misleadi...

3.3CVSS0.00137EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/04/22 12:00 a.m.•19 views

PT-2026-34515

Name of the Vulnerable Software and Affected Versions uutils coreutils affected versions not specified Description A logic error in the tr utility causes the program to incorrectly define the :graph: and :print: character classes. The implementation mistakenly includes the ASCII space character...

3.3CVSS5.8AI score0.00154EPSS
SaveExploits1References15
Positive Technologies
Positive Technologies
•added 2026/04/22 12:00 a.m.•32 views

PT-2026-34573

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 6.1.4 Description A command injection issue exists in the PDB parser's print gvars function. An attacker can execute arbitrary OS commands by crafting a malicious PDB file containing newline characters in symbol names...

8.4CVSS6.4AI score0.01721EPSS
SaveExploits1References52
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/22 12:00 a.m.•3 views

CVE-2026-35379: Incorrect Provision of Specified Functionality

A logic error in the tr utility of uutils coreutils causes the program to incorrectly define the :graph: and :print: character classes. The implementation mistakenly includes the ASCII space character 0x20 in the :graph: class and excludes it from the :print: class, effectively reversing the...

3.3CVSS6AI score0.00154EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2026/04/22 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-35379

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A logic error in the tr utility of uutils coreutils causes the program to incorrectly define the :graph: and :print: character classes. The implementation...

3.3CVSS6AI score0.00154EPSS
SaveExploits1References3
OSV
OSV
•added 2026/04/21 4:14 p.m.•20 views

CLSA-2026-1776788057 cups: Fix of CVE-2026-34980

CVE-2026-34980: filter control characters from option values in the scheduler to prevent PPD keyword injection via Print-Job...

7.5CVSS6.7AI score0.00335EPSS
SaveExploits2References1
OSV
OSV
•added 2026/04/21 10:29 a.m.•21 views

CLSA-2026-1776767380 cups: Fix of 3 CVEs

CVE-2026-34980: filter control characters from option values in the scheduler to prevent PPD keyword injection via Print-Job - CVE-2026-39314: range check job-password-supported to prevent integer underflow in ppdCreateFromIPP - CVE-2026-39316: expire per-printer subscriptions before deleting the...

7.5CVSS6.8AI score0.00335EPSS
SaveExploits4References1
BDU FSTEC
BDU FSTEC
•added 2026/04/20 12:00 a.m.•18 views

The vulnerability of the Windows Print Spooler daemon in operating systems like Windows allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the Windows Print Spooler in operating systems related to print queues involves the disclosure of sensitive information. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

5.5CVSS5.8AI score0.00479EPSS
SaveExploits0References2Affected Software22
Tenable Nessus
Tenable Nessus
•added 2026/04/20 12:00 a.m.•10 views

HP Color LaserJet Exposure of Sensitive Information to an Unauthorized Actor (CVE-2005-2988)

HP LaserJet 2430, and possibly other printers that use Jetdirect controls, stores information about recently printed documents without proper protection, which could allow remote attackers to obtain sensitive information via SNMP. This plugin only works with Tenable.ot. Please visit...

5CVSS5.8AI score0.02033EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2026/04/17 5:04 p.m.•10 views

cups: CUPS-Filters: Information disclosure and data corruption via crafted TIFF image file processing

A flaw was found in CUPS-Filters, including libcupsfilters. An attacker on the same local network, with low privileges, could exploit an out-of-bounds read/write vulnerability by submitting a specially crafted TIFF image file as a print job with specific options. This could lead to limited...

3.7CVSS5.5AI score0.00446EPSS
SaveExploits1References9
SUSE CVE
SUSE CVE
•added 2026/04/17 12:32 p.m.•37 views

SUSE CVE-2003-0354

Unknown vulnerability in GNU Ghostscript before 7.07 allows attackers to execute arbitrary commands, even when -dSAFER is enabled, via a PostScript file that causes the commands to be executed from a malicious print job...

7.5CVSS6.1AI score0.0187EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/04/17 12:00 a.m.•11 views

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: cups (UTSA-2026-010665)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010665 advisory. OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, in a network-exposed cupsd with a...

7.5CVSS6.6AI score0.00335EPSS
SaveExploits2References4
Fedora
Fedora
•added 2026/04/16 11:42 p.m.•17 views

[SECURITY] Fedora 44 Update: plasma-print-manager-6.6.4-1.fc44

Printer management for KDE...

5.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/04/16 12:00 a.m.•15 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cups (UTSA-2026-007170)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007170 advisory. OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, in a network-exposed cupsd with a...

7.5CVSS6.6AI score0.00335EPSS
SaveExploits2References4
SUSE CVE
SUSE CVE
•added 2026/04/15 11:25 p.m.•26 views

SUSE CVE-2026-40499

radare2 prior to version 6.1.4 contains a command injection vulnerability in the PDB parser's printgvars function that allows attackers to execute arbitrary commands by embedding a newline byte in the PE section header name field. Attackers can craft a malicious PDB file with specially crafted...

7.8CVSS6.1AI score0.01697EPSS
SaveExploits1References3
Rows per page
Query Builder