GHSA-W534-Q4XF-H5V2 XSS in Mapfish Print relating to JSONP support

Impact A user can use the JSONP support to do a Cross-site scripting. Patches Use version = 3.24 Workarounds No References https://github.com/mapfish/mapfish-print/pull/1397/commits/89155f2506b9cee822e15ce60ccae390a1419d5e https://cwe.mitre.org/data/definitions/79.html For more information If you...

XSS in Mapfish Print relating to JSONP support

Impact A user can use the JSONP support to do a Cross-site scripting. Patches Use version = 3.24 Workarounds No References https://github.com/mapfish/mapfish-print/pull/1397/commits/89155f2506b9cee822e15ce60ccae390a1419d5e https://cwe.mitre.org/data/definitions/79.html For more information If you...

XXE attack in Mapfish Print

Impact A user can do to an XML External Entity XXE attack with the provided SDL style. Patches Use version = 3.24 Workarounds No References https://cwe.mitre.org/data/definitions/611.html https://github.com/mapfish/mapfish-print/pull/1397/commits/e1d0527d13db06b2b62ca7d6afb9e97dacd67a0e For more...

GHSA-VJV6-GQ77-3MJW XXE attack in Mapfish Print

Impact A user can do to an XML External Entity XXE attack with the provided SDL style. Patches Use version = 3.24 Workarounds No References https://cwe.mitre.org/data/definitions/611.html https://github.com/mapfish/mapfish-print/pull/1397/commits/e1d0527d13db06b2b62ca7d6afb9e97dacd67a0e For more...

OSV-2020-514 UNKNOWN READ in asn1_item_print_ctx

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14546 Crash type: UNKNOWN READ Crash state: asn1itemprintctx asn1templateprintctx asn1itemprintctx...

Certain printers do not print in Windows Server 2012

Certain printers do not print in Windows Server 2012 Summary This update resolves the following issue: Addresses an issue that might prevent certain printers from printing. The print spooler might generate an error or close unexpectedly when attempting to print, and no output will come from the...

Certain printers do not print in Windows 8.1 and Windows Server 2012 R2

Certain printers do not print in Windows 8.1 and Windows Server 2012 R2 Summary This update resolves the following issue: Addresses an issue that might prevent certain printers from printing. The print spooler might generate an error or close unexpectedly when attempting to print, and no output...

Exploit for Incorrect Resource Transfer Between Spheres in Microsoft

CVE-2020-1048 POC exploit code for CVE-2020-1048PrintDemon...

June 18, 2020—KB4567516 (OS Build 15063.2411)

None None...

June 18, 2020—KB4567518 (OS Build 10240.18609)

None None...

June 18, 2020—KB4567523 (OS Build 19041.331)

None None...

June 16, 2020—KB4567514 (OS Build 17134.1553)

None None...

June 16, 2020—KB4567513 (OS Build 17763.1294)

None None...

Microsoft Windows Print Configuration Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevated privilege vulnerability exists in the way memory objects are handled in...

CVE-2020-1196

An elevation of privilege vulnerability exists in the way that the printconfig.dll handles objects in memory, aka 'Windows Print Configuration Elevation of Privilege Vulnerability'...

June 9, 2020—KB4561673 (Security-only update)

None None...

June 9, 2020—KB4561674 (Security-only update)

None None...

Windows Print Configuration Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way that the printconfig.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially...

June 9, 2020—KB4561621 (OS Build 17134.1550)

None None...

KLA11807 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. An informati...