CVE-2020-2832

Oracle CVE-2020-2832 affects Oracle E-Business Suite One-to-One Fulfillment (Print Server), versions 12.1.1–12.1.3. An unauthenticated attacker with network access via HTTP can potentially compromise the system; exploitation requires user interaction. Impact includes unauthorized access to data a...

CVE-2020-2825

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Print Server. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One...

CVE-2020-2824

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Print Server. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One...

CVE-2020-2826

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Print Server. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One...

CVE-2020-2825

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Print Server. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One...

CVE-2020-2832

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Print Server. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One...

CVE-2020-2826

CVE-2020-2826 affects Oracle E-Business Suite One-to-One Fulfillment, Print Server component, in versions 12.1.1–12.1.3. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise the One-to-One Fulfillment deployment, with human interaction required for expl...

CVE-2020-2825

CVE-2020-2825 affects Oracle E-Business Suite One-to-One Fulfillment, Print Server component, in versions 12.1.1–12.1.3. The vulnerability allows unauthenticated, network-accessible exploitation via HTTP, with user interaction required, potentially leading to unauthorized access to data and possi...

CVE-2020-2826

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Print Server. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One...

CVE-2020-2824

CVE-2020-2824 affects Oracle E-Business Suite One-to-One Fulfillment, component Print Server, on versions 12.1.1–12.1.3. The vulnerability allows a network-attached, HTTP-accessing attacker to compromise the system with no authentication, with user interaction required for exploitation, and may g...

CVE-2020-2827

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Print Server. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One...

MS15-081: Description of the security update for Word 2013: August 11, 2015

Resolves vulnerabilities in Office that could allow remote code execution if a user opens a specially crafted Microsoft Office file.SummaryThis security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Microsoft Office...

Remote Code Execution (RCE)

Foomatic is vulnerable to remote code execution RCE. An input sanitization flaw was found in the foomatic-rip print filter. An attacker could submit a print job with the username, title, or job options set to appear as a command line option that caused the filter to use a specified PostScript...

Cross-site Request Forgery (CSRF)

cups is vulnerable to cross-site request forgery CSRF. The vulnerability exists as a remote attacker could trick a user, who is logged into the CUPS web interface as an administrator, into visiting a specially-crafted website, the attacker could reconfigure and disable CUPS, and gain access to...

Arbitrary Code Execution

cups is vulnerable to arbitrary code execution. An integer overflow flaw leading to a heap buffer overflow was discovered in the Text-to-PostScript "texttops" filter. An attacker could create a malicious text file that could, possibly, execute arbitrary code as the "lp" user if the file was print...

Arbitrary Code Execution

samba is vulnerable to arbitrary code execution. A heap-based buffer overflow flaw was found in the way Samba clients handle over-sized packets. If a client connected to a malicious Samba server, it was possible to execute arbitrary code as the Samba client user. It was also possible for a remote...

Arbitrary Code Execution

cups is vulnerable to arbitrary code execution. The vulnerability exists as two overflows were discovered in the HP-GL/2-to-PostScript filter. An attacker could create a malicious HP-GL/2 file that could possibly execute arbitrary code as the "lp" user if the file is printed...

Vulnerability in the print-hncp.c:print_prefix() utility for capturing and analyzing network traffic with tcpdump, allowing a hacker to cause a service failure

The vulnerability in the print-hncp.c:printprefix utility for capturing and analyzing network traffic using tcpdump is related to the execution of read operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Vulnerability of the print-bgp.c:bgpattr-print() utility for capturing and analyzing network traffic with tcpdump, allowing a hacker to cause a service failure

The vulnerability in the print-bgp.c:bgpattrprint utility for capturing and analyzing network traffic using tcpdump involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Vulnerability of the print-ospf6.c:ospf6_print_lshdr() function in the packet capture and analysis tool tcpdump: allowing a hacker to cause a service failure

The vulnerability in the print-ospf6.c:ospf6printlshdr utility for capturing and analyzing network traffic using tcpdump is related to the execution of a read operation beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...