gnome-shell: lockscreen bypass with printscreen key

It was found that the Gnome shell did not disable the Print Screen key when the screen was locked. This could allow an attacker with physical access to a system with a locked screen to crash the screen-locking application by creating a large amount of screenshots...

SS-2015-006: XSS In GridField print

More info at https://www.silverstripe.org/software/download/security-releases/ss-2015-006/...

Apple MAC OS X Yosemite PDF File Information Disclosure Vulnerability

Apple MAC OS X Yosemite is the latest operating system developed by Apple. A vulnerability exists in Apple MAC OS X Yosemite's handling of password-protected PDF files created by the Print dialog box, where the password is included in the print parameter file, which can be exploited by remote...

Oracle Secure Global Desktop Multiple Vulnerabilities (January 2015 CPU) (POODLE)

The remote host has a version of Oracle Secure Global Desktop that is version 4.63, 4.71, 5.0 or 5.1. It is, therefore, affected by multiple vulnerabilities in the following components : - Apache HTTP Server - Client - Gateway JARP module - Gateway Reverse Proxy - OpenSSL - Print Servlet only in...

Vulnerabilities in Samsung SyncThru Web Service

Hello 3APA3A! There are Information Leakage and Insufficient Authorization vulnerabilities in SyncThru Web Service. This is web application for Samsung printers, particularly I found it with Samsung ML-1865W and other printers. Earlier I informed Samsung about it. ------------------------- Affect...

Apple CUPS cupsdDoSelect Remote Code Execution attack - Ver2 (CVE-2009-3553)

A code execution vulnerability has been reported in Apple Cups. An attacker could exploit this vulnerability via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count. Successful exploitation of this vulnerability could allow a...

DEBIAN-CVE-2014-7300

GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc requests, which allows physically proximate attackers to execute arbitrary commands on an unattended workstation by making many PrtSc requests and leveraging...

UBUNTU-CVE-2014-7300

GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc requests, which allows physically proximate attackers to execute arbitrary commands on an unattended workstation by making many PrtSc requests and leveraging...

CUPS Remote Command Execution via Shellshock

Binary data cupsbashrce.nbin...

Fedora 21 : phpMyAdmin-4.2.12-1.fc21 (2014-15588)

phpMyAdmin 4.2.12.0 2014-11-20 ================================ - Blank/white page when JavaScript disabled - Multi row actions cause full page reloads - ReferenceError: targeurl is not defined - Incorrect text/icon display in Tracking report - Recordset return from procedure display nothing - Ed...

CVE-2014-9140

Buffer overflow in the ppphdlc function in print-ppp.c in tcpdump 4.6.2 and earlier allows remote attackers to cause a denial of service crash cia a crafted PPP packet...

PT-2014-8845

Name of the Vulnerable Software and Affected Versions tcpdump versions 4.6.2 and earlier Description A buffer overflow issue exists in the ppp hdlc function, located in the print-ppp.c file, allowing remote attackers to cause a denial of service by crashing the system via a crafted PPP packet...

Fedora 20 : phpMyAdmin-4.2.12-1.fc20 (2014-15538)

phpMyAdmin 4.2.12.0 2014-11-20 ================================ - Blank/white page when JavaScript disabled - Multi row actions cause full page reloads - ReferenceError: targeurl is not defined - Incorrect text/icon display in Tracking report - Recordset return from procedure display nothing - Ed...

CVE-2014-8958

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.6, 4.1.x before 4.1.14.7, and 4.2.x before 4.2.12 allow remote authenticated users to inject arbitrary web script or HTML via a crafted 1 database, 2 table, or 3 column name that is improperly handled during...

CVE-2014-8958

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.6, 4.1.x before 4.1.14.7, and 4.2.x before 4.2.12 allow remote authenticated users to inject arbitrary web script or HTML via a crafted 1 database, 2 table, or 3 column name that is improperly handled during...

CVE-2014-8958: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.6, 4.1.x before 4.1.14.7, and 4.2.x before 4.2.12 allow remote authenticated users to inject arbitrary web script or HTML via a crafted 1 database, 2 table, or 3 column name that is improperly handled during...

PT-2014-8723

Name of the Vulnerable Software and Affected Versions tcpdump versions 4.5.0 through 4.6.2 Description The issue is related to multiple integer underflows in the geonet print function when tcpdump is in verbose mode. This allows remote attackers to cause a denial of service, resulting in a...

PT-2014-8722

Name of the Vulnerable Software and Affected Versions tcpdump versions 3.9.6 through 4.6.2 Description The issue is related to an integer underflow in the olsr print function when tcpdump is in verbose mode. This allows remote attackers to cause a denial of service, resulting in a crash, by sendi...

Lantronix xPrintServer Remote Command Execution / CSRF Vulnerabilities

Lantronix xPrintServer suffers from remote command execution and cross site request forgery vulnerabilities. Hi, The Lantronix xPrintServer is a small Linux powered print server for iOS. Main configuration happens through a web interface. The problem is that the configuration happens through some...

Bash Environment Variable Handling Shell Command Injection Via CUPS

Added: 11/05/2014 CVE: CVE-2014-6271 BID: 70103 OSVDB: 112004 Background GNU Bash Bourne Again SHell is a command shell commonly used on Linux and Unix systems. CUPS is printing software for UNIX-like systems that allows a computer to act as a print server. Problem The Bash shell executes command...