PT-2014-8723

Name of the Vulnerable Software and Affected Versions tcpdump versions 4.5.0 through 4.6.2 Description The issue is related to multiple integer underflows in the geonet print function when tcpdump is in verbose mode. This allows remote attackers to cause a denial of service, resulting in a...

Lantronix xPrintServer Remote Command Execution / CSRF Vulnerabilities

Lantronix xPrintServer suffers from remote command execution and cross site request forgery vulnerabilities. Hi, The Lantronix xPrintServer is a small Linux powered print server for iOS. Main configuration happens through a web interface. The problem is that the configuration happens through some...

Bash Environment Variable Handling Shell Command Injection Via CUPS

Added: 11/05/2014 CVE: CVE-2014-6271 BID: 70103 OSVDB: 112004 Background GNU Bash Bourne Again SHell is a command shell commonly used on Linux and Unix systems. CUPS is printing software for UNIX-like systems that allows a computer to act as a print server. Problem The Bash shell executes command...

PT-2014-2343

Name of the Vulnerable Software and Affected Versions libproxy version 0.3.1 Description The issue is related to a format string vulnerability in the print proxies function. This could allow attackers to cause a denial of service or possibly execute arbitrary code via format string specifiers in ...

CVE-2012-5244

Multiple SQL injection vulnerabilities in Banana Dance B.2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 return, 2 display, 3 table, or 4 search parameter to functions/suggest.php; 5 the id parameter to functions/widgets.php, 6 the category parameter to...

Information disclosure

The Lansing State Journal Print aka com.lansingjournal.android.prod application 6.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Argus Leader Print Edition aka com.argusleader.android.prod application 6.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7129

The CVE-2014-7129 entry affects the Argus Leader Print Edition app (com.argusleader.android.prod) version 6.7 for Android. The underlying issue is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive informati...

CVE-2014-7122: Undefined Security Weakness

The Lansing State Journal Print aka com.lansingjournal.android.prod application 6.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7129: Undefined Security Weakness

The Argus Leader Print Edition aka com.argusleader.android.prod application 6.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7792

Name of the Vulnerable Software and Affected Versions The Argus Leader Print Edition aka com.argusleader.android.prod version 6.7 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information...

PT-2014-8456

Name of the Vulnerable Software and Affected Versions C97net Cart Engine versions prior to 4.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via the path parameter in the "drop down TOP menu with path" section or the print this page variable in the footer...

CVE-2014-8078

Cross-site scripting XSS vulnerability in the Print aka Printer, e-mail and PDF versions module 6.x-1.x before 6.x-1.19, 7.x-1.x before 7.x-1.3, and 7.x-2.x before 7.x-2.0 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Print aka Printer, e-mail and PDF versions module 6.x-1.x before 6.x-1.19, 7.x-1.x before 7.x-1.3, and 7.x-2.x before 7.x-2.0 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors...

CVE-2014-8078

Cross-site scripting XSS vulnerability in the Print aka Printer, e-mail and PDF versions module 6.x-1.x before 6.x-1.19, 7.x-1.x before 7.x-1.3, and 7.x-2.x before 7.x-2.0 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors...

CVE-2014-8078

The CVE-2014-8078 entry maps to a Drupal vulnerability in the Print (Printer, e‑mail and PDF versions) contributed module. Affected versions are 6.x-1.x before 6.x-1.19, 7.x-1.x before 7.x-1.3, and 7.x-2.x before 7.x-2.0. The root cause is insufficient sanitization of user input during the genera...

CVE-2014-8078

Cross-site scripting XSS vulnerability in the Print aka Printer, e-mail and PDF versions module 6.x-1.x before 6.x-1.19, 7.x-1.x before 7.x-1.3, and 7.x-2.x before 7.x-2.0 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors...

CVE-2014-8078: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Print aka Printer, e-mail and PDF versions module 6.x-1.x before 6.x-1.19, 7.x-1.x before 7.x-1.3, and 7.x-2.x before 7.x-2.0 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors...

PT-2014-8402

Name of the Vulnerable Software and Affected Versions Drupal versions 6.x-1.x before 6.x-1.19 Drupal versions 7.x-1.x before 7.x-1.3 Drupal versions 7.x-2.x before 7.x-2.0 Description A cross-site scripting XSS issue exists in the Print module for Drupal, allowing remote authenticated users with...

Fedora Update for kde-print-manager FEDORA-2014-11448

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...