3206 matches found
Zyxel NSA310远程命令执行漏洞
漏洞效果 打印/etc/passwd 演示在存在漏洞主机上注入系统命令打印/etc/passwd： $ telnet 192.168.219.101 21 Trying 192.168.219.101... Connected to 192.168.219.101. Escape character is '^'. 220 Welcome to PureFTPd TLS 220 You are user number 1 of 10 allowed. 220 Local time is now 22:46. Server port: 21...
USN-2914-1 openssl vulnerabilities
Yuval Yarom, Daniel Genkin, and Nadia Heninger discovered that OpenSSL was vulnerable to a side-channel attack on modular exponentiation. On certain CPUs, a local attacker could possibly use this issue to recover RSA keys. This flaw is known as CacheBleed. CVE-2016-0702 Adam Langley discovered th...
Security update for Java7 (important)
Update OpenJDK to 7u95 / IcedTea 2.6.4 including the following fixes: Security fixes - S8059054, CVE-2016-0402: Better URL processing - S8130710, CVE-2016-0448: Better attributes processing - S8132210: Reinforce JMX collector internals - S8132988: Better printing dialogues - S8133962,...
Unspecified Vulnerability in Oracle E-Business Suite Oracle Project Contracts Printing Component
Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle Project Contracts Printing component of Oracle E-Business Suite, which could be exploited by a remote attacker to submit a special request to modify data...
CVE-2016-0534
Unspecified vulnerability in the Oracle Project Contracts component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Printing...
CVE-2016-0534
Unspecified vulnerability in the Oracle Project Contracts component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Printing...
Design/Logic Flaw
Unspecified vulnerability in the Oracle Project Contracts component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Printing...
CVE-2016-0534
Unspecified vulnerability in the Oracle Project Contracts component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Printing...
The vulnerability of the Foomatic printing filter and the Ubuntu operating system allows a hacker to execute arbitrary commands.
The vulnerability of the foomatic-rip component util.c in the cups-filters package in Foomatic printing and the Ubuntu operating system is related to the use of an incomplete blacklist. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using the quotation mark...
[SECURITY] Fedora 22 Update: cups-filters-1.4.0-1.fc22
Contains backends, filters, and other software that was once part of the core CUPS distribution but is no longer maintained by Apple Inc. In addition it contains additional filters developed independently of Apple, especially filters for the PDF-centric printing workflow introduced by OpenPrintin...
[SECURITY] Fedora 23 Update: cups-filters-1.4.0-1.fc23
Contains backends, filters, and other software that was once part of the core CUPS distribution but is no longer maintained by Apple Inc. In addition it contains additional filters developed independently of Apple, especially filters for the PDF-centric printing workflow introduced by OpenPrintin...
USN-2839-1 cups update
As a security improvement against the POODLE attack, this update disables SSLv3 support in the CUPS web interface. For legacy environments where SSLv3 support is still required, it can be re-enabled by adding "SSLOptions AllowSSL3" to /etc/cups/cupsd.conf...
cups-filters 'omit_shellescapes' OS Injection Vulnerability
Apple CUPS is an open source printing system for OS X and Unix-like systems. cups-filters is a package that provides CUPS filters. The cups-filters 'omitshellescapes' function fails to adequately filter input, allowing remote attackers to exploit the vulnerability to inject and execute arbitrary...
Debian Security Advisory DSA 3411-1 (cups-filters - security update)
Michal Kowalczyk discovered that missing input sanitising in the foomatic-rip print filter might result in the execution of arbitrary commands. The oldstable distribution wheezy is not affected. OpenVAS Vulnerability Test $Id: deb3411.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from...
Moderate: Red Hat Bug Fix Advisory: libreoffice bug fix and enhancement update
Updated libreoffice packages that fix several bugs and add various enhancements are now available for Red Hat Enterprise Linux 7. LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a...
RedHat Update for cups-filters RHSA-2015:2360-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2015:1981-1 Security update for MozillaFirefox, mozilla-nspr, mozilla-nss
This Mozilla Firefox, NSS and NSPR update fixes the following security and non security issues. - mozilla-nspr was updated to version 4.10.10 bsc952810 MFSA 2015-133/CVE-2015-7183 bmo1205157 NSPR memory corruption issues - mozilla-nss was updated to 3.19.2.1 bsc952810 MFSA...
SUSE-SU-2015:1978-1 Security update for MozillaFirefox, mozilla-nspr, mozilla-nss
This Mozilla Firefox, NSS and NSPR update fixes the following security and non security issues. - mozilla-nspr was updated to version 4.10.10 bsc952810 MFSA 2015-133/CVE-2015-7183 bmo1205157 NSPR memory corruption issues - mozilla-nss was updated to 3.19.2.1 bsc952810 MFSA...
CUPS: Multiple vulnerabilities
Background CUPS, the Common Unix Printing System, is a full-featured print server. Description Multiple vulnerabilities have been discovered in cups. Please review the CVE identifiers referenced below for details. Impact A remote attacker could possibly execute arbitrary code with the privileges ...
CVE-2015-7971
Xen 3.2.x through 4.6.x does not limit the number of printk console messages when logging certain pmu and profiling hypercalls, which allows local guests to cause a denial of service via a sequence of crafted 1 HYPERCALLxenoprofop hypercalls, which are not properly handled in the doxenoprofop...