Approved changes feed: RSS · Atom
cpe:2.3:a:cups:cups:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Cups (9ce85aeb-a11f-5577-a23f-07eac978a20c) |
|---|---|
| Product | Cups (1d9d008f-0884-526b-ba28-9caad17bbdee) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/apple/cups |
purl2cpe | 2026-06-01 10:14:06.228975 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2015-1159 |
vulnerable | 2026-06-08 05:06:25.076462 |
Details available
Cross-site scripting (XSS) vulnerability in the cgi_puts function in cgi-bin/template.c in the template engine in CUPS before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter to help/.
Published: 2015-06-26T10:00:00.000Z
Updated: 2024-08-06T04:33:20.630Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1158 |
vulnerable | 2026-06-08 05:06:25.075882 |
Details available
The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-host-name attributes, which allows remote attackers to trigger data corruption for reference-counted strings via a crafted (1) IPP_CREATE_JOB or (2) IPP_PRINT_JOB request, as demonstrated by replacing the configuration file and consequently executing arbitrary code.
Published: 2015-06-26T10:00:00.000Z
Updated: 2024-08-06T04:33:20.700Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-8166 |
vulnerable | 2026-06-08 05:06:08.235599 |
Details available
The browsing feature in the server in CUPS does not filter ANSI escape sequences from shared printer names, which might allow remote attackers to execute arbitrary code via a crafted printer name.
Published: 2018-01-12T17:00:00.000Z
Updated: 2024-08-06T13:10:50.873Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-6094 |
vulnerable | 2026-06-08 05:02:59.397364 |
Details available
cups (Common Unix Printing System) 'Listen localhost:631' option not honored correctly which could provide unauthorized access to the system
Published: 2019-12-20T14:07:15.000Z
Updated: 2024-08-06T21:21:28.520Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-4351 |
vulnerable | 2026-06-08 04:49:56.193389 |
Details available
Off-by-one error in the ippReadIO function in cups/ipp.c in CUPS 1.3.3 allows remote attackers to cause a denial of service (crash) via a crafted (1) textWithLanguage or (2) nameWithLanguage Internet Printing Protocol (IPP) tag, leading to a stack-based buffer overflow.
Published: 2007-10-31T22:00:00.000Z
Updated: 2024-08-07T14:53:55.278Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-0720 |
vulnerable | 2026-06-08 04:49:33.182129 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.