https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:12:23.163334+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2010-avi-265 certa-2010-avi-265 — De multiples vulnérabilité ont été découvertes dans Mac OS X. L'exploitation de ces vulnérabilités permet de réaliser u… 2026-10-03T08:12:23.169343+00:00 certa-2010-avi-265 https://cve.radiocsirt.org/vuln/euvd-2026-118628 EUVD-2026-118628 2026-10-03T08:12:23.169376+00:00 EUVD-2026-118628 https://cve.radiocsirt.org/vuln/fkie_cve-2010-1748 fkie_cve-2010-1748 2026-10-03T08:12:23.169391+00:00

The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, does not properly handle parameter values containing a % (percent) character without two subsequent hex characters, which allows context-dependent attackers to obtain sensitive information from cupsd process memory via a crafted request, as demonstrated by the (1) /admin?OP=redirect&URL=% and (2) /admin?URL=/admin/&OP=% URIs.

 https://cve.radiocsirt.org/vuln/ghsa-vcrj-62jj-6wf5 GHSA-vcrj-62jj-6wf5 2026-10-03T08:12:23.169421+00:00

The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, does not properly handle parameter values containing a % (percent) character without two subsequent hex characters, which allows context-dependent attackers to obtain sensitive information from cupsd process memory via a crafted request, as demonstrated by the (1) /admin?OP=redirect&URL=% and (2) /admin?URL=/admin/&OP=% URIs.

 https://cve.radiocsirt.org/vuln/gsd-2010-1748 gsd-2010-1748 2026-10-03T08:12:23.169440+00:00 gsd-2010-1748 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10075-1 openSUSE-SU-2024:10075-1 — cups-2.1.3-2.3 on GA media 2026-10-03T08:12:23.169451+00:00

cups-2.1.3-2.3 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2010:0490 RHSA-2010:0490 — Red Hat Security Advisory: cups security update 2026-10-03T08:12:23.169471+00:00

CUPS administrator web interface CSRF CUPS: texttops unchecked memory allocation failure leading to NULL pointer dereference cups: web interface memory disclosure