https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:12:22 +0000 https://cve.radiocsirt.org/vuln/certa-2010-avi-265 certa-2010-avi-265 https://cve.radiocsirt.org/vuln/certa-2010-avi-265 https://cve.radiocsirt.org/vuln/euvd-2026-118628 EUVD-2026-118628 https://cve.radiocsirt.org/vuln/euvd-2026-118628 https://cve.radiocsirt.org/vuln/fkie_cve-2010-1748 <p>The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, does not properly handle parameter values containing a % (percent) character without two subsequent hex characters, which allows context-dependent attackers to obtain sensitive information from cupsd process memory via a crafted request, as demonstrated by the (1) /admin?OP=redirect&amp;URL=% and (2) /admin?URL=/admin/&amp;OP=% URIs.</p> <p>The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, does not properly handle parameter values containing a % (percent) character without two subsequent hex characters, which allows context-dependent attackers to obtain sensitive information from cupsd process memory via a crafted request, as demonstrated by the (1) /admin?OP=redirect&amp;URL=% and (2) /admin?URL=/admin/&amp;OP=% URIs.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2010-1748 https://cve.radiocsirt.org/vuln/ghsa-vcrj-62jj-6wf5 <p>The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, does not properly handle parameter values containing a % (percent) character without two subsequent hex characters, which allows context-dependent attackers to obtain sensitive information from cupsd process memory via a crafted request, as demonstrated by the (1) /admin?OP=redirect&amp;URL=% and (2) /admin?URL=/admin/&amp;OP=% URIs.</p> <p>The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, does not properly handle parameter values containing a % (percent) character without two subsequent hex characters, which allows context-dependent attackers to obtain sensitive information from cupsd process memory via a crafted request, as demonstrated by the (1) /admin?OP=redirect&amp;URL=% and (2) /admin?URL=/admin/&amp;OP=% URIs.</p> https://cve.radiocsirt.org/vuln/ghsa-vcrj-62jj-6wf5 https://cve.radiocsirt.org/vuln/gsd-2010-1748 gsd-2010-1748 https://cve.radiocsirt.org/vuln/gsd-2010-1748 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10075-1 <p>cups-2.1.3-2.3 on GA media</p> <p>cups-2.1.3-2.3 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10075-1 https://cve.radiocsirt.org/vuln/rhsa-2010:0490 <p>CUPS administrator web interface CSRF CUPS: texttops unchecked memory allocation failure leading to NULL pointer dereference cups: web interface memory disclosure</p> <p>CUPS administrator web interface CSRF CUPS: texttops unchecked memory allocation failure leading to NULL pointer dereference cups: web interface memory disclosure</p> https://cve.radiocsirt.org/vuln/rhsa-2010:0490