https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:18:21 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-01463 bdu:2015-01463 https://cve.radiocsirt.org/vuln/bdu:2015-01463 https://cve.radiocsirt.org/vuln/euvd-2026-100471 EUVD-2026-100471 https://cve.radiocsirt.org/vuln/euvd-2026-100471 https://cve.radiocsirt.org/vuln/fkie_cve-2014-5029 <p>The web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/ and language[0] set to null. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3537.</p> <p>The web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/ and language[0] set to null. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3537.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-5029 https://cve.radiocsirt.org/vuln/ghsa-jxpq-c7wx-p6h2 <p>The web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/ and language[0] set to null. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3537.</p> <p>The web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/ and language[0] set to null. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3537.</p> https://cve.radiocsirt.org/vuln/ghsa-jxpq-c7wx-p6h2 https://cve.radiocsirt.org/vuln/gsd-2014-5029 gsd-2014-5029 https://cve.radiocsirt.org/vuln/gsd-2014-5029 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10075-1 <p>cups-2.1.3-2.3 on GA media</p> <p>cups-2.1.3-2.3 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10075-1 https://cve.radiocsirt.org/vuln/rhba-2015:0386 <p>cups: cross-site scripting flaw fixed in the 1.7.2 release cups: insufficient checking leads to privilege escalation cups: Incomplete fix for CVE-2014-3537 cups: allows local users to read arbitrary files via a symlink attack cups: world-readable permissions</p> <p>cups: cross-site scripting flaw fixed in the 1.7.2 release cups: insufficient checking leads to privilege escalation cups: Incomplete fix for CVE-2014-3537 cups: allows local users to read arbitrary files via a symlink attack cups: world-readable permissions</p> https://cve.radiocsirt.org/vuln/rhba-2015:0386 https://cve.radiocsirt.org/vuln/suse-su-2015:0575-1 <p>Security update for CUPS</p> <p>Security update for CUPS</p> https://cve.radiocsirt.org/vuln/suse-su-2015:0575-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-5029 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: cups</p> <p>The web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/ and language[0] set to null. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3537.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: cups</p> <p>The web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/ and language[0] set to null. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3537.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-5029