https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:48:18 +0000 https://cve.radiocsirt.org/vuln/bdu:2018-01423 bdu:2018-01423 https://cve.radiocsirt.org/vuln/bdu:2018-01423 https://cve.radiocsirt.org/vuln/certfr-2022-avi-267 certfr-2022-avi-267 https://cve.radiocsirt.org/vuln/certfr-2022-avi-267 https://cve.radiocsirt.org/vuln/euvd-2026-80004 EUVD-2026-80004 https://cve.radiocsirt.org/vuln/euvd-2026-80004 https://cve.radiocsirt.org/vuln/fkie_cve-2017-18190 <p>A localhost.localdomain whitelist entry in valid_host() in scheduler/client.c in CUPS before 2.2.2 allows remote attackers to execute arbitrary IPP commands by sending POST requests to the CUPS daemon in conjunction with DNS rebinding. The localhost.localdomain name is often resolved via a DNS server (neither the OS nor the web browser is responsible for ensuring that localhost.localdomain is 127.0.0.1).</p> <p>A localhost.localdomain whitelist entry in valid_host() in scheduler/client.c in CUPS before 2.2.2 allows remote attackers to execute arbitrary IPP commands by sending POST requests to the CUPS daemon in conjunction with DNS rebinding. The localhost.localdomain name is often resolved via a DNS server (neither the OS nor the web browser is responsible for ensuring that localhost.localdomain is 127.0.0.1).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-18190 https://cve.radiocsirt.org/vuln/ghsa-vfqc-qhm9-65mm <p>A localhost.localdomain whitelist entry in valid_host() in scheduler/client.c in CUPS before 2.2.2 allows remote attackers to execute arbitrary IPP commands by sending POST requests to the CUPS daemon in conjunction with DNS rebinding. The localhost.localdomain name is often resolved via a DNS server (neither the OS nor the web browser is responsible for ensuring that localhost.localdomain is 127.0.0.1).</p> <p>A localhost.localdomain whitelist entry in valid_host() in scheduler/client.c in CUPS before 2.2.2 allows remote attackers to execute arbitrary IPP commands by sending POST requests to the CUPS daemon in conjunction with DNS rebinding. The localhost.localdomain name is often resolved via a DNS server (neither the OS nor the web browser is responsible for ensuring that localhost.localdomain is 127.0.0.1).</p> https://cve.radiocsirt.org/vuln/ghsa-vfqc-qhm9-65mm https://cve.radiocsirt.org/vuln/gsd-2017-18190 gsd-2017-18190 https://cve.radiocsirt.org/vuln/gsd-2017-18190 https://cve.radiocsirt.org/vuln/rhsa-2020:3864 <p>cups: DNS rebinding attacks via incorrect whitelist cups: stack-buffer-overflow in libcups&#39;s asn1_get_type function cups: stack-buffer-overflow in libcups&#39;s asn1_get_packed function</p> <p>cups: DNS rebinding attacks via incorrect whitelist cups: stack-buffer-overflow in libcups&#39;s asn1_get_type function cups: stack-buffer-overflow in libcups&#39;s asn1_get_packed function</p> https://cve.radiocsirt.org/vuln/rhsa-2020:3864 https://cve.radiocsirt.org/vuln/suse-su-2018:0604-1 <p>Security update for cups</p> <p>Security update for cups</p> https://cve.radiocsirt.org/vuln/suse-su-2018:0604-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-18190 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: cups, Ubuntu:16.04:LTS: cups</p> <p>A localhost.localdomain whitelist entry in valid_host() in scheduler/client.c in CUPS before 2.2.2 allows remote attackers to execute arbitrary IPP commands by sending POST requests to the CUPS daemon in conjunction with DNS rebinding. The localhost.localdomain name is often resolved via a DNS server (neither the OS nor the web browser is responsible for ensuring that localhost.localdomain is 127.0.0.1).</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: cups, Ubuntu:16.04:LTS: cups</p> <p>A localhost.localdomain whitelist entry in valid_host() in scheduler/client.c in CUPS before 2.2.2 allows remote attackers to execute arbitrary IPP commands by sending POST requests to the CUPS daemon in conjunction with DNS rebinding. The localhost.localdomain name is often resolved via a DNS server (neither the OS nor the web browser is responsible for ensuring that localhost.localdomain is 127.0.0.1).</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-18190