Vulnerabilities
Summary — last 7 days
New vulnerabilities2,720▼ 353 vs. last week
Critical / high1,288▼ 193 vs. last week
New active exploitation (KEV)3▼ 5 vs. last week
Unscored (no CVSS)216▼ 113 vs. last week
7 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Medium (5.5) | 0.43% | — | Linuxfoundation Foomatic-filtersDebian LinuxFedoraproject Fedora | 11/19/2019 | 6/16/2026 | foomatic-rip filter v4.0.12 and prior used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileges of the user running… | |
| Modified | Medium (5.5) | 0.40% | — | Linuxfoundation Foomatic-filtersDebian Linux | 11/19/2019 | 6/16/2026 | foomatic-rip filter, all versions, used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileges of the user running… | |
| Modified | Critical (9.8) | 5.5% | — | Redhat Enterprise Linux DesktopRedhat Enterprise Linux HPC NodeRedhat Enterprise Linux ServerRedhat Enterprise Linux Server EUS+4 | 4/15/2016 | 6/16/2026 | Heap-based buffer overflow in the unhtmlify function in foomatic-rip in foomatic-filters before 4.0.6 allows remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code via a long job title. | |
| Modified | High (7.3) | 5.3% | — | Canonical Ubuntu LinuxDebian LinuxLinuxfoundation Cups-filtersLinuxfoundation Foomatic-filters | 4/14/2016 | 6/17/2026 | Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via a ; (semicolon) character in a print job, a different vulnerability than CVE-2015-8327. | |
| Modified | High (7.5) | 11% | — | Redhat Enterprise Linux DesktopRedhat Enterprise Linux HPC NodeRedhat Enterprise Linux ServerRedhat Enterprise Linux Server EUS+5 | 12/17/2015 | 6/17/2026 | Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via ` (backtick) characters in a print job. | |
| Modified | Medium (6.8) | 5.0% | — | Linuxfoundation Foomatic | 7/29/2011 | 6/16/2026 | foomaticrip.c in foomatic-rip in foomatic-filters in Foomatic 4.0.6 allows remote attackers to execute arbitrary code via a crafted *FoomaticRIPCommandLine field in a .ppd file, a different vulnerability than CVE-2011-2697. | |
| Modified | High (7.5) | 4.3% | — | Linuxprinting.org Foomatic-filtersSUN Java Desktop SystemConectiva LinuxTrustix Secure Linux | 9/16/2004 | 6/16/2026 | Unknown vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote attackers with access to CUPS to execute arbitrary commands. |