Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 12

Export CSV
CVE-2007-5208

hplip arbitrary command execution

hpssd in Hewlett-Packard Linux Imaging and Printing Project (hplip) 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a from address, which is not properly handled when invoking sendmail.

CVSS 2.0 · 7.6 High EPSS 67.3% KEV · Not listed
Vendors
Hp Redhat
Products
Linux Imaging And Printing Project Enterprise Linux
CVE-2008-2940

hpssd of hplip allows unprivileged user to trigger alert mail

The alert-mailing implementation in HP Linux Imaging and Printing (HPLIP) 1.6.7 allows local users to gain privileges and send e-mail messages from the root account via vectors related to the setalerts message, and lack of validation of the device URI associated with an event message.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Hp Redhat
Products
Linux Imaging And Printing Project Enterprise Linux
CVE-2008-2941

hplip hpssd.py Denial-Of-Service parsing vulnerability

The hpssd message parser in hpssd.py in HP Linux Imaging and Printing (HPLIP) 1.6.7 allows local users to cause a denial of service (process stop) via a crafted packet, as demonstrated by sending "msg=0" to TCP port 2207.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Hp Redhat
Products
Linux Imaging And Printing Project Enterprise Linux
CVE-2025-43023

HP Linux Imaging and Printing Software - Use of DSA Key

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerability is due to the use of a weak code signing key, Digital Signature Algorithm (DSA).

CVSS 4.0 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Hp Linux
Products
Hp Linux Imaging And Printing Linux Imaging And Printing Project and 2 more
CVE-2011-2697

foomatic: Improper sanitization of command line option in foomatic-rip

foomatic-rip-hplip in HP Linux Imaging and Printing (HPLIP) 3.11.5 allows remote attackers to execute arbitrary code via a crafted *FoomaticRIPCommandLine field in a .ppd file.

CVSS 2.0 · 6.8 Medium EPSS 10.8% KEV · Not listed
Vendors
Hp Redhat
Products
Linux Imaging And Printing Project Enterprise Linux
CVE-2011-2722

hplip: insecure temporary file handling

The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing (HPLIP) 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file.

CVSS 2.0 · 1.2 Low EPSS < 1% KEV · Not listed
Vendors
Hp Redhat
Products
Linux Imaging And Printing Project Enterprise Linux
CVE-2012-6108

hplip: default permissions for /var/log/hp are too open

HP Linux Imaging and Printing (HPLIP) before 3.13.2 uses world-writable permissions for /var/log/hp and /var/log/hp/tmp, which allows local users to delete log files via standard filesystem operations.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Hp
Products
Linux Imaging And Printing Project
CVE-2013-0200

hplip: insecure temporary file handling flaws

HP Linux Imaging and Printing (HPLIP) through 3.12.4 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/hpcupsfilterc_#.bmp, (2) /tmp/hpcupsfilterk_#.bmp, (3) /tmp/hpcups_job#.out, (4) /tmp/hpijs_#####.out, or (5) /tmp/hpps_job#.out temporary file, a different vulnerability than CVE-2011-2722.

CVSS 2.0 · 1.9 Low EPSS < 1% KEV · Not listed
Vendors
Hp Redhat
Products
Linux Imaging And Printing Project Enterprise Linux
CVE-2013-4325

hplip: Insecure calling of polkit

The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.9 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process.

CVSS 2.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Hp Redhat
Products
Linux Imaging And Printing Project Enterprise Linux
CVE-2013-6402

hplip: insecure temporary file handling in pkit.py

base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.11 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hp-pkservice.log temporary file.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Hp
Products
Linux Imaging And Printing Project
CVE-2013-6427

hplip: insecure auto update feature

upgrade.py in the hp-upgrade service in HP Linux Imaging and Printing (HPLIP) 3.x through 3.13.11 launches a program from an http URL, which allows man-in-the-middle attackers to execute arbitrary code by gaining control over the client-server data stream.

CVSS 2.0 · 6.8 Medium EPSS 4.0% KEV · Not listed
Vendors
Hp
Products
Linux Imaging And Printing Project
CVE-2010-4267

hplip: remote stack overflow vulnerability

Stack-based buffer overflow in the hpmud_get_pml function in io/hpmud/pml.c in Hewlett-Packard Linux Imaging and Printing (HPLIP) 1.6.7, 3.9.8, 3.10.9, and probably other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SNMP response with a large length value.

CVSS 2.0 · 7.5 High EPSS 10.8% KEV · Not listed
Vendors
Hp Redhat
Products
Linux Imaging And Printing Project Enterprise Linux