cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score CVE-2012-6108,https://securityvulnerability.io/vulnerability/CVE-2012-6108,,"HP Linux Imaging and Printing (HPLIP) before 3.13.2 uses world-writable permissions for /var/log/hp and /var/log/hp/tmp, which allows local users to delete log files via standard filesystem operations.",HP,Linux Imaging And Printing Project,,,0.0004199999966658652,false,,false,false,false,,,false,false,,2014-02-15T11:00:00.000Z,0 CVE-2013-6402,https://securityvulnerability.io/vulnerability/CVE-2013-6402,,base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.11 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hp-pkservice.log temporary file.,HP,Linux Imaging And Printing Project,,,0.0004199999966658652,false,,false,false,false,,,false,false,,2014-01-05T20:00:00.000Z,0 CVE-2013-6427,https://securityvulnerability.io/vulnerability/CVE-2013-6427,,"upgrade.py in the hp-upgrade service in HP Linux Imaging and Printing (HPLIP) 3.x through 3.13.11 launches a program from an http URL, which allows man-in-the-middle attackers to execute arbitrary code by gaining control over the client-server data stream.",HP,Linux Imaging And Printing Project,,,0.005369999911636114,false,,false,false,false,,,false,false,,2013-12-09T18:00:00.000Z,0 CVE-2013-4325,https://securityvulnerability.io/vulnerability/CVE-2013-4325,,"The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.9 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process.",HP,Linux Imaging And Printing Project,,,0.0004199999966658652,false,,false,false,false,,,false,false,,2013-09-23T10:00:00.000Z,0 CVE-2013-0200,https://securityvulnerability.io/vulnerability/CVE-2013-0200,,"HP Linux Imaging and Printing (HPLIP) through 3.12.4 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/hpcupsfilterc_#.bmp, (2) /tmp/hpcupsfilterk_#.bmp, (3) /tmp/hpcups_job#.out, (4) /tmp/hpijs_#####.out, or (5) /tmp/hpps_job#.out temporary file, a different vulnerability than CVE-2011-2722.",HP,Linux Imaging And Printing Project,,,0.0004199999966658652,false,,false,false,false,,,false,false,,2013-03-06T20:00:00.000Z,0 CVE-2011-2722,https://securityvulnerability.io/vulnerability/CVE-2011-2722,,The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing (HPLIP) 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file.,HP,Linux Imaging And Printing Project,,,0.0004199999966658652,false,,false,false,false,,,false,false,,2012-05-25T20:00:00.000Z,0 CVE-2011-2697,https://securityvulnerability.io/vulnerability/CVE-2011-2697,,foomatic-rip-hplip in HP Linux Imaging and Printing (HPLIP) 3.11.5 allows remote attackers to execute arbitrary code via a crafted *FoomaticRIPCommandLine field in a .ppd file.,HP,Linux Imaging And Printing Project,,,0.047529999166727066,false,,false,false,false,,,false,false,,2011-07-29T20:00:00.000Z,0 CVE-2010-4267,https://securityvulnerability.io/vulnerability/CVE-2010-4267,,"Stack-based buffer overflow in the hpmud_get_pml function in io/hpmud/pml.c in Hewlett-Packard Linux Imaging and Printing (HPLIP) 1.6.7, 3.9.8, 3.10.9, and probably other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SNMP response with a large length value.",HP,Linux Imaging And Printing Project,,,0.08427999913692474,false,,false,false,false,,,false,false,,2011-01-20T18:00:00.000Z,0 CVE-2008-2941,https://securityvulnerability.io/vulnerability/CVE-2008-2941,,"The hpssd message parser in hpssd.py in HP Linux Imaging and Printing (HPLIP) 1.6.7 allows local users to cause a denial of service (process stop) via a crafted packet, as demonstrated by sending ""msg=0"" to TCP port 2207.",HP,Linux Imaging And Printing Project,,,0.0004400000034365803,false,,false,false,false,,,false,false,,2008-08-14T20:00:00.000Z,0 CVE-2008-2940,https://securityvulnerability.io/vulnerability/CVE-2008-2940,,"The alert-mailing implementation in HP Linux Imaging and Printing (HPLIP) 1.6.7 allows local users to gain privileges and send e-mail messages from the root account via vectors related to the setalerts message, and lack of validation of the device URI associated with an event message.",HP,Linux Imaging And Printing Project,,,0.0004400000034365803,false,,false,false,false,,,false,false,,2008-08-14T20:00:00.000Z,0 CVE-2007-5208,https://securityvulnerability.io/vulnerability/CVE-2007-5208,,"hpssd in Hewlett-Packard Linux Imaging and Printing Project (hplip) 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a from address, which is not properly handled when invoking sendmail.",HP,Linux Imaging And Printing Project,,,0.6560999751091003,false,,false,false,false,,,false,false,,2007-10-13T00:00:00.000Z,0