CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Free accounts get a daily email of the CVEs that match up to 3 of their products on My program; subscribers get each one the moment it is published. Where the data comes from: sources.

Updated under an hour ago (Nov 2, 2026, 1:25 AM ET)

What this means for you

This week: 3,464 CVEs published, 269 critical, and 2 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stackFree account, 3 products This week's critical CVEs Exploited in the last 30 days

Published in the last 7 days: 3,464; Show in the list
Critical, last 7 days: 269; Show in the list
Healthcare-tagged, last 7 days: 2; Show in the list
Known exploited (CISA KEV): 1,765; Show in the list

Showing CVEs that name the product easy_software_products:cups. Show all products

13 CVEs

Showing 1 to 10.

CVE	Severity	Title	Published
CVE-2007-5849	High 9.3	Integer underflow in the asn1_get_string function in the SNMP back end (backend/snmp.c) for CUPS 1.2 through 1.3.4 allows remote attackers to execute arbitrary code via a crafted SNMP response that t…	Dec 19, 2007
CVE-2005-2526	Medium 5.0	CUPS in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to cause a denial of service (CPU consumption) by sending a partial IPP request and closing the connection.	Aug 19, 2005
CVE-2005-2525	Medium 5.0	CUPS in Mac OS X 10.3.9 and 10.4.2 does not properly close file descriptors when handling multiple simultaneous print jobs, which allows remote attackers to cause a denial of service (printing halt).	Aug 19, 2005
CVE-2004-0927	Medium 5.0	ServerAdmin in Mac OS X 10.2.8 through 10.3.5 uses the same example self-signed certificate on each system, which allows remote attackers to decrypt sessions.	Jan 27, 2005
CVE-2004-0926	High 10.0	Heap-based buffer overflow in Apple QuickTime on Mac OS 10.2.8 through 10.3.5 may allow remote attackers to execute arbitrary code via a certain BMP image.	Jan 27, 2005
CVE-2004-0924	Medium 5.0	NetInfo Manager on Mac OS X 10.3.x through 10.3.5, after an initial root login, reports the root account as being disabled, even when it has not.	Jan 27, 2005
CVE-2004-0923	Low 2.1	CUPS 1.1.20 and earlier records authentication information for a device URI in the error_log file, which allows local users to obtain user names and passwords.	Jan 27, 2005
CVE-2002-1383	High 10.0	Multiple integer overflows in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allow remote attackers to execute arbitrary code via (1) the CUPSd HTTP interface, as demonstrated by vanilla-co…	Dec 26, 2002
CVE-2002-1371	High 7.5	filters/image-gif.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check for zero-length GIF images, which allows remote attackers to execute arbitrary code via modifie…	Dec 26, 2002
CVE-2002-1369	High 10.0	jobs.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly use the strncat function call when processing the options string, which allows remote attackers to execute arbitra…	Dec 26, 2002

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.