CVE-2025-27680

Vasion Print formerly PrinterLogic before Virtual Appliance Host 1.0.750 Application 20.0.1442 allows Insecure Firmware Image with Insufficient Verification of Data Authenticity V-2024-004...

CVE-2025-27663

CVE-2025-27663 affects Vasion Print (formerly PrinterLogic) prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923, due to weak password encryption/encoding (OVE-20230524-0007). The vulnerability is associated with a 3.1 CVSS v3.1 base score of 9.8 (NETWORK, NO authentication, no user...

CVE-2025-27673

CVE-2025-27673 affects Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 and Application 20.0.1923, where a cookie is returned in the response body (OVE-20230524-0017). The CVSS 3.1 vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N, base score 9.1 (CRITICAL). Exploi...

CVE-2025-27664

Vasion Print (formerly PrinterLogic) is vulnerable to Insufficient CSRF Protection (OVE-20230524-0008) in versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 . The vulnerability allows for Cross-Site Request Forgery attacks. Exploitation details or specific exploit links a...

CVE-2025-27640

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.1002 Application 20.0.2614 allows SQL Injection V-2024-012...

CVE-2025-27642

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Unauthenticated Driver Package Editing V-2024-008...

CVE-2025-27648

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.913 Application 20.0.2253 allows Cross Tenant Password Exposure V-2024-003...

CVE-2025-27676

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cross-Site Scripting in Reports V-2023-002...

Vasion Print 安全漏洞

Vasion Print is a SaaS-based, cloud-hosted application from Vasion for managing and deploying printers. A security vulnerability exists in Vasion Print versions prior to 22.0.862 and Application 20.0.2014, which stems from a process list storing plaintext passwords...

CVE-2025-27669

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843, Application 20.0.1923, is affected by CVE-2025-27669 which allows Remote Network Scanning (XSPA) and leads to a Denial of Service. The public description and Red Hat/CNNVD entries confirm affected versions and the nature...

GitLab 15.10 < 17.7.6 / 17.8 < 17.8.4 / 17.9 < 17.9.1 (CVE-2025-0475)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 prior to 17.7.6, 17.8 prior to 17.8.4, and 17.9 prior to 17.9.1. A proxy feature could potentially allow unintended conte...

Amazon Linux 2023 : ecs-service-connect-agent (ALAS2023-2025-850)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-850 advisory. Envoy is a cloud-native high-performance edge/middle/service proxy. In affected versions sendOverloadError is going to assume the active request exists when envoy.loadshedpoints.http1serverabortdispatch...

Oracle Linux 8 : mysql:8.0 (ELSA-2025-1673)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-1673 advisory. mecab 0.996-2.12 - Bump version for 'mysql' module rebuild We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'AppStream' repo -...

FreeBSD : chromium -- multiple security fixes (b09d0b3b-ef6d-11ef-85f3-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the b09d0b3b-ef6d-11ef-85f3-a8a1599412c6 advisory. Chrome Releases reports: This update includes 12 security fixes: Tenable has extracted the...

FreeBSD : chromium -- multiple security fixes (f572b9d1-ef6d-11ef-85f3-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f572b9d1-ef6d-11ef-85f3-a8a1599412c6 advisory. Chrome Releases reports: This update includes 4 security fixes: Tenable has extracted the...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : glibc (SUSE-SU-2025:0582-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0582-1 advisory. - CVE-2025-0395: Fix underallocation of abortmsgs struct bsc1236282 Tenable has extracted the preceding...

FreeBSD : vscode -- multiple vulnerabilities (cbf5d976-656b-4bb6-805f-3af038e2de3e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the cbf5d976-656b-4bb6-805f-3af038e2de3e advisory. VSCode developers report: The update addresses these issues, including a fix for a security...

Azure Linux 3.0 Security Update: shim / shim-unsigned-aarch64 / shim-unsigned-x64 (CVE-2023-40549)

The version of shim / shim-unsigned-aarch64 / shim-unsigned-x64 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-40549 advisory. - An out-of-bounds read flaw was found in Shim due to the lack of...

Azure Linux 3.0 Security Update: shim / shim-unsigned-aarch64 / shim-unsigned-x64 (CVE-2023-40546)

The version of shim / shim-unsigned-aarch64 / shim-unsigned-x64 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-40546 advisory. - A flaw was found in Shim when an error happened while creating a n...

Azure Linux 3.0 Security Update: kernel (CVE-2024-49954)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49954 advisory. - In the Linux kernel, the following vulnerability has been resolved: staticcall: Replace pointless WARNON in...