CVE-2025-34204

Vasion Print formerly PrinterLogic Virtual Appliance Host and Application VA and SaaS deployments contains multiple Docker containers that run primary application processes for example PHP workers, Node.js servers and custom binaries as the root user. This increases the blast radius of a containe...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: octo-sts, lvm-driver, docker-credential-ecr-login, git-lfs, vault-benchmark, bank-vaults, shfmt, confluent-common-docker, kube-vip-cloud-provider, kube-vip, blobfuse2, gostatsd, checksec, k8sgpt-operator, dagdotdev, newrelic-nri-statsd, sftpgo-plugin-pubsub, vexctl,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: octo-sts, lvm-driver, docker-credential-ecr-login, git-lfs, vault-benchmark, bank-vaults, shfmt, confluent-common-docker, kube-vip-cloud-provider, kube-vip, blobfuse2, gostatsd, checksec, k8sgpt-operator, dagdotdev, newrelic-nri-statsd, sftpgo-plugin-pubsub, vexctl,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-12.9, prometheus-bind-exporter, linkerd2-proxy-init, vault-benchmark, sftpgo-plugin-pubsub, docker-credential-ecr-login, etcd-fips, knative-serving, addon-resizer, newrelic-nri-statsd, hivemind, knative-eventing-fips, modelmesh-runtime-adapter,...

CVE-2023-49565

The cbismanager Podman container is vulnerable to remote command execution via the /api/plugins endpoint. Improper sanitization of the HTTP Headers X-FILENAME, X-PAGE, and X-FIELD allows for command injection. These headers are directly utilized within the subprocess.Popen Python function without...

CVE-2025-34206

Vasion Print formerly PrinterLogic Virtual Appliance Host and Application VA and SaaS deployments mount host configuration and secret material under /var/www/efsstorage into many Docker containers with overly-permissive filesystem permissions. Files such as secrets.env, GPG-encrypted blobs in...

CVE-2025-34202

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to 25.2.169 and Application prior to 25.2.1518 VA and SaaS deployments expose Docker internal networks in a way that allows an attacker on the same external L2 segment — or an attacker able to add routes using the appliance as a...

CVE-2025-34202

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to 25.2.169 and Application prior to 25.2.1518 VA and SaaS deployments expose Docker internal networks in a way that allows an attacker on the same external L2 segment — or an attacker able to add routes using the appliance as a...

CVE-2025-34202

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to 25.2.169 and Application prior to 25.2.1518 VA and SaaS deployments expose Docker internal networks in a way that allows an attacker on the same external L2 segment — or an attacker able to add routes using the appliance as a...

CVE-2025-34206 Vasion Print (formerly PrinterLogic) Insecure Shared Storage Permissions

Vasion Print formerly PrinterLogic Virtual Appliance Host and Application VA and SaaS deployments mount host configuration and secret material under /var/www/efsstorage into many Docker containers with overly-permissive filesystem permissions. Files such as secrets.env, GPG-encrypted blobs in...

CVE-2025-34201 Vasion Print (formerly PrinterLogic) Lack of Network Segmentation Between Docker Instances

Vasion Print formerly PrinterLogic Virtual Appliance Host and Application VA and SaaS deployments run many Docker containers on shared internal networks without firewalling or segmentation between instances. A compromise of any single container allows direct access to internal services HTTP, Redi...

CVE-2025-34204

Summary: CVE-2025-34204 affects Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA and SaaS deployments). Multiple Docker containers run core processes (e.g., PHP workers, Node.js servers, custom binaries) as root, increasing blast radius if a container is breached an...

CVE-2025-34203

Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 22.0.1002 and Application versions prior to 20.0.2614 VA and SaaS deployments contain multiple Docker containers that include outdated, end-of-life, unsupported, or otherwise vulnerable third-party components examples:...

CVE-2025-34203

Vasion Print Virtual Appliance Host <22.0.1002 and Vasion Print Application

Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-t

This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container fixes the following issues: This...

SUSE-SU-2025:03278-1 Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container

This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container fixes the following issues: This...

OESA-2025-2297 buildah security update

The package provides a command line tool which can be used to create a working container from scratch or create a working container from an image as a starting point mount/umount a working container's root file system for manipulation save container's root file system layer to create a new image...

PT-2025-38600

Name of the Vulnerable Software and Affected Versions Vasion Print formerly PrinterLogic Virtual Appliance Host and Application VA and SaaS deployments affected versions not specified Description Vasion Print formerly PrinterLogic utilizes Docker containers on shared internal networks lacking...

PT-2025-38601

Name of the Vulnerable Software and Affected Versions Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 22.0.1002 Vasion Print formerly PrinterLogic Application versions prior to 20.0.2614 Description Vasion Print formerly PrinterLogic Virtual Appliance Host and...

CVE-2025-22872 affecting package nvidia-container-toolkit for versions less than 1.17.8-2

CVE-2025-22872 affecting package nvidia-container-toolkit for versions less than 1.17.8-2. A patched version of the package is available...