1777 matches found
CVE-2025-27682
CVE-2025-27682 affects Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735, Application 20.0.1330. Root cause: insecure log permissions. CVSSv3.1 base score 9.8 (CRITICAL); attack vector NETWORK, no user interaction, privileges required NONE, confidentiality/ integrity/ ava...
CVE-2025-27660
Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cross Site Scripting OVE-20230524-0003...
CVE-2025-27667
Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Administrative User Email Enumeration OVE-20230524-0011...
CVE-2025-27655
Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Server-Side Request Forgery: CPA v1 V-2023-009...
CVE-2025-27662
Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Password in URL OVE-20230524-0005...
CVE-2025-27655
Vulnerability CVE-2025-27655 affects Vasion Print (formerly PrinterLogic) prior to Virtual Appliance Host 22.0.862 and Application 20.0.2014, where a Server-Side Request Forgery (SSRF) in the CPA v1 component is reported. The issue is caused by improper handling in CPA v1 that enables SSRF; explo...
CVE-2025-27652
CVE-2025-27652 affects Vasion Print (formerly PrinterLogic) prior to Virtual Appliance Host 22.0.862 and Application 20.0.2014. The vulnerability is Server-Side Request Forgery (SSRF) stemming from the rfIDEAS V-2023-015 component. Public references describe the issue as part of a broader set of ...
CVE-2025-27640
Vasion Print (formerly PrinterLogic) prior to Virtual Appliance Host 22.0.1002 and Application 20.0.2614 contains a SQL Injection vulnerability (CVE-2025-27640). Affected components are the PrinterLogic/Vision Print stack on Virtual Appliance Host versions before 22.0.1002 and Application 20.0.26...
CVE-2025-27662
CVE-2025-27662 affects Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 and Application 20.0.1923, where passwords can be exposed in URLs (OVE-20230524-0005). Root cause: insecure handling of credentials in URL. The CVSSv3.1 baseline is 9.8 (Network, Single, No user int...
CVE-2025-27667
Vulnerability summary: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 and Application 20.0.1923 is exposed to an Administrative User Email Enumeration issue (OVE-20230524-0011). Affected product/version: Vasion Print prior to 22.0.843 / 20.0.1923. Root cause and techn...
CVE-2025-27663
Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Weak Password Encryption / Encoding OVE-20230524-0007...
CVE-2025-27674
Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Hardcoded IdP Key V-2023-006...
CVE-2025-27678
Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Client Remote Code Execution V-2023-001...
CVE-2025-27644
Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Local Privilege Escalation V-2024-007...
CVE-2025-27653
Vasion Print (formerly PrinterLogic) exposes a preauthenticated cross-site scripting (XSS) vulnerability in the badge registration feature for versions prior to Virtual Appliance Host 22.0.862 and Application 20.0.2014 (CVE-2025-27653). The available sources describe the issue as a preauth XSS, b...
CVE-2025-27677
CVE-2025-27677 affects Vasion Print (formerly PrinterLogic) prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923. The issue allows symbolic links for unprivileged file interaction. Multiple sources (NVD, Red Hat advisory, CNNVD) corroborate the vulnerability and describe the affecte...
CVE-2025-26318
hb.exe in TSplus Remote Access before 17.30 2024-10-30 allows remote attackers to retrieve a list of all domain accounts currently connected to the application...
CVE-2025-26318
hb.exe in TSplus Remote Access before 17.30 2024-10-30 allows remote attackers to retrieve a list of all domain accounts currently connected to the application...
