CVE-2025-68967

CVE-2025-68967 affects Huawei HarmonyOS print module, with root cause described as improper permission control. Public details from CNNVD reference Huawei HarmonyOS 6.0.0 and indicate that exploitation could affect service confidentiality. The Red Hat, CIRCL, NVD, and other entries corroborate th...

CVE-2025-68967

Vulnerability of improper permission control in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An improper privilege control vulnerability exists in the Huawei HarmonyOS printing module, which can be exploited by an attacker to compromise confidentiali...

CVE-2025-68967: Undefined Security Weakness

Vulnerability of improper permission control in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

The vulnerability of the Vasion Print Virtual Appliance Host and Print Application software for management, control, and process automation lies in the presence of unused code, which allows attackers to exploit their privileges and execute arbitrary code.

The vulnerability of the Vasion Print Virtual Appliance Host and Print Application software for process management, control, and organization is related to the presence of unused code. Exploiting this vulnerability can allow a remote attacker to enhance their privileges and execute arbitrary code...

MiracleLinux 3 : cups-1.3.7-11.6.0.1.AXS3 (AXSA:2010-142:01)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2010-142:01 advisory. The Common UNIX Printing System provides a portable printing layer for UNIX operating systems. It has been developed by Easy Software Products to promote a...

The vulnerability of the Vasion Print Virtual Appliance Host and Print Application software for managing, controlling, and organizing printing processes allows attackers to execute arbitrary code by enabling unlimited loading of dangerous files.

The vulnerability of the Vasion Print Virtual Appliance Host and Print Application software for process management, control, and organization is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2026-2572

Vulnerability of improper permission control in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

Vasion Print Virtual Appliance Host and Print Application software control systems are vulnerable due to a vulnerability present in the borrowed components. This vulnerability allows attackers to execute arbitrary code.

The vulnerabilities of the Vasion Print Virtual Appliance Host and Print Application software management, control, and process automation systems are related to the presence of vulnerabilities in the borrowed components. Exploiting these vulnerabilities allows a remote attacker to execute arbitra...

The vulnerability of the software for managing, controlling, and organizing printing processes in Vasion Print Virtual Appliance Host and Print Application, due to insufficient spatial separation, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Vasion Print Virtual Appliance Host and Print Application software for process management, control, and organization is related to insufficient spatial separation. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the software for managing, controlling, and organizing printing processes in Vasion Print Virtual Appliance Host and Print Application lies in the lack of authentication procedures, allowing attackers to execute arbitrary code.

The vulnerabilities of the Vasion Print Virtual Appliance Host and Print Application software for process management, control, and organization are related to deficiencies in authentication procedures. Exploiting these vulnerabilities could allow a malicious actor to execute arbitrary code remote...

CVE-2025-61546

There is an issue on the /PSP/appNET/Store/CartV12.aspx/GetUnitPrice endpoint in edu Business Solutions Print Shop Pro WebDesk version 18.34 fixed in 19.69 that enables remote attacker to create financial discrepancies by purchasing items with a negative quantity. This vulnerability is possible d...

CVE-2025-61550

Cross-Site Scripting XSS is present on the ctl00Content01fieldValue parameters on the /psp/appNet/TemplateOrder/TemplatePreview.aspx endpoint in edu Business Solutions Print Shop Pro WebDesk version 18.34 fixed in 19.69. User-supplied input is stored and later rendered in HTML pages without prope...

CVE-2025-61549

Cross-Site Scripting XSS is present on the LoginID parameter on the /PSP/app/web/reg/regdisplay.asp endpoint in edu Business Solutions Print Shop Pro WebDesk version 18.34 fixed in 19.76. Unsanitized user input is reflected in HTTP responses without proper HTML encoding or escaping. This allows...

CVE-2025-61547

Cross-Site Request Forgery CSRF is present on all functions in edu Business Solutions Print Shop Pro WebDesk version 18.34 fixed in 19.76. The application does not implement proper CSRF tokens or other other protective measures, allowing a remote attacker to trick authenticated users into...

CVE-2022-35167

Printix Cloud Print Management v1.3.1149.0 for Windows was discovered to contain insecure permissions...

CVE-2017-18528

The pdf-print plugin before 1.9.4 for WordPress has multiple XSS issues...

CVE-2019-2654

Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite subcomponent: Print Server. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker...

CVE-2019-2672

Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite subcomponent: Print Server. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2019-2551

Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite subcomponent: Print Server. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker...