CVE-2025-27677

CVE-2025-27677 affects Vasion Print (formerly PrinterLogic) prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923. The issue allows symbolic links for unprivileged file interaction. Multiple sources (NVD, Red Hat advisory, CNNVD) corroborate the vulnerability and describe the affecte...

CVE-2025-27645

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 and Application 20.0.2368 allows insecure extension installation by trusting HTTP permission methods on the server side. This vulnerability, CVE-2025-27645, is reported with a CVSS v3.1 base score of 9.8 (NETWORK, HIGH im...

CVE-2025-27646

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.913 Application 20.0.2253 allows Edit User Account Exposure V-2024-001...

PT-2025-9744 · Unknown · Vasion Print

Name of the Vulnerable Software and Affected Versions: Vasion Print formerly PrinterLogic versions prior to Virtual Appliance Host 22.0.1002 Application 20.0.2614 Description: The issue allows Cross-Site Scripting. Recommendations: For versions prior to Virtual Appliance Host 22.0.1002 Applicatio...

CVE-2025-27648

Vulnerability CVE-2025-27648 affects Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.913 and Application 20.0.2253, enabling cross-tenant password exposure. The CVSSv3.1 base score is 9.8 (CRITICAL) with NETWORK attack vector, no user interaction, and high impact to confid...

CVE-2025-27660

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cross Site Scripting OVE-20230524-0003...

CVE-2025-27663

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Weak Password Encryption / Encoding OVE-20230524-0007...

CVE-2025-27640

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.1002 Application 20.0.2614 allows SQL Injection V-2024-012...

CVE-2025-27681

CVE-2025-27681 affects Vasion Print (formerly PrinterLogic) prior to Virtual Appliance Host 1.0.735 Application 20.0.1330. The root cause is described as mishandling of Client Inter-process Security V-2022-004, leading to a critical impact across confidentiality, integrity, and availability. CVSS...

CVE-2025-27670

CVE-2025-27670 affects Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 and Application 20.0.1923. Root cause: insufficient signature validation (OVE-20230524-0014). CVSS 3.1: Network, Low attack complexity, Privileges None, User Interaction None, with Confidentiality/I...

Vasion Print 代码问题漏洞

Vasion Print is a SaaS-based, cloud-hosted application from Vasion for managing and deploying printers. A security vulnerability exists in Vasion Print versions prior to 1.0.735 Application 20.0.1330 that stems from allowing the upload of dangerous types of driver files...

CVE-2025-27660

Vulnerability CVE-2025-27660 affects Vasion Print (formerly PrinterLogic) prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923, allowing Cross Site Scripting (XSS) via OVE-20230524-0003. The connected documents confirm the affected product and the XSS outcome but do not provide expl...

Vasion Print 访问控制错误漏洞

Vasion Print is a SaaS-based, cloud-hosted application from Vasion for managing and deploying printers. A security vulnerability exists in Vasion Print that stems from improper PHP access control...

CVE-2025-27651

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 and Application 20.0.2014 are affected by CVE-2025-27651 due to a Server-Side Request Forgery (SSRF) in the Elatec V-2023-014 component. The issue is documented with a CVSS v3.1 vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A...

CVE-2025-27672

CVE-2025-27672 affects Vasion Print (formerly PrinterLogic) in the Virtual Appliance Host prior to 22.0.843 and Application 20.0.1923. The vulnerability is an OAuth security bypass (OVE-20230524-0016) that, per the NVD metrics, has a high impact on confidentiality, integrity, and availability wit...

Linux Distros Unpatched Vulnerability : CVE-2013-7291

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - memcached before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service crash via a request that triggers an unbounded key...

CVE-2025-27585

A stored cross-site scripting XSS vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR v1.0.118 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Print Name parameter at /rest/staffResource/update...

Serosoft Solutions Academia Student Information System EagleR 跨站脚本漏洞

Serosoft Solutions Academia Student Information System EagleR is a student information system from Serosoft Solutions, India. A security vulnerability exists in Serosoft Solutions Academia Student Information System EagleR v1.0.118, which stems from a stored cross-site scripting vulnerability in...

Advisory ROSA-SA-2025-2735

Software: cups 2.2.6 OS: ROSA Virtualization 3.0 packageevrstring: cups-2.2.6-60.rv30 CVE-ID: CVE-2023-32360 BDU-ID: 2023-07653 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the CUPS print server is related to flaws in the authentication procedure. Exploitation of the vulnerability could allow a...

DEBIAN-CVE-2024-49570

In the Linux kernel, the following vulnerability has been resolved: drm/xe/tracing: Fix a potential TPprintk UAF The commit afd2627f727b "tracing: Check "%s" dereference via the field and not the TPprintk format" exposes potential UAFs in the xebomove trace event. Fix those by avoiding...