PT-2025-9744 · Unknown · Vasion Print

Name of the Vulnerable Software and Affected Versions: Vasion Print formerly PrinterLogic versions prior to Virtual Appliance Host 22.0.1002 Application 20.0.2614 Description: The issue allows Cross-Site Scripting. Recommendations: For versions prior to Virtual Appliance Host 22.0.1002 Applicatio...

CVE-2025-27660

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cross Site Scripting OVE-20230524-0003...

CVE-2025-27663

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Weak Password Encryption / Encoding OVE-20230524-0007...

CVE-2025-27640

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.1002 Application 20.0.2614 allows SQL Injection V-2024-012...

CVE-2025-27645

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 and Application 20.0.2368 allows insecure extension installation by trusting HTTP permission methods on the server side. This vulnerability, CVE-2025-27645, is reported with a CVSS v3.1 base score of 9.8 (NETWORK, HIGH im...

CVE-2025-27651

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 and Application 20.0.2014 are affected by CVE-2025-27651 due to a Server-Side Request Forgery (SSRF) in the Elatec V-2023-014 component. The issue is documented with a CVSS v3.1 vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A...

CVE-2025-27660

Vulnerability CVE-2025-27660 affects Vasion Print (formerly PrinterLogic) prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923, allowing Cross Site Scripting (XSS) via OVE-20230524-0003. The connected documents confirm the affected product and the XSS outcome but do not provide expl...

CVE-2025-27642

CVE-2025-27642 concerns Vasion Print (formerly PrinterLogic) prior to the Virtual Appliance Host 22.0.933 / Application 20.0.2368. The documented issue is an unauthenticated driver package editing vulnerability, allowing modification without authentication. Several connected sources corroborate t...

CVE-2025-27650

CVE-2025-27650 concerns Vasion Print (formerly PrinterLogic) prior to Virtual Appliance Host 22.0.862 and Application 20.0.2014, where private keys are present in the Docker overlay, exposing sensitive material. The CVSS 3.1 base metrics indicate high impact on confidentiality, integrity, and ava...

CVE-2025-27657

CVE-2025-27657 affects Vasion Print (formerly PrinterLogic) SaaS/Virtual Appliance Host prior to version 22.0.843 and Application 20.0.1923. The connected documents consistently describe it as allowing Remote Code Execution. The root cause is not elaborated beyond the RCE phrasing in multiple sou...

CVE-2025-27648

Vulnerability CVE-2025-27648 affects Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.913 and Application 20.0.2253, enabling cross-tenant password exposure. The CVSSv3.1 base score is 9.8 (CRITICAL) with NETWORK attack vector, no user interaction, and high impact to confid...

CVE-2025-27653

Vasion Print (formerly PrinterLogic) exposes a preauthenticated cross-site scripting (XSS) vulnerability in the badge registration feature for versions prior to Virtual Appliance Host 22.0.862 and Application 20.0.2014 (CVE-2025-27653). The available sources describe the issue as a preauth XSS, b...

CVE-2025-27654

CVE-2025-27654 affects Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862, Application 20.0.2014, with Cross Site Scripting (XSS) identified. The CVSSv3.1 base score is 6.1 (MEDIUM) with network attack vector, no privileges required, user interaction required, and changed...

CVE-2025-27669

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843, Application 20.0.1923, is affected by CVE-2025-27669 which allows Remote Network Scanning (XSPA) and leads to a Denial of Service. The public description and Red Hat/CNNVD entries confirm affected versions and the nature...

CVE-2025-27672

CVE-2025-27672 affects Vasion Print (formerly PrinterLogic) in the Virtual Appliance Host prior to 22.0.843 and Application 20.0.1923. The vulnerability is an OAuth security bypass (OVE-20230524-0016) that, per the NVD metrics, has a high impact on confidentiality, integrity, and availability wit...

CVE-2025-27670

CVE-2025-27670 affects Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 and Application 20.0.1923. Root cause: insufficient signature validation (OVE-20230524-0014). CVSS 3.1: Network, Low attack complexity, Privileges None, User Interaction None, with Confidentiality/I...

CVE-2025-27677

CVE-2025-27677 affects Vasion Print (formerly PrinterLogic) prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923. The issue allows symbolic links for unprivileged file interaction. Multiple sources (NVD, Red Hat advisory, CNNVD) corroborate the vulnerability and describe the affecte...

Linux Distros Unpatched Vulnerability : CVE-2013-7291

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - memcached before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service crash via a request that triggers an unbounded key...

CVE-2025-27585

A stored cross-site scripting XSS vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR v1.0.118 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Print Name parameter at /rest/staffResource/update...

Serosoft Solutions Academia Student Information System EagleR 跨站脚本漏洞

Serosoft Solutions Academia Student Information System EagleR is a student information system from Serosoft Solutions, India. A security vulnerability exists in Serosoft Solutions Academia Student Information System EagleR v1.0.118, which stems from a stored cross-site scripting vulnerability in...