Lucene search
K

11 matches found

CNNVD
CNNVD
added 2025/11/20 12:0 a.m.3 views

SonicWALL Email Security 安全漏洞

SonicWALL Email Security is an email security system from SonicWALL USA. A security vulnerability exists in SonicWall Email Security that originates from the download of an unverified signed root filesystem image, which could lead to the execution of arbitrary code...

9.8CVSS7.1AI score0.00168EPSS
Exploits0References1
NVD
NVD
added 2025/09/29 9:15 p.m.10 views

CVE-2025-34212

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to version 22.0.843 and Application prior to version 20.0.1923 VA/SaaS deployments possess CI/CD weaknesses: the build pulls an unverified third-party image, downloads the VirtualBox Extension Pack over plain HTTP without signature...

9.8CVSS0.00627EPSS
Exploits1References4
OSV
OSV
added 2025/09/29 9:15 p.m.7 views

CVE-2025-34212

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to version 22.0.843 and Application prior to version 20.0.1923 VA/SaaS deployments possess CI/CD weaknesses: the build pulls an unverified third-party image, downloads the VirtualBox Extension Pack over plain HTTP without signature...

9.8CVSS6.4AI score0.00627EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2025/09/29 8:36 p.m.6 views

CVE-2025-34212

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to version 22.0.843 and Application prior to version 20.0.1923 VA/SaaS deployments possess CI/CD weaknesses: the build pulls an unverified third-party image, downloads the VirtualBox Extension Pack over plain HTTP without signature...

9.8CVSS6.5AI score0.00627EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/09/29 8:36 p.m.5 views

CVE-2025-34212 Vasion Print (formerly PrinterLogic) Insecure Build Pipeline

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to version 22.0.843 and Application prior to version 20.0.1923 VA/SaaS deployments possess CI/CD weaknesses: the build pulls an unverified third-party image, downloads the VirtualBox Extension Pack over plain HTTP without signature...

8.7CVSS8.1AI score0.00627EPSS
Exploits1References4
Cvelist
Cvelist
added 2025/09/29 8:36 p.m.10 views

CVE-2025-34212 Vasion Print (formerly PrinterLogic) Insecure Build Pipeline

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to version 22.0.843 and Application prior to version 20.0.1923 VA/SaaS deployments possess CI/CD weaknesses: the build pulls an unverified third-party image, downloads the VirtualBox Extension Pack over plain HTTP without signature...

8.7CVSS0.00627EPSS
Exploits1References4
CVE
CVE
added 2025/09/29 8:36 p.m.16 views

CVE-2025-34212

CVE-2025-34212 involves Vasion Print (Virtual Appliance Host and App) with CI/CD weaknesses in VA/SaaS deployments prior to versions 22.0.843 and 20.0.1923. The build process pulls an unverified third‑party image, downloads the VirtualBox Extension Pack over HTTP without signature validation, and...

9.8CVSS8.1AI score0.00627EPSS
Exploits1References4Affected Software2
CNNVD
CNNVD
added 2025/09/29 12:0 a.m.5 views

Vasion Print Virtual Appliance Host 安全漏洞

Vasion Print Virtual Appliance Host is a print management software from Vasion USA. A security vulnerability exists in Vasion Print Virtual Appliance Host versions prior to 22.0.843 that stems from the build process using an unverified third-party image, which could lead to supply chain attacks,...

9.8CVSS7.7AI score0.00627EPSS
Exploits1References4
SUSE CVE
SUSE CVE
added 2024/07/10 3:36 a.m.2 views

SUSE CVE-2024-6564

Buffer overflow in "rcardevinit" due to using due to using untrusted data rcarimagenumber as a loop counter before verifying it against RCARMAXBL3XIMAGE. This could lead to a full bypass of secure boot...

6.7CVSS7.2AI score0.00223EPSS
Exploits0References3
OSV
OSV
added 2023/09/13 5:15 p.m.4 views

CVE-2023-20236

A vulnerability in the iPXE boot function of Cisco IOS XR software could allow an authenticated, local attacker to install an unverified software image on an affected device. This vulnerability is due to insufficient image verification. An attacker could exploit this vulnerability by manipulating...

7.8CVSS5.8AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2022/10/27 12:0 a.m.4 views

PT-2022-6954 · Cisco · Cisco Ios Xr

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR affected versions not specified Description: The issue is related to insufficient image verification in the iPXE boot function of Cisco IOS XR software. This could allow an authenticated, local attacker to install an unverified...

7.8CVSS7.1AI score0.00095EPSS
Exploits0References6
Rows per page
Query Builder