CVE-2025-27674: Use of Hard-coded Cryptographic Key

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Hardcoded IdP Key V-2023-006...

CVE-2025-27662

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Password in URL OVE-20230524-0005...

CVE-2025-27651: Server-Side Request Forgery (SSRF)

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Server-Side Request Forgery: Elatec V-2023-014...

CVE-2025-27661

Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 are vulnerable to a Session Fixation issue. This vulnerability allows an attacker to potentially hijack a user's session. To remediate this risk, users are recommended to update to Vir...

CVE-2025-27640

The Vasion Print (formerly PrinterLogic) SaaS-based, cloud-hosted application for managing and deploying printers is vulnerable to SQL Injection (V-2024-012) in versions prior to Virtual Appliance Host 22.0.1002 and Application 20.0.2614 . The vulnerability stems from improper neutralization of s...

Linux Distros Unpatched Vulnerability : CVE-2024-40966

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tty: add the option to have a tty reject a new ldisc ... and use it to limit the virtual terminals to just NTTY. They are kind of special, and in particular, th...

Linux Distros Unpatched Vulnerability : CVE-2021-47389

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Red Hat Enterprise Linux - kernel: KVM: SVM: fix missing sevdecommission in sevreceivestart Ubuntu Linux - In the Linux kernel, the following vulnerability has...

CVE-2025-27645: Incorrect Authorization

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Insecure Extension Installation by Trusting HTTP Permission Methods on the Server Side V-2024-005...

CVE-2025-27658

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Authentication Bypass OVE-20230524-0001...

CVE-2025-27649

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.893 Application 20.0.2140 allows Incorrect Access Control: PHP V-2023-016...

CVE-2025-27658

Vasion Print (formerly PrinterLogic) is vulnerable to an Authentication Bypass (CWE-288) in versions prior to Virtual Appliance Host 22.0.843 Application 20.0.1923 . This vulnerability allows an attacker to bypass authentication mechanisms, potentially gaining unauthorized access to the SaaS-base...

CVE-2025-27646: Improper Access Control

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.913 Application 20.0.2253 allows Edit User Account Exposure V-2024-001...

CVE-2025-27658: Authentication Bypass Using an Alternate Path or Channel

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Authentication Bypass OVE-20230524-0001...

CVE-2025-27649: Improper Access Control

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.893 Application 20.0.2140 allows Incorrect Access Control: PHP V-2023-016...

CVE-2025-27644

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Local Privilege Escalation V-2024-007...

CVE-2025-27654: Improper Neutralization of Input During Web Page Generation

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Cross Site Scripting XSS V-2023-017...

CVE-2025-27662

Vasion Print (formerly PrinterLogic) is vulnerable to CWE-256: Plaintext Storage of a Password because the application allows passwords to be included in the URL . This vulnerability affects versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 . The impact includes potentia...

CVE-2025-27643: Use of Hard-coded Credentials

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Hardcoded AWS API Key V-2024-006...

CVE-2025-27673: Use of Persistent Cookies Containing Sensitive Information

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cookie Returned in Response Body OVE-20230524-0017...

Linux Distros Unpatched Vulnerability : CVE-2022-48890

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM storvscqueuecommand maps th...