Lucene search
+L

49 matches found

CVE
CVE
•added 2025/03/05 12:00 a.m.•115 views

CVE-2025-27637

Vasion Print (formerly PrinterLogic ) is vulnerable to Cross-Site Scripting (XSS) , identified as V-2024-016 , in versions prior to Virtual Appliance Host 22.0.1002 and Application 20.0.2614 . An attacker exploiting this vulnerability could execute malicious scripts in the context of a user's web...

6.1CVSS6.6AI score0.00525EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•112 views

CVE-2025-27641

Vasion Print (formerly PrinterLogic) is vulnerable to an authentication bypass issue in versions prior to Virtual Appliance Host 22.0.951 and Application 20.0.2368 . The vulnerability stems from the presence of unauthenticated APIs for Single-Sign On (SSO), specifically related to V-2024-009 . Th...

9.8CVSS7.2AI score0.009EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•108 views

CVE-2025-27672

Vasion Print (formerly PrinterLogic ) is vulnerable to an OAUTH Security Bypass (OVE-20230524-0016) in versions prior to Virtual Appliance Host 22.0.843 Application 20.0.1923 . The vulnerability allows for improper authentication within the SaaS-based, cloud-hosted application used for managing a...

7.2AI score0.00634EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•107 views

CVE-2025-27643

Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.933 Application 20.0.2368 are vulnerable to a security flaw involving a hardcoded AWS API key . This issue allows for the exposure of sensitive credentials. To remediate this vulnerability, users should update to V...

9.8CVSS7.2AI score0.009EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•104 views

CVE-2025-27676

Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.843 Application 20.0.1923 are vulnerable to Cross-Site Scripting (XSS) within the Reports V-2023-002 component. The vulnerability is caused by improper neutralization of input during web page generation. An attacke...

6.1CVSS6.6AI score0.00417EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•98 views

CVE-2025-27674

Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.843 Application 20.0.1923 are vulnerable to the use of a hardcoded IdP key (V-2023-006). This flaw allows for potential unauthorized access or authentication issues due to the static nature of the cryptographic key...

9.8CVSS7.2AI score0.00707EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•97 views

CVE-2025-27639

Vasion Print (formerly PrinterLogic ) versions prior to Virtual Appliance Host 22.0.1002 and Application 20.0.2614 are susceptible to a Privilege Escalation vulnerability (referenced as V-2024-015 ). This flaw stems from Improper Privilege Management , potentially allowing an attacker to gain ele...

8.8CVSS7.2AI score0.00776EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•94 views

CVE-2025-27642

The Vasion Print (formerly PrinterLogic) application suffers from a critical vulnerability, identified as V-2024-008 , which allows unauthenticated driver package editing . This flaw exists in versions prior to Virtual Appliance Host 22.0.933 Application 20.0.2368 . An attacker could exploit this...

9.8CVSS7.2AI score0.009EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•92 views

CVE-2025-27644

Vasion Print (formerly PrinterLogic) is vulnerable to Local Privilege Escalation in versions prior to Virtual Appliance Host 22.0.933 and Application 20.0.2368 . The vulnerability is categorized under CWE-269: Improper Privilege Management . To remediate this issue, users should update to Virtual...

7.8CVSS7.2AI score0.00221EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•92 views

CVE-2025-27649

Vasion Print (formerly PrinterLogic ) versions prior to Virtual Appliance Host 22.0.893 Application 20.0.2140 are vulnerable to an Incorrect Access Control flaw (PHP V-2023-016). This vulnerability stems from improper PHP access control within the SaaS-based, cloud-hosted application used for man...

9.8CVSS7.3AI score0.009EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•92 views

CVE-2025-27663

The SaaS-based, cloud-hosted application Vasion Print (formerly PrinterLogic) is impacted by a vulnerability involving weak password encryption or encoding (OVE-20230524-0007). This flaw affects versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 . The root cause is identi...

9.8CVSS7.2AI score0.00382EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•91 views

CVE-2025-27653

Vasion Print (formerly PrinterLogic) is vulnerable to a Preauthenticated Cross-Site Scripting (XSS) flaw in the Badge Registration component. This vulnerability affects versions prior to Virtual Appliance Host 22.0.862 Application 20.0.2014 . An unauthenticated attacker could potentially execute ...

6.1CVSS6.8AI score0.00525EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•90 views

CVE-2025-27670

Vasion Print (formerly PrinterLogic) is affected by a vulnerability involving insufficient signature validation (CVE-2025-27670). The flaw exists in versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 . This vulnerability allows for potential unauthorized actions due to im...

9.8CVSS7.2AI score0.00418EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•90 views

CVE-2025-27678

Vasion Print (formerly PrinterLogic) is vulnerable to Client Remote Code Execution (V-2023-001) in versions prior to Virtual Appliance Host 22.0.843 Application 20.0.1923 . The root cause is identified as an improper control of generation of code (CWE-94), which may allow an attacker to execute a...

9.8CVSS7.9AI score0.01311EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•89 views

CVE-2025-27638

Vasion Print (formerly PrinterLogic ) versions prior to Virtual Appliance Host 22.0.1002 and Application 20.0.2614 are susceptible to a hardcoded password vulnerability (V-2024-013). This security flaw allows for potential unauthorized access, as the software uses a static, hardcoded credential f...

9.8CVSS7.2AI score0.009EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•89 views

CVE-2025-27659

Vasion Print (formerly PrinterLogic), a cloud-hosted application for managing and deploying printers, is vulnerable to SQL Injection (CVE-2025-27659). This flaw affects versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 . An attacker exploiting this vulnerability could pe...

9.8CVSS8.5AI score0.00738EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•89 views

CVE-2025-27662

Vasion Print (formerly PrinterLogic) is vulnerable to CWE-256: Plaintext Storage of a Password because the application allows passwords to be included in the URL . This vulnerability affects versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 . The impact includes potentia...

9.8CVSS7.2AI score0.00618EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•89 views

CVE-2025-27677

Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 are vulnerable to Symbolic Links For Unprivileged File Interaction (V-2022-002). This flaw arises from the use of symbolic links that can lead to unauthorized file interactions by unpr...

9.8CVSS7.2AI score0.00707EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•89 views

CVE-2025-27683

Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 1.0.735 Application 20.0.1330 are vulnerable to Driver Unrestricted Upload of File with Dangerous Type (V-2022-006). This flaw allows an attacker to upload dangerous types of driver files, which could lead to significan...

8.8CVSS7.2AI score0.00734EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•88 views

CVE-2025-27657

Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 are vulnerable to Remote Code Execution (RCE) . The root cause involves improper control of generation of code (CWE-94), which allows an attacker to execute arbitrary commands on the s...

9.8CVSS7.9AI score0.0169EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•88 views

CVE-2025-27658

Vasion Print (formerly PrinterLogic) is vulnerable to an Authentication Bypass (CWE-288) in versions prior to Virtual Appliance Host 22.0.843 Application 20.0.1923 . This vulnerability allows an attacker to bypass authentication mechanisms, potentially gaining unauthorized access to the SaaS-base...

9.8CVSS7.2AI score0.00906EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•88 views

CVE-2025-27682

The Vasion Print (formerly PrinterLogic) application is vulnerable to Insecure Log Permissions (V-2022-005) in versions prior to Virtual Appliance Host 1.0.735 Application 20.0.1330 . The root cause is an incorrect logging permission configuration. This vulnerability can lead to unauthorized acce...

9.8CVSS7.2AI score0.00698EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•87 views

CVE-2025-27645

Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.933 Application 20.0.2368 are vulnerable to Insecure Extension Installation (V-2024-005). The root cause is the software's tendency to trust HTTP permission methods on the server side, which can lead to the unautho...

9.8CVSS7.2AI score0.009EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•87 views

CVE-2025-27654

Vasion Print (formerly PrinterLogic ) is vulnerable to Cross-Site Scripting (XSS) (V-2023-017) in versions prior to Virtual Appliance Host 22.0.862 and Application 20.0.2014 . An attacker could exploit this vulnerability to execute malicious scripts in the context of the user's session. To remedi...

6.1CVSS6.3AI score0.00525EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•87 views

CVE-2025-27665

Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 are susceptible to a vulnerability involving insufficient antivirus protection . This security flaw could allow drivers to contain known malicious code, specifically identified as OVE-...

7.4AI score0.00668EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•87 views

CVE-2025-27675

The Vasion Print (formerly PrinterLogic) SaaS-based, cloud-hosted application for managing and deploying printers is vulnerable to a flaw in its OpenID implementation (specifically V-2023-004 ). This vulnerability affects versions prior to Virtual Appliance Host 22.0.843 Application 20.0.1923 . T...

9.8CVSS7.2AI score0.00764EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•87 views

CVE-2025-27681

Vasion Print (formerly PrinterLogic ) is vulnerable in versions prior to Virtual Appliance Host 1.0.735 Application 20.0.1330 due to the mishandling of Client Inter-process Security (specifically V-2022-004 ). This flaw is characterized as Client-Side Enforcement of Server-Side Security (CWE-602)...

9.8CVSS7.2AI score0.00755EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•86 views

CVE-2025-27679

Vasion Print (formerly PrinterLogic ) versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 are vulnerable to Cross-Site Scripting (XSS) . The flaw resides in the Badge Registration feature (V-2023-005) due to the improper neutralization of input during web page generation. ...

6.1CVSS6.6AI score0.00398EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•84 views

CVE-2025-27652

Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.862 Application 20.0.2014 are vulnerable to Server-Side Request Forgery (SSRF) . The root cause lies in the rfIDEAS component (rfIDEAS V-2023-015). Exploitation of this vulnerability may allow an attacker to make u...

9.8CVSS7.2AI score0.009EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•84 views

CVE-2025-27655

Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.862 and Application 20.0.2014 are vulnerable to Server-Side Request Forgery (SSRF) . The root cause lies in the CPA v1 component (V-2023-009). This vulnerability allows an attacker to trigger the server to make una...

9.8CVSS7.2AI score0.009EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•84 views

CVE-2025-27667

Vasion Print (formerly PrinterLogic), a SaaS-based application for managing and deploying printers, is vulnerable to Administrative User Email Enumeration in versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 . The underlying cause is an Observable Discrepancy (CWE-203) t...

9.8CVSS7.2AI score0.00668EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•83 views

CVE-2025-27640

The Vasion Print (formerly PrinterLogic) SaaS-based, cloud-hosted application for managing and deploying printers is vulnerable to SQL Injection (V-2024-012) in versions prior to Virtual Appliance Host 22.0.1002 and Application 20.0.2614 . The vulnerability stems from improper neutralization of s...

9.8CVSS8.5AI score0.00738EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•83 views

CVE-2025-27646

Vasion Print (formerly PrinterLogic) is vulnerable to an Improper Access Control issue in versions prior to Virtual Appliance Host 22.0.913 Application 20.0.2253 . This vulnerability allows for Edit User Account Exposure (V-2024-001), potentially leading to the disclosure of user account informat...

9.8CVSS7.2AI score0.009EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•83 views

CVE-2025-27656

Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.862 and Application 20.0.2014 are vulnerable to Password Stored in Process List (V-2023-011). The root cause is that the process list stores passwords in plaintext , which could allow unauthorized disclosure of cre...

9.8CVSS7AI score0.009EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•83 views

CVE-2025-27669

Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 are vulnerable to Remote Network Scanning (XSPA) and Denial of Service (DoS) attacks. The root cause is identified as Uncontrolled Resource Consumption (CWE-400 ). An attacker could ex...

7.5CVSS7.3AI score0.00545EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•83 views

CVE-2025-27671

Vasion Print (formerly PrinterLogic) is vulnerable to Device Impersonation (CVE-2025-27671) due to a device emulation issue . This vulnerability affects versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 . Successful exploitation can lead to Authentication Bypass by Spoof...

9.8CVSS7.2AI score0.00618EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•82 views

CVE-2025-27673

Vasion Print (formerly PrinterLogic) is affected by a vulnerability where it allows a Cookie Returned in Response Body (OVE-20230524-0017). This issue impacts versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 . The vulnerability is associated with CWE-539 , involving the...

9.1CVSS7.2AI score0.00545EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•81 views

CVE-2025-27666

The Vasion Print (formerly PrinterLogic) SaaS-based cloud-hosted application is vulnerable to Insufficient Authorization Checks in versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 . This vulnerability, tracked as OVE-20230524-0010 , allows for unauthorized actions due t...

9.8CVSS7.2AI score0.00618EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•81 views

CVE-2025-27680

Vasion Print (formerly PrinterLogic) is vulnerable in versions prior to Virtual Appliance Host 1.0.750 Application 20.0.1442 . The flaw involves an insecure firmware image caused by insufficient verification of data authenticity (CWE-345). This vulnerability allows for the potential loading of un...

9.1CVSS7.2AI score0.00319EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•81 views

CVE-2025-27684

Vasion Print (formerly PrinterLogic ) versions prior to Virtual Appliance Host 1.0.735 Application 20.0.1330 are vulnerable to a security flaw where a debug bundle contains sensitive data (CWE-215). This vulnerability allows for the potential disclosure of sensitive information. While a proof-of-...

7.5CVSS7.2AI score0.00594EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•80 views

CVE-2025-27650

Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.862 and Application 20.0.2014 are vulnerable to a secret disclosure issue. The root cause is the inclusion of private keys in the Docker overlay (V-2023-013), which could lead to the compromise of sensitive credent...

9.8CVSS7.2AI score0.009EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•80 views

CVE-2025-27685

Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 1.0.735 Application 20.0.1330 are vulnerable to a security flaw where a configuration file contains a CA and private key . This sensitive information is stored insecurely, potentially leading to unauthorized access or d...

7.5CVSS7.2AI score0.00384EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•78 views

CVE-2025-27647

Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.913 Application 20.0.2253 are vulnerable to a security flaw that allows the addition of partial admin users without authentication . This vulnerability (identified as V-2024-002) stems from a missing authentication...

9.8CVSS7.2AI score0.01043EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•77 views

CVE-2025-27648

Vasion Print (formerly PrinterLogic) is affected by CVE-2025-27648 , a vulnerability involving Cross Tenant Password Exposure (V-2024-003). This issue impacts versions prior to Virtual Appliance Host 22.0.913 Application 20.0.2253 . The vulnerability stems from insufficiently protected credential...

9.8CVSS7.2AI score0.009EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•76 views

CVE-2025-27664

Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 are vulnerable to Insufficient CSRF Protection (OVE-20230524-0008). This vulnerability allows for unauthorized actions performed via a third-party website. To remediate this issue, use...

8.8CVSS7.2AI score0.00281EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•75 views

CVE-2025-27651

Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.862 and Application 20.0.2014 are vulnerable to Server-Side Request Forgery (SSRF) . The root cause is identified as an issue within the Elatec component (Elatec V-2023-014). This vulnerability allows an attacker t...

9.8CVSS7.2AI score0.009EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•75 views

CVE-2025-27661

Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 are vulnerable to a Session Fixation issue. This vulnerability allows an attacker to potentially hijack a user's session. To remediate this risk, users are recommended to update to Vir...

9.1CVSS7.2AI score0.00517EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•74 views

CVE-2025-27660

Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 are vulnerable to Cross Site Scripting (XSS). This vulnerability allows an attacker to execute malicious scripts in a user's browser. To resolve this issue, it is recommended to update...

5.4CVSS6.8AI score0.0039EPSS
Save
CVE
CVE
•added 2025/03/05 12:00 a.m.•74 views

CVE-2025-27668

Vasion Print (formerly PrinterLogic) is affected by a vulnerability allowing Arbitrary Content Inclusion via Iframe (CVE-2025-27668). This issue exists in versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 . The flaw is categorized as CWE-829 , involving the inclusion of ...

9.8CVSS7.2AI score0.00668EPSS
Save