Latest CVE Feed
-
9.8
CRITICALCVE-2025-27650
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Private Keys in Docker Overlay V-2023-013.... Read more
- Published: Mar. 05, 2025
- Modified: Apr. 15, 2025
- Vuln Type: Information Disclosure
-
9.8
CRITICALCVE-2025-27649
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.893 Application 20.0.2140 allows Incorrect Access Control: PHP V-2023-016.... Read more
- Published: Mar. 05, 2025
- Modified: Apr. 15, 2025
- Vuln Type: Authorization
-
9.8
CRITICALCVE-2025-27648
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.913 Application 20.0.2253 allows Cross Tenant Password Exposure V-2024-003.... Read more
- Published: Mar. 05, 2025
- Modified: Apr. 15, 2025
- Vuln Type: Information Disclosure
-
9.8
CRITICALCVE-2025-27647
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.913 Application 20.0.2253 allows Addition of Partial Admin Users Without Authentication V-2024-002.... Read more
- Published: Mar. 05, 2025
- Modified: Apr. 15, 2025
- Vuln Type: Authentication
-
9.8
CRITICALCVE-2025-27646
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.913 Application 20.0.2253 allows Edit User Account Exposure V-2024-001.... Read more
- Published: Mar. 05, 2025
- Modified: Apr. 15, 2025
-
9.8
CRITICALCVE-2025-27645
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Insecure Extension Installation by Trusting HTTP Permission Methods on the Server Side V-2024-005.... Read more
- Published: Mar. 05, 2025
- Modified: Apr. 15, 2025
- Vuln Type: Misconfiguration
-
7.8
HIGHCVE-2025-27644
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Local Privilege Escalation V-2024-007.... Read more
- Published: Mar. 05, 2025
- Modified: Apr. 15, 2025
- Vuln Type: Authorization
-
9.8
CRITICALCVE-2025-27643
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Hardcoded AWS API Key V-2024-006.... Read more
- Published: Mar. 05, 2025
- Modified: Apr. 15, 2025
- Vuln Type: Misconfiguration
-
9.8
CRITICALCVE-2025-27642
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Unauthenticated Driver Package Editing V-2024-008.... Read more
- Published: Mar. 05, 2025
- Modified: Apr. 15, 2025
-
9.8
CRITICALCVE-2025-27641
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.951 Application 20.0.2368 allows Unauthenticated APIs for Single-Sign On V-2024-009.... Read more
- Published: Mar. 05, 2025
- Modified: Apr. 15, 2025
-
9.8
CRITICALCVE-2025-27640
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0.2614 allows SQL Injection V-2024-012.... Read more
- Published: Mar. 05, 2025
- Modified: Apr. 01, 2025
- Vuln Type: Injection
-
8.8
HIGHCVE-2025-27639
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0.2614 allows Privilege Escalation V-2024-015.... Read more
- Published: Mar. 05, 2025
- Modified: Apr. 15, 2025
- Vuln Type: Authorization
-
9.8
CRITICALCVE-2025-27638
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0.2614 allows Hardcoded Password V-2024-013.... Read more
- Published: Mar. 05, 2025
- Modified: Apr. 15, 2025
- Vuln Type: Authentication
-
6.1
MEDIUMCVE-2025-27637
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0.2614 allows Cross-Site Scripting V-2024-016.... Read more
- Published: Mar. 05, 2025
- Modified: Apr. 23, 2025
- Vuln Type: Cross-Site Scripting
-
4.3
MEDIUMCVE-2025-1923
Inappropriate implementation in Permission Prompts in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Low)... Read more
- Published: Mar. 05, 2025
- Modified: Apr. 01, 2025
- Vuln Type: Misconfiguration
-
4.3
MEDIUMCVE-2025-1922
Inappropriate implementation in Selection in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)... Read more
- Published: Mar. 05, 2025
- Modified: Apr. 01, 2025
-
6.5
MEDIUMCVE-2025-1921
Inappropriate implementation in Media Stream in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to obtain information about a peripheral via a crafted HTML page. (Chromium security severity: Medium)... Read more
- Published: Mar. 05, 2025
- Modified: Apr. 01, 2025
- Vuln Type: Information Disclosure
-
8.8
HIGHCVE-2025-1919
Out of bounds read in Media in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)... Read more
- Published: Mar. 05, 2025
- Modified: Apr. 01, 2025
- Vuln Type: Memory Corruption
-
8.8
HIGHCVE-2025-1918
Out of bounds read in PDFium in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file. (Chromium security severity: Medium)... Read more
- Published: Mar. 05, 2025
- Modified: Apr. 01, 2025
- Vuln Type: Memory Corruption
-
4.3
MEDIUMCVE-2025-1917
Inappropriate implementation in Browser UI in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)... Read more
- Published: Mar. 05, 2025
- Modified: Apr. 01, 2025
- Vuln Type: Misconfiguration