deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-1259
Published: 2025-03-04
Description: On affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected. This issue can result in users retrieving data that should not have been available
CVSS Score: 7.7 (HIGH)
CWE: CWE-284
References: https://www.arista.com/en/support/advisories-notices/security-advisory/21098-security-advisory-0111
CVE: CVE-2025-1260
Published: 2025-03-04
Description: On affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected. This issue can result in unexpected configuration/operations being applied to the switch.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-284
References: https://www.arista.com/en/support/advisories-notices/security-advisory/21098-security-advisory-0111
CVE: CVE-2025-1953
Published: 2025-03-04
Description: A vulnerability has been found in vLLM AIBrix 0.2.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file pkg/plugins/gateway/prefixcacheindexer/hash.go of the component Prefix Caching. The manipulation leads to insufficiently random values. The complexity of an attack is rather high. The exploitation appears to be difficult. Upgrading to version 0.3.0 is able to address this issue. It is recommended to upgrade the affected component.
CVSS Score: 2.6 (LOW)
CWE: CWE-310, CWE-330
References: https://github.com/vllm-project/aibrix/issues/749; https://github.com/vllm-project/aibrix/issues/749#event[PII_REDACTED]4; https://github.com/vllm-project/aibrix/pull/752
CVE: CVE-2020-23438
Published: 2025-03-04
Description: Wondershare filmora 9.2.11 is affected by Trojan Dll hijacking leading to privilege escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-427
References: https://cvewalkthrough.com/cve-2020-23438-wondershare-filmora-9-2-11-trojan-dll-hijacking-leading-to-privilege-escalation/
CVE: CVE-2021-41719
Published: 2025-03-04
Description: Maharashtra State Electricity Distribution Company Limited Mahavitran IOS Application 16.1 application till version 16.1 communicates using the GET method to process requests that contain sensitive information such as user account name and password, which can expose that information through the browser's history, referrers, web logs, and other sources.
CVSS Score: 7.5 (HIGH)
CWE: CWE-598
References: https://cvewalkthrough.com/cve-2021-41719-mseb-ios-application-sensitive-information-exposure/
CVE: CVE-2024-8000
Published: 2025-03-04
Description: On affected platforms running Arista EOS with 802.1X configured, certain conditions may occur where a dynamic ACL is received from the AAA server resulting in only the first line of the ACL being installed after an Accelerated Software Upgrade (ASU) restart. 

Note: supplicants with pending captive-portal authentication during ASU would be impacted with this bug.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1284
References: https://www.arista.com/en/support/advisories-notices/security-advisory/21086-security-advisory-0109
CVE: CVE-2024-9135
Published: 2025-03-04
Description: On affected platforms running Arista EOS with BGP Link State configured, BGP peer flap can cause the BGP agent to leak memory. This may result in BGP routing processing being terminated and route flapping.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-401
References: https://www.arista.com/en/support/advisories-notices/security-advisory/21092-security-advisory-0110
CVE: CVE-2025-1954
Published: 2025-03-04
Description: A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/sorcha-l/cve/blob/main/Human%20Metapneumovirus%20(HMPV)%20%E2%80%93%20Testing%20Management%20System%20%20SQL%20Injection%20Vulnerability.md; https://phpgurukul.com/; https://vuldb.com/?ctiid.298555
CVE: CVE-2025-1955
Published: 2025-03-04
Description: A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /Scheduling/scheduling/pages/profile.php. The manipulation of the argument username leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://code-projects.org/; https://hexotion.notion.site/Online-Class-and-Exam-Scheduling-System-in-PHP-has-Stored-Cross-Site-Scripting-vulnerability-in-prof-1a7bb766cf32809b9f0be980e90d83f7?pvs=73; https://vuldb.com/?ctiid.298556
CVE: CVE-2025-26136
Published: 2025-03-04
Description: A SQL injection vulnerability exists in mysiteforme versions prior to 2025.01.1.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://gist.github.com/xiadmin6/6d664692d31a04eb59096a488b9f3712
CVE: CVE-2025-26318
Published: 2025-03-04
Description: hb.exe in TSplus Remote Access before 17.30 2024-10-30 allows remote attackers to retrieve a list of all domain accounts currently connected to the application.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-201
References: https://github.com/Frozenka/CVE-2025-26318
CVE: CVE-2025-1956
Published: 2025-03-04
Description: A vulnerability classified as critical has been found in code-projects Shopping Portal 1.0. This affects an unknown part of the file /Shopping/Admin/index.php of the component Login. The manipulation of the argument password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-74, CWE-89
References: https://code-projects.org/; https://hexotion.notion.site/Shopping-Portal-in-PHP-has-Stored-SQL-injection-vulnerability-in-admin-index-php-1a7bb766cf3280e8bb81eaa59c4c2b74; https://vuldb.com/?ctiid.298557
CVE: CVE-2025-1957
Published: 2025-03-04
Description: A vulnerability classified as problematic was found in code-projects Blood Bank System 1.0. This vulnerability affects unknown code of the file /BBfile/Blood/o+.php. The manipulation of the argument Bloodname leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://code-projects.org/; https://github.com/Corgile/cve/blob/main/cve.md; https://vuldb.com/?ctiid.298558
CVE: CVE-2025-1958
Published: 2025-03-04
Description: A vulnerability, which was classified as critical, has been found in aaluoxiang oa_system 1.0. This issue affects some unknown processing of the file src/main/resources/mappers/address-mapper.xml. The manipulation of the argument outtype leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/qkdjksfkeg/cve_article/blob/main/oasys/SQL%20injection.md; https://vuldb.com/?ctiid.298559; https://vuldb.com/?id.298559
CVE: CVE-2025-25426
Published: 2025-03-04
Description: yshopmall <=v1.9.0 is vulnerable to SQL Injection in the image listing interface.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://gist.github.com/Catherines77/79e6b69490b085d9c2d96c99e72c3579; https://github.com/guchengwuyue/yshopmall/issues/34; https://github.com/guchengwuyue/yshopmall/issues/34
CVE: CVE-2025-26319
Published: 2025-03-04
Description: FlowiseAI Flowise v2.2.6 was discovered to contain an arbitrary file upload vulnerability in /api/v1/attachments.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/dorattias/CVE-2025-26319; https://github.com/dorattias/CVE-2025-26319
CVE: CVE-2025-27510
Published: 2025-03-04
Description: conda-forge-metadata provides programatic access to conda-forge's metadata. conda-forge-metadata uses an optional dependency - "conda-oci-mirror" which was neither present on the PyPi repository nor registered by any entity. If conda-oci-mirror is taken over by a threat actor, it can result in remote code execution.
CWE: CWE-829
References: https://github.com/conda-forge/conda-forge-metadata/blob/799aee36b21ee06289d73d57838b28201f5a57af/pyproject.toml#L28; https://github.com/conda-forge/conda-forge-metadata/security/advisories/GHSA-vwfh-m3q7-9jpw; https://github.com/conda-forge/conda-forge-metadata/security/advisories/GHSA-vwfh-m3q7-9jpw
CVE: CVE-2025-1959
Published: 2025-03-04
Description: A vulnerability, which was classified as critical, was found in Codezips Gym Management System 1.0. Affected is an unknown function of the file /change_s_pwd.php. The manipulation of the argument login_id/login_key leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/CContinueee/CVE/blob/main/CVE_1.md; https://vuldb.com/?ctiid.298560; https://vuldb.com/?id.298560
CVE: CVE-2025-1961
Published: 2025-03-04
Description: A vulnerability has been found in SourceCodester Best Church Management Software 1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/app/web_crud.php. The manipulation of the argument encryption leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/Yesec/Best-church-management-software/blob/main/web_crud.php_SQLi.md; https://vuldb.com/?ctiid.298561; https://vuldb.com/?id.298561
CVE: CVE-2025-1316
Published: 2025-03-05
Description: Edimax IC-7100 does not properly neutralize requests. An attacker can create specially crafted requests to achieve remote code execution on the device
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-08; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-1316
CVE: CVE-2025-1962
Published: 2025-03-05
Description: A vulnerability was found in projectworlds Online Hotel Booking 1.0. It has been classified as critical. This affects an unknown part of the file /admin/addroom.php. The manipulation of the argument roomname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/ubfbuz3/cve/issues/1; https://vuldb.com/?ctiid.298563; https://vuldb.com/?id.298563
CVE: CVE-2025-1963
Published: 2025-03-05
Description: A vulnerability was found in projectworlds Online Hotel Booking 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /reservation.php. The manipulation of the argument checkin leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/ubfbuz3/cve/issues/2; https://vuldb.com/?ctiid.298564; https://vuldb.com/?id.298564
CVE: CVE-2025-20002
Published: 2025-03-05
Description: After attempting to upload a file that does not meet prerequisites, GMOD Apollo will respond with local path information disclosure
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209
References: https://github.com/GMOD/Apollo; https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-07
CVE: CVE-2025-21092
Published: 2025-03-05
Description: GMOD Apollo does not have sufficient logical or access checks when updating a user's information. This could result in an attacker being able to escalate privileges for themselves or others.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-266
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-07
CVE: CVE-2025-23410
Published: 2025-03-05
Description: When uploading organism or sequence data via the web interface, 
 GMOD Apollo

 will unzip and inspect the files and will not check for path
 traversal in supported archive types.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-23
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-07
CVE: CVE-2025-24924
Published: 2025-03-05
Description: Certain functionality within GMOD Apollo does not require authentication when passed with an administrative username
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-07
CVE: CVE-2025-1964
Published: 2025-03-05
Description: A vulnerability was found in projectworlds Online Hotel Booking 1.0. It has been rated as critical. This issue affects some unknown processing of the file /booknow.php?roomname=Duplex. The manipulation of the argument checkin leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/ubfbuz3/cve/issues/3; https://vuldb.com/?ctiid.298565; https://vuldb.com/?id.298565
CVE: CVE-2025-1965
Published: 2025-03-05
Description: A vulnerability classified as critical has been found in projectworlds Online Hotel Booking 1.0. Affected is an unknown function of the file /admin/login.php. The manipulation of the argument emailusername leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/ubfbuz3/cve/issues/4; https://vuldb.com/?ctiid.298566; https://vuldb.com/?id.298566
CVE: CVE-2024-0114
Published: 2025-03-05
Description: NVIDIA Hopper HGX for 8-GPU contains a vulnerability in the HGX Management Controller (HMC) that may allow a malicious actor with administrative access on the BMC to access the HMC as an administrator. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
CVSS Score: 8.1 (HIGH)
CWE: CWE-1244
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5561
CVE: CVE-2024-0141
Published: 2025-03-05
Description: NVIDIA Hopper HGX for 8-GPU contains a vulnerability in the GPU vBIOS that may allow a malicious actor with tenant level GPU access to write to an unsupported registry causing a bad state. A successful exploit of this vulnerability may lead to denial of service.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-782
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5561
CVE: CVE-2025-1966
Published: 2025-03-05
Description: A vulnerability classified as critical was found in PHPGurukul Pre-School Enrollment System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/SECWG/cve/issues/1; https://phpgurukul.com/; https://vuldb.com/?ctiid.298567
CVE: CVE-2025-1967
Published: 2025-03-05
Description: A vulnerability, which was classified as problematic, has been found in code-projects Blood Bank Management System 1.0. Affected by this issue is some unknown functionality of the file /user_dashboard/donor.php. The manipulation of the argument name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://code-projects.org/; https://github.com/intercpt/XSS1/blob/main/XSS.md; https://vuldb.com/?ctiid.298568
CVE: CVE-2025-1914
Published: 2025-03-05
Description: Out of bounds read in V8 in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop.html; https://issues.chromium.org/issues/397731718
CVE: CVE-2025-1915
Published: 2025-03-05
Description: Improper Limitation of a Pathname to a Restricted Directory in DevTools in Google Chrome on Windows prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted Chrome Extension. (Chromium security severity: Medium)
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop.html; https://issues.chromium.org/issues/391114799
CVE: CVE-2025-1916
Published: 2025-03-05
Description: Use after free in Profiles in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop.html; https://issues.chromium.org/issues/376493203
CVE: CVE-2025-1917
Published: 2025-03-05
Description: Inappropriate implementation in Browser UI in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1021
References: https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop.html; https://issues.chromium.org/issues/329476341
CVE: CVE-2025-1918
Published: 2025-03-05
Description: Out of bounds read in PDFium in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file. (Chromium security severity: Medium)
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop.html; https://issues.chromium.org/issues/388557904
CVE: CVE-2025-1919
Published: 2025-03-05
Description: Out of bounds read in Media in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop.html; https://issues.chromium.org/issues/392375312
CVE: CVE-2025-1921
Published: 2025-03-05
Description: Inappropriate implementation in Media Stream in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to obtain information about a peripheral via a crafted HTML page. (Chromium security severity: Medium)
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1230
References: https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop.html; https://issues.chromium.org/issues/387583503
CVE: CVE-2025-1922
Published: 2025-03-05
Description: Inappropriate implementation in Selection in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-451
References: https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop.html; https://issues.chromium.org/issues/384033062
CVE: CVE-2025-1923
Published: 2025-03-05
Description: Inappropriate implementation in Permission Prompts in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Low)
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1021
References: https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop.html; https://issues.chromium.org/issues/382540635
CVE: CVE-2025-27637
Published: 2025-03-05
Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0.2614 allows Cross-Site Scripting V-2024-016.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm; https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html; http://seclists.org/fulldisclosure/2025/Apr/18
CVE: CVE-2025-27638
Published: 2025-03-05
Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0.2614 allows Hardcoded Password V-2024-013.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-259
References: https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm; https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html; http://seclists.org/fulldisclosure/2025/Apr/18
CVE: CVE-2025-27639
Published: 2025-03-05
Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0.2614 allows Privilege Escalation V-2024-015.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm; https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html; http://seclists.org/fulldisclosure/2025/Apr/18
CVE: CVE-2025-27640
Published: 2025-03-05
Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0.2614 allows SQL Injection V-2024-012.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm
CVE: CVE-2025-27641
Published: 2025-03-05
Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.951 Application 20.0.2368 allows Unauthenticated APIs for Single-Sign On V-2024-009.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm; https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html; http://seclists.org/fulldisclosure/2025/Apr/18
CVE: CVE-2025-27642
Published: 2025-03-05
Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Unauthenticated Driver Package Editing V-2024-008.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm; https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html; http://seclists.org/fulldisclosure/2025/Apr/18
CVE: CVE-2025-27643
Published: 2025-03-05
Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Hardcoded AWS API Key V-2024-006.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm; https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html; http://seclists.org/fulldisclosure/2025/Apr/18
CVE: CVE-2025-27644
Published: 2025-03-05
Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Local Privilege Escalation V-2024-007.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm; https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html; http://seclists.org/fulldisclosure/2025/Apr/18
CVE: CVE-2025-27645
Published: 2025-03-05
Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Insecure Extension Installation by Trusting HTTP Permission Methods on the Server Side V-2024-005.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863
References: https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm; https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html; http://seclists.org/fulldisclosure/2025/Apr/18