[CVE_SUBSCRIPTIONS]

Receive alerts for specific vendors, products, or severities
📡 [FLUX RSS CVE]

Subscribe to the CVE feed

7 derniers jours

> FILTERS

> Last 7 Days

STATISTIQUES

Total CVE: 424151
> CVE-2025-22493 [MEDIUM 5.6]
[PUBLISHED: 2025-03-05] [EPSS 0.11%]
Secure flag not set and SameSIte was set to Lax in the Foreseer Reporting Software (FRS). Absence of this secure flag could lead into the session cookie being transmitted over unencrypted HTTP connections. This security issue has been resolved in the latest version of FRS v1.5.100.
> CVE-2025-1435 [MEDIUM 6.3]
[PUBLISHED: 2025-03-05] [EPSS 0.20%]
The bbPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.6.11. This is due to missing or incorrect nonce validation on the bbp_user_add_role_on_register() function. This makes it possible for unauthenticated attackers to elevate their privi...
> CVE-2025-1008 [MEDIUM 6.4]
[PUBLISHED: 2025-03-05] [EPSS 0.31%]
The Recently Purchased Products For Woo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘view’ parameter in all versions up to, and including, 1.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contribu...
> CVE-2025-0990 [MEDIUM 4.3]
[PUBLISHED: 2025-03-05] [EPSS 0.15%]
The I Am Gloria plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.4. This is due to missing or incorrect nonce validation on the iamgloria23_gloria_settings_page function. This makes it possible for unauthenticated attackers to reset the tenan...
> CVE-2024-8682 [MEDIUM 5.3]
[PUBLISHED: 2025-03-05] [EPSS 0.28%]
The JNews - WordPress Newspaper Magazine Blog AMP Theme theme for WordPress is vulnerable to unauthorized user registration in all versions up to, and including, 11.6.6. This is due to the plugin not properly validate if the user can register option is enabled prior to creating a user though the reg...
> CVE-2024-13866 [MEDIUM 6.4]
[PUBLISHED: 2025-03-05] [EPSS 0.24%]
The Simple Notification plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web...
> CVE-2024-13827 [MEDIUM 6.1]
[PUBLISHED: 2025-03-05] [EPSS 0.33%]
The Razorpay Subscription Button Elementor Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg() and remove_query_arg() functions without appropriate escaping on the URL in all versions up to, and including, 1.0.3. This makes it possible for un...
> CVE-2024-13350 [MEDIUM 6.4]
[PUBLISHED: 2025-03-05] [EPSS 0.24%]
The SearchIQ – The Search Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'siq_searchbox' shortcode in all versions up to, and including, 4.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
AFFECTED_PRODUCTS: Searchiq Searchiq
> CVE-2025-1393 [CRITICAL 9.8]
[PUBLISHED: 2025-03-05] [EPSS 0.56%]
An unauthenticated remote attacker can use hard-coded credentials to gain full administration privileges on the affected product.
> CVE-2025-27685 [HIGH 7.5]
[PUBLISHED: 2025-03-05] [EPSS 0.38%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Configuration File Contains CA & Private Key V-2022-001.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27684 [HIGH 7.5]
[PUBLISHED: 2025-03-05] [EPSS 0.59%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Debug Bundle Contains Sensitive Data V-2022-003.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27683 [HIGH 8.8]
[PUBLISHED: 2025-03-05] [EPSS 0.73%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Driver Unrestricted Upload of File with Dangerous Type V-2022-006.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27682 [CRITICAL 9.8]
[PUBLISHED: 2025-03-05] [EPSS 0.70%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Insecure Log Permissions V-2022-005.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27681 [CRITICAL 9.8]
[PUBLISHED: 2025-03-05] [EPSS 0.76%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 mishandles Client Inter-process Security V-2022-004.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27680 [CRITICAL 9.1]
[PUBLISHED: 2025-03-05] [EPSS 0.32%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.750 Application 20.0.1442 allows Insecure Firmware Image with Insufficient Verification of Data Authenticity V-2024-004.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27679 [MEDIUM 6.1]
[PUBLISHED: 2025-03-05] [EPSS 0.40%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cross-Site Scripting in Badge Registration V-2023-005.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27678 [CRITICAL 9.8]
[PUBLISHED: 2025-03-05] [EPSS 1.31%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Client Remote Code Execution V-2023-001.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27677 [CRITICAL 9.8]
[PUBLISHED: 2025-03-05] [EPSS 0.71%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Symbolic Links For Unprivileged File Interaction V-2022-002.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27676 [MEDIUM 6.1]
[PUBLISHED: 2025-03-05] [EPSS 0.42%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cross-Site Scripting in Reports V-2023-002.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27675 [CRITICAL 9.8]
[PUBLISHED: 2025-03-05] [EPSS 0.76%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Vulnerable OpenID Implementation V-2023-004.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27674 [CRITICAL 9.8]
[PUBLISHED: 2025-03-05] [EPSS 0.71%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Hardcoded IdP Key V-2023-006.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27673 [CRITICAL 9.1]
[PUBLISHED: 2025-03-05] [EPSS 0.55%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cookie Returned in Response Body OVE-20230524-0017.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27672 [CRITICAL 9.8]
[PUBLISHED: 2025-03-05] [EPSS 0.63%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows OAUTH Security Bypass OVE-20230524-0016.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27671 [CRITICAL 9.8]
[PUBLISHED: 2025-03-05] [EPSS 0.62%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Device Impersonation OVE-20230524-0015.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27670 [CRITICAL 9.8]
[PUBLISHED: 2025-03-05] [EPSS 0.42%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Insufficient Signature Validation OVE-20230524-0014.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27669 [HIGH 7.5]
[PUBLISHED: 2025-03-05] [EPSS 0.55%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Remote Network Scanning (XSPA)/DoS OVE-20230524-0013.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27668 [CRITICAL 9.8]
[PUBLISHED: 2025-03-05] [EPSS 0.67%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Arbitrary Content Inclusion via Iframe OVE-20230524-0012.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27667 [CRITICAL 9.8]
[PUBLISHED: 2025-03-05] [EPSS 0.67%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Administrative User Email Enumeration OVE-20230524-0011.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27666 [CRITICAL 9.8]
[PUBLISHED: 2025-03-05] [EPSS 0.62%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Insufficient Authorization Checks OVE-20230524-0010.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27665 [CRITICAL 9.8]
[PUBLISHED: 2025-03-05] [EPSS 0.67%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Insufficient Antivirus Protection and thus drivers can have known malicious code OVE-20230524-0009.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27664 [HIGH 8.8]
[PUBLISHED: 2025-03-05] [EPSS 0.28%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Insufficient CSRF Protection OVE-20230524-0008.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27663 [CRITICAL 9.8]
[PUBLISHED: 2025-03-05] [EPSS 0.38%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Weak Password Encryption / Encoding OVE-20230524-0007.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27662 [CRITICAL 9.8]
[PUBLISHED: 2025-03-05] [EPSS 0.62%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Password in URL OVE-20230524-0005.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27661 [CRITICAL 9.1]
[PUBLISHED: 2025-03-05] [EPSS 0.52%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Session Fixation OVE-20230524-0004.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27660 [MEDIUM 5.4]
[PUBLISHED: 2025-03-05] [EPSS 0.39%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cross Site Scripting OVE-20230524-0003.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27659 [CRITICAL 9.8]
[PUBLISHED: 2025-03-05] [EPSS 0.74%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows SQL Injection OVE-20230524-0002.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27658 [CRITICAL 9.8]
[PUBLISHED: 2025-03-05] [EPSS 0.91%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Authentication Bypass OVE-20230524-0001.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27657 [CRITICAL 9.8]
[PUBLISHED: 2025-03-05] [EPSS 1.69%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Remote Code Execution V-2023-008.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27656 [CRITICAL 9.8]
[PUBLISHED: 2025-03-05] [EPSS 0.90%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Password Stored in Process List V-2023-011.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27655 [CRITICAL 9.8]
[PUBLISHED: 2025-03-05] [EPSS 0.90%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Server-Side Request Forgery: CPA v1 V-2023-009.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27654 [MEDIUM 6.1]
[PUBLISHED: 2025-03-05] [EPSS 0.53%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Cross Site Scripting (XSS) V-2023-017.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27653 [MEDIUM 6.1]
[PUBLISHED: 2025-03-05] [EPSS 0.53%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Preauthenticated Cross Site Scripting (XSS): Badge Registration V-2023-012.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27652 [CRITICAL 9.8]
[PUBLISHED: 2025-03-05] [EPSS 0.90%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Server-Side Request Forgery: rfIDEAS V-2023-015.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27651 [CRITICAL 9.8]
[PUBLISHED: 2025-03-05] [EPSS 0.90%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Server-Side Request Forgery: Elatec V-2023-014.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27650 [CRITICAL 9.8]
[PUBLISHED: 2025-03-05] [EPSS 0.90%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Private Keys in Docker Overlay V-2023-013.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27649 [CRITICAL 9.8]
[PUBLISHED: 2025-03-05] [EPSS 0.90%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.893 Application 20.0.2140 allows Incorrect Access Control: PHP V-2023-016.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27648 [CRITICAL 9.8]
[PUBLISHED: 2025-03-05] [EPSS 0.90%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.913 Application 20.0.2253 allows Cross Tenant Password Exposure V-2024-003.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27647 [CRITICAL 9.8]
[PUBLISHED: 2025-03-05] [EPSS 1.04%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.913 Application 20.0.2253 allows Addition of Partial Admin Users Without Authentication V-2024-002.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27646 [CRITICAL 9.8]
[PUBLISHED: 2025-03-05] [EPSS 0.90%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.913 Application 20.0.2253 allows Edit User Account Exposure V-2024-001.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print
> CVE-2025-27645 [CRITICAL 9.8]
[PUBLISHED: 2025-03-05] [EPSS 0.90%]
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Insecure Extension Installation by Trusting HTTP Permission Methods on the Server Side V-2024-005.
AFFECTED_PRODUCTS: Printerlogic Virtual Appliance, Printerlogic Vasion Print