Critical security advisoryCriticalFlagged by our vulnerability database: PHP2Shell is on CISA’s exploited list. Most WordPress hosting runs PHP. See if your site is affectedFlagged by our vulnerability database: PHP2Shell is being exploited. DetailsExploited: PHP2Shell. Check your site
HuttenlocherTechnologies
Updated 2 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,762exploited flaws on CISA’s list
34added in the last 30 days
344new WordPress flaws this week
390,080entries in the database

94 results · page 2 of 2

  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Client Remote Code Execution V-2023-001.CVE-2025-27678 · Other software · Printerlogic · reported by MITRECritical 9.8

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Client Remote Code Execution V-2023-001.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Symbolic Links For Unprivileged File Interaction V-2022CVE-2025-27677 · Other software · Printerlogic · reported by MITRECritical 9.8

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Symbolic Links For Unprivileged File Interaction V-2022-002.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cross-Site Scripting in Reports V-2023-002.CVE-2025-27676 · Other software · Printerlogic · reported by MITREMedium 6.1

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cross-Site Scripting in Reports V-2023-002.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Vulnerable OpenID Implementation V-2023-004.CVE-2025-27675 · Other software · Printerlogic · reported by MITRECritical 9.8

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Vulnerable OpenID Implementation V-2023-004.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Hardcoded IdP Key V-2023-006.CVE-2025-27674 · Other software · Printerlogic · reported by MITRECritical 9.8

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Hardcoded IdP Key V-2023-006.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cookie Returned in Response Body OVE-20230524-0017.CVE-2025-27673 · Other software · Printerlogic · reported by MITRECritical 9.1

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cookie Returned in Response Body OVE-20230524-0017.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows OAUTH Security Bypass OVE-20230524-0016.CVE-2025-27672 · Other software · Printerlogic · reported by MITRECritical 9.8

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows OAUTH Security Bypass OVE-20230524-0016.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Device Impersonation OVE-20230524-0015.CVE-2025-27671 · Other software · Printerlogic · reported by MITRECritical 9.8

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Device Impersonation OVE-20230524-0015.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Insufficient Signature Validation OVE-20230524-0014.CVE-2025-27670 · Other software · Printerlogic · reported by MITRECritical 9.8

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Insufficient Signature Validation OVE-20230524-0014.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Remote Network Scanning (XSPA)/DoS OVE-20230524-0013.CVE-2025-27669 · Other software · Printerlogic · reported by MITREHigh 7.5

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Remote Network Scanning (XSPA)/DoS OVE-20230524-0013.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Arbitrary Content Inclusion via Iframe OVE-20230524-001CVE-2025-27668 · Other software · Printerlogic · reported by MITRECritical 9.8

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Arbitrary Content Inclusion via Iframe OVE-20230524-0012.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Administrative User Email Enumeration OVE-20230524-0011CVE-2025-27667 · Other software · Printerlogic · reported by MITRECritical 9.8

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Administrative User Email Enumeration OVE-20230524-0011.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Insufficient Authorization Checks OVE-20230524-0010.CVE-2025-27666 · Other software · Printerlogic · reported by MITRECritical 9.8

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Insufficient Authorization Checks OVE-20230524-0010.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Insufficient Antivirus Protection and thus drivers can CVE-2025-27665 · Other software · Printerlogic · reported by MITRECritical 9.8

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Insufficient Antivirus Protection and thus drivers can have known malicious code OVE-20230524-0009.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Insufficient CSRF Protection OVE-20230524-0008.CVE-2025-27664 · Other software · Printerlogic · reported by MITREHigh 8.8

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Insufficient CSRF Protection OVE-20230524-0008.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Weak Password Encryption / Encoding OVE-20230524-0007.CVE-2025-27663 · Other software · Printerlogic · reported by MITRECritical 9.8

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Weak Password Encryption / Encoding OVE-20230524-0007.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Password in URL OVE-20230524-0005.CVE-2025-27662 · Other software · Printerlogic · reported by MITRECritical 9.8

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Password in URL OVE-20230524-0005.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Session Fixation OVE-20230524-0004.CVE-2025-27661 · Other software · Printerlogic · reported by MITRECritical 9.1

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Session Fixation OVE-20230524-0004.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cross Site Scripting OVE-20230524-0003.CVE-2025-27660 · Other software · Printerlogic · reported by MITREMedium 5.4

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cross Site Scripting OVE-20230524-0003.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows SQL Injection OVE-20230524-0002.CVE-2025-27659 · Other software · Printerlogic · reported by MITRECritical 9.8

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows SQL Injection OVE-20230524-0002.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Authentication Bypass OVE-20230524-0001.CVE-2025-27658 · Other software · Printerlogic · reported by MITRECritical 9.8

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Authentication Bypass OVE-20230524-0001.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Remote Code Execution V-2023-008.CVE-2025-27657 · Other software · Printerlogic · reported by MITRECritical 9.8

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Remote Code Execution V-2023-008.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Password Stored in Process List V-2023-011.CVE-2025-27656 · Other software · Printerlogic · reported by MITRECritical 9.8

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Password Stored in Process List V-2023-011.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Server-Side Request Forgery: CPA v1 V-2023-009.CVE-2025-27655 · Other software · Printerlogic · reported by MITRECritical 9.8

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Server-Side Request Forgery: CPA v1 V-2023-009.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Cross Site Scripting (XSS) V-2023-017.CVE-2025-27654 · Other software · Printerlogic · reported by MITREMedium 6.1

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Cross Site Scripting (XSS) V-2023-017.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Preauthenticated Cross Site Scripting (XSS): Badge RegiCVE-2025-27653 · Other software · Printerlogic · reported by MITREMedium 6.1

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Preauthenticated Cross Site Scripting (XSS): Badge Registration V-2023-012.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Server-Side Request Forgery: rfIDEAS V-2023-015.CVE-2025-27652 · Other software · Printerlogic · reported by MITRECritical 9.8

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Server-Side Request Forgery: rfIDEAS V-2023-015.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Server-Side Request Forgery: Elatec V-2023-014.CVE-2025-27651 · Other software · Printerlogic · reported by MITRECritical 9.8

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Server-Side Request Forgery: Elatec V-2023-014.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Private Keys in Docker Overlay V-2023-013.CVE-2025-27650 · Other software · Printerlogic · reported by MITRECritical 9.8

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Private Keys in Docker Overlay V-2023-013.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.893 Application 20.0.2140 allows Incorrect Access Control: PHP V-2023-016.CVE-2025-27649 · Other software · Printerlogic · reported by MITRECritical 9.8

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.893 Application 20.0.2140 allows Incorrect Access Control: PHP V-2023-016.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.913 Application 20.0.2253 allows Cross Tenant Password Exposure V-2024-003.CVE-2025-27648 · Other software · Printerlogic · reported by MITRECritical 9.8

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.913 Application 20.0.2253 allows Cross Tenant Password Exposure V-2024-003.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.913 Application 20.0.2253 allows Addition of Partial Admin Users Without Authentication CVE-2025-27647 · Other software · Printerlogic · reported by MITRECritical 9.8

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.913 Application 20.0.2253 allows Addition of Partial Admin Users Without Authentication V-2024-002.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.913 Application 20.0.2253 allows Edit User Account Exposure V-2024-001.CVE-2025-27646 · Other software · Printerlogic · reported by MITRECritical 9.8

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.913 Application 20.0.2253 allows Edit User Account Exposure V-2024-001.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Insecure Extension Installation by Trusting HTTP PermisCVE-2025-27645 · Other software · Printerlogic · reported by MITRECritical 9.8

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Insecure Extension Installation by Trusting HTTP Permission Methods on the Server Side V-2024-005.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Local Privilege Escalation V-2024-007.CVE-2025-27644 · Other software · Printerlogic · reported by MITREHigh 7.8

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Local Privilege Escalation V-2024-007.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Hardcoded AWS API Key V-2024-006.CVE-2025-27643 · Other software · Printerlogic · reported by MITRECritical 9.8

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Hardcoded AWS API Key V-2024-006.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Unauthenticated Driver Package Editing V-2024-008.CVE-2025-27642 · Other software · Printerlogic · reported by MITRECritical 9.8

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Unauthenticated Driver Package Editing V-2024-008.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.951 Application 20.0.2368 allows Unauthenticated APIs for Single-Sign On V-2024-009.CVE-2025-27641 · Other software · Printerlogic · reported by MITRECritical 9.8

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.951 Application 20.0.2368 allows Unauthenticated APIs for Single-Sign On V-2024-009.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0.2614 allows SQL Injection V-2024-012.CVE-2025-27640 · Other software · Printerlogic · reported by MITRECritical 9.8

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0.2614 allows SQL Injection V-2024-012.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0.2614 allows Privilege Escalation V-2024-015.CVE-2025-27639 · Other software · Printerlogic · reported by MITREHigh 8.8

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0.2614 allows Privilege Escalation V-2024-015.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0.2614 allows Hardcoded Password V-2024-013.CVE-2025-27638 · Other software · Printerlogic · reported by MITRECritical 9.8

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0.2614 allows Hardcoded Password V-2024-013.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 5, 2025Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0.2614 allows Cross-Site Scripting V-2024-016.CVE-2025-27637 · Other software · Printerlogic · reported by MITREMedium 6.1

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0.2614 allows Cross-Site Scripting V-2024-016.

    Product
    Vasion Print
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 24, 2023An issue was discovered in Vasion PrinterLogic Client for Windows before 25.0.0.836.CVE-2023-32232 · Other software · Vasion · reported by MITRECritical 9.9

    An issue was discovered in Vasion PrinterLogic Client for Windows before 25.0.0.836. During client installation and repair, a PrinterLogic binary is called by the installer to configure the device. This window is not hidden, and is running with elevated privileges. A standard user can break out of this window, obtaining a full SYSTEM command prompt window. This results in complete compromise via arbitrary SYSTEM code execution (elevation of privileges).

    Product
    Printerlogic Client
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 24, 2023An issue was discovered in Vasion PrinterLogic Client for Windows before 25.0.0.818.CVE-2023-32231 · Other software · Vasion · reported by MITRECritical 9.9

    An issue was discovered in Vasion PrinterLogic Client for Windows before 25.0.0.818. During installation, binaries gets executed out of a subfolder in C:\Windows\Temp. A standard user can create the folder and path file ahead of time and obtain elevated code execution.

    Product
    Printerlogic Client
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Get in touch

Tell us what you're building.

A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.

01The person who'll do the work writes back
02A short call, then a written plan with the price
03Nothing starts until you say yes
04Hacked or down right now? Call, and we pick up the same day
843-331-6339

Not ready to talk yet? Run the free website check and see what Google sees.

What do you need?
Build
Grow
Protect
Urgent

No newsletter, no sales sequence. Just a reply.