Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-34216 State: PUBLISHED Published: 2025-09-29T20:39:13.361Z Last Updated: 2025-11-17T23:56:35.369Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application Problem Types: CWE-306, CWE-312 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1026 and Application prior to version 20.0.2702 (VA deployments only) expose a set of unauthenticated REST API endpoints that return configuration files and clear‑text passwords. The same endpoints also disclose the Laravel APP_KEY used for cryptographic signing. Because the APP_KEY is required to generate valid signed requests, an attacker who obtains it can craft malicious payloa
Because the APP_KEY is required to generate valid signed requests, an attacker who obtains it can craft malicious payloads that are accepted by the application and achieve remote code execution on the appliance. This vulnerability has been identified by the vendor as: V-2024-018 — RCE & Leaks via API. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-rce-03 - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-rce-and-password-leak
t/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-rce-and-password-leaks-via-api
CVE ID: CVE-2025-34217 State: PUBLISHED Published: 2025-09-30T13:03:05.213Z Last Updated: 2025-11-17T23:56:35.568Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application Problem Types: CWE-321 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA/SaaS deployments) contain an undocumented 'printerlogic' user with a hardcoded SSH public key in '~/.ssh/authorized_keys' and a sudoers rule granting the printerlogic_ssh group 'NOPASSWD: ALL'. Possession of the matching private key gives an attacker root access to the appliance. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pierrekim.github.io/blog/2025-04-08-vasio
ance. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-undocumented-hardcoded-ssh-key - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-incorrect-encryption-algorithms-used-to-store-passwords
CVE ID: CVE-2025-34218 State: PUBLISHED Published: 2025-09-29T20:34:23.512Z Last Updated: 2025-11-17T23:56:35.734Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application Problem Types: CWE-306 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA/SaaS deployments) expose internal Docker containers through the gw Docker instance. The gateway publishes a /meta endpoint which lists every micro‑service container together with version information. These containers are reachable directly over HTTP/HTTPS without any access‑control list (ACL), authentication or rate‑limiting. Consequently,
reachable directly over HTTP/HTTPS without any access‑control list (ACL), authentication or rate‑limiting. Consequently, any attacker on the LAN or the Internet can enumerate all internal services and their versions, interact with the exposed APIs of each microservice as an unauthenticated user, or issue malicious requests that may lead to information disclosure, privilege escalation within the container, or denial‑of‑service of the entire appliance. The root cause is the absence of authentication and network‑level restrictions on the API‑gateway’s proxy to internal Docker containers, effectively turning the internal service mesh into a public attack surface. This vulnerability has been iden
containers, effectively turning the internal service mesh into a public attack surface. This vulnerability has been identified by the vendor as: V-2024-030 — Exposed Internal Docker Instance (LAN). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-exposed-docker-instances - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-exposed-internal-docker-instance
CVE ID: CVE-2025-34220 State: PUBLISHED Published: 2025-09-29T20:42:17.866Z Last Updated: 2025-11-17T23:56:35.915Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application Problem Types: CWE-306, CWE-200 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contains a /api-gateway/identity/search-groups endpoint that does not require authentication. Requests to https://<tenant>.printercloud10.com/api-gateway/identity/search-groups and adjustments to the `Host` header allow an unauthenticated remote attacker to enumerate every group object stored for that tenant. The
the `Host` header allow an unauthenticated remote attacker to enumerate every group object stored for that tenant. The response includes internal identifiers (group ID, source service ID, Azure AD object IDs, creation timestamps, and tenant IDs). This vulnerability has been confirmed to be remediated, but it is unclear as to when the patch was introduced. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-api-leak - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/
ty-Bulletins.htm - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-unauth-api-leaks-group-info
CVE ID: CVE-2025-34221 State: PUBLISHED Published: 2025-09-29T20:43:36.637Z Last Updated: 2025-11-17T23:56:36.076Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application Problem Types: CWE-306 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.2.169 and Application prior to version 25.2.1518 (VA/SaaS deployments) expose every internal Docker container to the network because firewall rules allow unrestricted traffic to the Docker bridge network. Because no authentication, ACL or client‑side identifier is required, the attacker can interact with any internal API, bypassing the product’s authentication mechanisms entirely. The result
the attacker can interact with any internal API, bypassing the product’s authentication mechanisms entirely. The result is unauthenticated remote access to internal services, allowing credential theft, configuration manipulation and potential remote code execution. This vulnerability has been identified by the vendor as: V-2025-002 — Authentication Bypass - Docker Instances. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-auth-bypass - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - http
/Print/Security/Security-Bulletins.htm - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-unrestriced-access-to-docker-bridge-network
CVE ID: CVE-2025-34222 State: PUBLISHED Published: 2025-09-29T20:41:52.953Z Last Updated: 2025-11-17T23:56:36.247Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application Problem Types: CWE-306, CWE-434 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA/SaaS deployments) expose four admin routes – /admin/hp/cert_upload, /admin/hp/cert_delete, /admin/certs/ca, and /admin/certs/serviceclients/{scid} – without any authentication check. The routes are defined in the /var/www/app/routes/web.php file inside the printercloud/pi Docker container and are handled by the HPCertificateContro
/var/www/app/routes/web.php file inside the printercloud/pi Docker container and are handled by the HPCertificateController class, which performs no user validation. An unauthenticated attacker can therefore upload a new TLS/SSL certificate replacing the trusted root used by the appliance, delete an existing certificate causing immediate loss of trust for services that rely on it, or download any stored CA or client certificate via the service‑clients endpoint which also suffers an IDOR that allows enumeration of all client IDs. This vulnerability has been identified by the vendor as: V-2024-028 — Unauthenticated Admin APIs Used to Modify SSL Certificates. Additional Analyst Notes: - CISA A
e vendor as: V-2024-028 — Unauthenticated Admin APIs Used to Modify SSL Certificates. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-insecure-apis-02 - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-unauth-admin-apis-used-to-modify-ssl-certs
CVE ID: CVE-2025-34223 State: PUBLISHED Published: 2025-09-29T20:38:05.154Z Last Updated: 2025-11-17T23:56:36.415Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application Problem Types: CWE-798, CWE-306 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA/SaaS deployments) contain a default admin account and an installation‑time endpoint at `/admin/query/update_database.php` that can be accessed without authentication. An attacker who can reach the installation web interface can POST arbitrary `root_user` and `root_password` values, causing the script to replace the default admin c
b interface can POST arbitrary `root_user` and `root_password` values, causing the script to replace the default admin credentials with attacker‑controlled ones. The script also contains hard‑coded SHA‑512 and SHA‑1 hashes of the default password, allowing the attacker to bypass password‑policy validation. As a result, an unauthenticated remote attacker can obtain full administrative control of the system during the initial setup. This vulnerability has been identified by the vendor as: V-2024-022 — Insecure Installation Credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-inse
nrichment: References: - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-insecure-credentials-installation - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-insecure-installation-credentials
CVE ID: CVE-2025-34224 State: PUBLISHED Published: 2025-09-29T20:42:51.341Z Last Updated: 2025-11-17T23:56:36.592Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application Problem Types: CWE-306 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA/SaaS deployments) expose a set of PHP scripts under the `console_release` directory without requiring authentication. An unauthenticated remote attacker can invoke these endpoints to re‑configure networked printers, add or delete RFID badge devices, or otherwise modify device settings. This vulnerability has been identified by the vendor a
r delete RFID badge devices, or otherwise modify device settings. This vulnerability has been identified by the vendor as: V-2024-029 — No Authentication to Modify Devices. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-lack-of-auth-manage-printers - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-unauth-device-modification
CVE ID: CVE-2025-34225 State: PUBLISHED Published: 2025-09-29T20:39:49.179Z Last Updated: 2025-11-17T23:56:36.757Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application Problem Types: CWE-306, CWE-918 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a server-side request forgery (SSRF) vulnerability. The `console_release` directory is reachable from the internet without any authentication. Inside that directory are dozens of PHP scripts that build URLs from user‑controlled values and then invoke either 'curl_exec()` or `file_get_contents()` without pr
pts that build URLs from user‑controlled values and then invoke either 'curl_exec()` or `file_get_contents()` without proper validation. Although many files attempt to mitigate SSRF by calling `filter_var', the checks are incomplete. Because the endpoint is unauthenticated, any remote attacker can supply a hostname and cause the server to issue requests to internal resources. This enables internal network reconnaissance, potential pivoting, or data exfiltration. This vulnerability has been confirmed to be remediated, but it is unclear as to when the patch was introduced. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pierrekim.github.io/blog/2025-04-08-vasion-printe
ditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-ssrf-03 - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-ssrf-via-console-release-directory
CVE ID: CVE-2025-34226 State: PUBLISHED Published: 2025-10-03T15:36:03.516Z Last Updated: 2025-11-13T22:31:24.948Z Vendors: Autonomy Logic Products: OpenPLC Runtime Problem Types: CWE-664, CWE-20 Description: OpenPLC Runtime v3 contains an input validation flaw in the /upload-program-action endpoint: the epoch_time field supplied during program uploads is not validated and can be crafted to induce corruption of the programs database. After a successful malformed upload the runtime continues to operate until a restart; on restart the runtime can fail to start because of corrupted database entries, resulting in persistent denial of service requiring complete rebase of the product to recover. T
upted database entries, resulting in persistent denial of service requiring complete rebase of the product to recover. This vulnerability was remediated by commit 095ee09. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://autonomylogic.com/ - https://openplc.discussion.community/post/persistant-dos-affecting-openplc-runtime-13722844 - https://github.com/thiagoralves/OpenPLC_v3/pull/297/commits/095ee09623dd229b64ad3a1db38a901a3772f6fc - https://www.vulncheck.com/advisories/openplc-runtime-v3-persistent-denial-of-service
CVE ID: CVE-2025-34227 State: PUBLISHED Published: 2025-09-25T17:08:52.921Z Last Updated: 2025-11-17T18:21:50.807Z Vendors: Nagios Products: Nagios XI Problem Types: CWE-78 Description: Nagios XI < 2026R1 is vulnerable to an authenticated command injection vulnerability within the MongoDB Database, MySQL Query, MySQL Server, Postgres Server, and Postgres Query wizards. It is possible to inject shell characters into arguments provided to the service and execute arbitrary system commands on the underlying host as the `nagios` user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/changelog/ - https://www.nagios.com/products/security/ - https://www.vulnche
hment: References: - https://www.nagios.com/changelog/ - https://www.nagios.com/products/security/ - https://www.vulncheck.com/advisories/nagios-xi-config-wizard-auth-command-injection - https://theyhack.me/CVE-2025-34227-Nagios-XI-Wizard-Command-Injection/
CVE ID: CVE-2025-34228 State: PUBLISHED Published: 2025-09-29T20:41:29.156Z Last Updated: 2025-11-17T23:56:36.926Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application Problem Types: CWE-306, CWE-918 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a server-side request forgery (SSRF) vulnerability. The `/var/www/app/console_release/lexmark/update.php` script is reachable from the internet without any authentication. The PHP script builds URLs from user‑controlled values and then invokes either 'curl_exec()` or `file_get_contents()` without proper va
builds URLs from user‑controlled values and then invokes either 'curl_exec()` or `file_get_contents()` without proper validation. Because the endpoint is unauthenticated, any remote attacker can supply a hostname and cause the server to issue requests to internal resources. This enables internal network reconnaissance, potential pivoting, or data exfiltration. This vulnerability has been confirmed to be remediated, but it is unclear as to when the patch was introduced. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-ssrf-04 - https://help.printerlogic.com/va/Print/Security/Security-Bul
08-vasion-printerlogic-83-vulnerabilities.html#va-ssrf-04 - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-ssrf-via-lexmark-update-php-script
CVE ID: CVE-2025-34229 State: PUBLISHED Published: 2025-09-29T20:41:05.882Z Last Updated: 2025-11-17T23:56:37.130Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application Problem Types: CWE-306, CWE-918 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a blind server-side request forgery (SSRF) vulnerability reachable via the /var/www/app/console_release/hp/installApp.php script that can be exploited by an unauthenticated user. When a printer is registered, the software stores the printer’s host name in the variable $printer_vo->str_host_address. The cod
rinter is registered, the software stores the printer’s host name in the variable $printer_vo->str_host_address. The code later builds a URL like 'http://<host‑address>:80/DevMgmt/DiscoveryTree.xml' and sends the request with curl. No validation, whitelist, or private‑network filtering is performed before the request is made. Because the request is blind, an attacker cannot see the data directly, but can still: probe internal services, trigger internal actions, or gather other intelligence. This vulnerability has been confirmed to be remediated, but it is unclear as to when the patch was introduced. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pierrekim.github.io/
the patch was introduced. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-ssrf-05 - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-ssrf-via-hp-update-php-script
CVE ID: CVE-2025-34230 State: PUBLISHED Published: 2025-09-29T20:40:39.074Z Last Updated: 2025-11-17T23:56:37.313Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application Problem Types: CWE-306, CWE-918 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a blind server-side request forgery (SSRF) vulnerability reachable via the /var/www/app/console_release/hp/log_off_single_sign_on.php script that can be exploited by an unauthenticated user. When a printer is registered, the software stores the printer’s host name in the variable $printer_vo->str_host_addr
er. When a printer is registered, the software stores the printer’s host name in the variable $printer_vo->str_host_address. The code later builds a URL like 'http://<host‑address>:80/DevMgmt/DiscoveryTree.xml' and sends the request with curl. No validation, whitelist, or private‑network filtering is performed before the request is made. Because the request is blind, an attacker cannot see the data directly, but can still: probe internal services, trigger internal actions, or gather other intelligence. This vulnerability has been confirmed to be remediated, but it is unclear as to when the patch was introduced. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pierreki
r as to when the patch was introduced. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-ssrf-06 - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-ssrf-via-hp-log-off-single-sign-on-php-script
CVE ID: CVE-2025-34231 State: PUBLISHED Published: 2025-09-29T20:40:11.596Z Last Updated: 2025-11-17T23:56:37.493Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application Problem Types: CWE-306, CWE-918 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a blind and non-blind server-side request forgery (SSRF) vulnerability. The '/var/www/app/console_release/hp/badgeSetup.php' script is reachable from the Internet without any authentication and builds URLs from user‑controlled parameters before invoking either the custom processCurl() function or PHP’s fil
on and builds URLs from user‑controlled parameters before invoking either the custom processCurl() function or PHP’s file_get_contents(); in both cases the hostname/URL is taken directly from the request with no whitelist, scheme restriction, IP‑range validation, or outbound‑network filtering. Consequently, any unauthenticated attacker can force the server to issue arbitrary HTTP requests to internal resources. This enables internal network reconnaissance, credential leakage, pivoting, and data exfiltration. This vulnerability has been confirmed to be remediated, but it is unclear as to when the patch was introduced. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pi
unclear as to when the patch was introduced. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-ssrf-07 - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-ssrf-via-hp-badgesetup-php-script