Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
via.com/ - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5957.php - https://packetstorm.news/files/id/208700/ - https://www.vulncheck.com/advisories/ilevia-eve-x1-server-credentials-leak-through-log-disclosure
CVE ID: CVE-2025-34184 State: PUBLISHED Published: 2025-09-16T19:40:41.665Z Last Updated: 2025-09-17T13:59:46.272Z Vendors: Ilevia Srl. Products: EVE X1 Server Problem Types: CWE-78 Description: Ilevia EVE X1 Server version ≤ 4.7.18.0.eden contains an unauthenticated OS command injection vulnerability in the /ajax/php/login.php script. Remote attackers can execute arbitrary system commands by injecting payloads into the 'passwd' HTTP POST parameter, leading to full system compromise or denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ilevia.com/ - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5956.php - https://packetstorm.news/files/id
://www.ilevia.com/ - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5956.php - https://packetstorm.news/files/id/207717/ - https://www.vulncheck.com/advisories/ilevia-eve-x1-server-neuro-code-unauth-code-injection
CVE ID: CVE-2025-34185 State: PUBLISHED Published: 2025-09-16T19:44:26.532Z Last Updated: 2025-09-17T13:58:18.703Z Vendors: Ilevia Srl. Products: EVE X1 Server Problem Types: CWE-200, CWE-22 Description: Ilevia EVE X1 Server version ≤ 4.7.18.0.eden contains a pre-authentication file disclosure vulnerability via the 'db_log' POST parameter. Remote attackers can retrieve arbitrary files from the server, exposing sensitive system information and credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ilevia.com/ - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5955.php - https://packetstorm.news/files/id/207716/ - https://www.vulncheck.com/advisories/il
/vulnerabilities/ZSL-2025-5955.php - https://packetstorm.news/files/id/207716/ - https://www.vulncheck.com/advisories/ilevia-eve-x1-server-unauth-file-disclosure
CVE ID: CVE-2025-34186 State: PUBLISHED Published: 2025-09-16T19:45:01.996Z Last Updated: 2025-09-16T20:25:08.709Z Vendors: Ilevia Srl. Products: EVE X1/X5 Server Problem Types: CWE-287, CWE-78 Description: Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a vulnerability in its authentication mechanism. Unsanitized input is passed to a system() call for authentication, allowing attackers to inject special characters and manipulate command parsing. Due to the binary's interpretation of non-zero exit codes as successful authentication, remote attackers can bypass authentication and gain full access to the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
entication and gain full access to the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ilevia.com/ - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5958.php - https://packetstorm.news/files/id/208871/ - https://www.vulncheck.com/advisories/ilevia-eve-x1-x5-server-auth-bypass
CVE ID: CVE-2025-34187 State: PUBLISHED Published: 2025-09-16T19:45:42.015Z Last Updated: 2025-09-16T20:24:31.801Z Vendors: Ilevia Srl. Products: EVE X1/X5 Server Problem Types: CWE-269, CWE-78 Description: Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a misconfiguration in the sudoers file that allows passwordless execution of certain Bash scripts. If these scripts are writable by web-facing users or accessible via command injection, attackers can replace them with malicious payloads. Execution with sudo grants full root access, resulting in remote privilege escalation and potential system compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.il
alation and potential system compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ilevia.com/ - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5959.php - https://packetstorm.news/files/id/209226/ - https://www.vulncheck.com/advisories/ilevia-eve-x1-x5-server-reverse-rootshell
CVE ID: CVE-2025-34188 State: PUBLISHED Published: 2025-09-19T18:46:40.632Z Last Updated: 2025-11-17T23:56:30.681Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application Problem Types: CWE-532 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 1.0.735 and Application prior to 20.0.1330 (macOS/Linux client deployments) contain a vulnerability in the local logging mechanism. Authentication session tokens, including PHPSESSID, XSRF-TOKEN, and laravel_session, are stored in cleartext within world-readable log files. Any local user with access to the machine can extract these session tokens and use them to authenticate remotely to the Saa
local user with access to the machine can extract these session tokens and use them to authenticate remotely to the SaaS environment, bypassing normal login credentials, potentially leading to unauthorized system access and exposure of sensitive information. This vulnerability has been identified by the vendor as: V-2022-008 — Secrets Leaked in Logs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#mac-leak-secrets - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/
l#mac-leak-secrets - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-local-log-disclosure-of-cleartext-sessions
CVE ID: CVE-2025-34189 State: PUBLISHED Published: 2025-09-19T18:49:29.691Z Last Updated: 2025-11-17T23:56:30.897Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application Problem Types: CWE-732, CWE-922 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 1.0.735 and Application versions prior to 20.0.1330 (macOS/Linux client deployments) contain a vulnerability in the local inter-process communication (IPC) mechanism. The software stores IPC request and response files inside /opt/PrinterInstallerClient/tmp with world-readable and world-writable permissions. Any local user can craft malicious request files that are processed by privileg
readable and world-writable permissions. Any local user can craft malicious request files that are processed by privileged daemons, leading to unauthorized actions being executed in other user sessions. This breaks user session isolation, potentially allowing local attackers to hijack sessions, perform unintended actions in the context of other users, and impact system integrity and availability. This vulnerability has been identified by the vendor as: V-2022-004 — Client Inter-process Security. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerl
rinterlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#mac-lack-auth-communication - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-insecure-interprocess-communication
CVE ID: CVE-2025-34190 State: PUBLISHED Published: 2025-09-19T18:51:12.091Z Last Updated: 2025-11-17T23:56:31.058Z Vendors: Vasion Products: Print Application, Print Virtual Appliance Host Problem Types: CWE-306 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 25.1.102 and Application versions prior to 25.1.1413 (macOS/Linux client deployments) are vulnerable to an authentication bypass in PrinterInstallerClientService. The service requires root privileges for certain administrative operations, but these checks rely on calls to geteuid(). By preloading a malicious shared object overriding geteuid(), a local attacker can trick the service into believi
uid(). By preloading a malicious shared object overriding geteuid(), a local attacker can trick the service into believing it is running with root privileges. This bypass enables execution of administrative commands (e.g., enabling debug mode, managing configurations, or invoking privileged features) without proper authorization. While some actions requiring write access to protected files may still fail, the flaw effectively breaks the intended security model of the inter-process communication (IPC) system, allowing local attackers to escalate privileges and compromise system integrity. This vulnerability has been confirmed to be remediated, but it is unclear as to when the patch was introd
tem integrity. This vulnerability has been confirmed to be remediated, but it is unclear as to when the patch was introduced. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#mac-auth-bypass-printerinstallerclientservice - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-authentication-bypass-via-ld-preload-hooking
CVE ID: CVE-2025-34191 State: PUBLISHED Published: 2025-09-19T18:51:42.645Z Last Updated: 2025-11-17T23:56:31.228Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application Problem Types: CWE-59, CWE-276 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.843 and Application prior to 20.0.1923 (macOS/Linux client deployments) contain an arbitrary file write vulnerability via the response file handling. When tasks produce output the service writes response data into files under /opt/PrinterInstallerClient/tmp/responses/ reusing the requested filename. The service follows symbolic links in the responses directory and writes as the ser
ses/ reusing the requested filename. The service follows symbolic links in the responses directory and writes as the service user (typically root), allowing a local, unprivileged user to cause the service to overwrite or create arbitrary files on the filesystem as root. This can be used to modify configuration files, replace or inject binaries or drivers, and otherwise achieve local privilege escalation and full system compromise. This vulnerability has been identified by the vendor as: V-2023-019 — Arbitrary File Write as Root. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.
ment: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#mac-arbitrary-file-write - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-arbitrary-file-write-as-root-via-response-path-symlink-follow
CVE ID: CVE-2025-34192 State: PUBLISHED Published: 2025-09-19T18:39:01.020Z Last Updated: 2025-11-17T23:56:31.435Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application Problem Types: CWE-1104 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.893 and Application versions prior to 20.0.2140 (macOS/Linux client deployments) are built against OpenSSL 1.0.2h-fips (released May 2016), which has been end-of-life since 2019 and is no longer supported by the OpenSSL project. Continued use of this outdated cryptographic library exposes deployments to known vulnerabilities that are no longer patched, weakening the overall security postu
ic library exposes deployments to known vulnerabilities that are no longer patched, weakening the overall security posture. Affected daemons may emit deprecation warnings and rely on cryptographic components with unresolved security flaws, potentially enabling attackers to exploit weaknesses in TLS/SSL processing or cryptographic operations. This vulnerability has been identified by the vendor as: V-2023-021 — Out-of-Date OpenSSL Library. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#mac-outdated-openssl - https:
- https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#mac-outdated-openssl - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-usage-of-outdated-and-unsupported-openssl-version
CVE ID: CVE-2025-34193 State: PUBLISHED Published: 2025-09-19T18:47:35.733Z Last Updated: 2025-11-17T23:56:31.613Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application Problem Types: CWE-755, CWE-1104 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 25.1.102 and Application versions prior to 25.1.1413 include Windows client components (PrinterInstallerClientInterface.exe, PrinterInstallerClient.exe, PrinterInstallerClientLauncher.exe) that lack modern compile-time and runtime exploit mitigations and rely on outdated runtimes. These binaries are built as 32-bit, without Data Execution Prevention (DEP), Address Space Layout Randomi
ated runtimes. These binaries are built as 32-bit, without Data Execution Prevention (DEP), Address Space Layout Randomization (ASLR), Control Flow Guard (CFG), or stack-protection, and they incorporate legacy technologies (Pascal/Delphi and Python 2) which are no longer commonly maintained. Several of these processes run with elevated privileges (NT AUTHORITY\SYSTEM for PrinterInstallerClient.exe and PrinterInstallerClientLauncher.exe), and the client automatically downloads and installs printer drivers. The absence of modern memory safety mitigations and the use of unmaintained runtimes substantially increase the risk that memory-corruption or other exploit primitives — for example from cr
tained runtimes substantially increase the risk that memory-corruption or other exploit primitives — for example from crafted driver content or maliciously crafted inputs — can be turned into remote or local code execution and privilege escalation to SYSTEM. This vulnerability has been confirmed to be remediated, but it is unclear as to when the patch was introduced. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#win-insecure-programs - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https
nerabilities.html#win-insecure-programs - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-insecure-windows-components-lack-modern-memory-protections-and-use-outdated-runtimes
CVE ID: CVE-2025-34194 State: PUBLISHED Published: 2025-09-19T18:46:12.462Z Last Updated: 2025-11-17T23:56:31.790Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application Problem Types: CWE-59, CWE-377 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 25.1.102 and Application versions prior to 25.1.1413 (Windows client deployments) contain an insecure temporary-file handling vulnerability in the PrinterInstallerClient components. The software creates files as NT AUTHORITY\SYSTEM inside a directory under the control of the local user (C:\Users\%USER%\AppData\Local\Temp\). An attacker who can place symbolic links or otherwise influence
of the local user (C:\Users\%USER%\AppData\Local\Temp\). An attacker who can place symbolic links or otherwise influence filenames in that directory can cause the service to follow the link and write to arbitrary filesystem locations as SYSTEM. This allows a local, unprivileged user to overwrite or create files as SYSTEM, leading to local privilege escalation and the ability to modify configuration files, replace or inject binaries, or otherwise compromise confidentiality, integrity, and availability of the system. This vulnerability has been confirmed to be remediated, but it is unclear as to when the patch was introduced. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
it is unclear as to when the patch was introduced. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#win-lpe-02 - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-lpe-via-insecure-temporary-file-handling
CVE ID: CVE-2025-34195 State: PUBLISHED Published: 2025-09-19T18:38:11.712Z Last Updated: 2025-11-17T23:56:31.945Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application Problem Types: CWE-434 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 1.0.735 and Application prior to 20.0.1330 (Windows client deployments) contain a remote code execution vulnerability during driver installation caused by unquoted program paths. The PrinterInstallerClient driver-installation component launches programs using an unquoted path under "C:\Program Files (x86)\Printer Properties Pro\Printer Installer". Because the path is unquoted, the operating sys
under "C:\Program Files (x86)\Printer Properties Pro\Printer Installer". Because the path is unquoted, the operating system may execute a program located at a short-path location such as C:\Program.exe before the intended binaries in the quoted path. If an attacker can place or cause a program to exist at that location, it will be executed with the privileges of the installer process (which may be elevated), enabling arbitrary code execution and potential privilege escalation. This weakness can be used to achieve remote code execution and full compromise of affected Windows endpoints. This vulnerability has been identified by the vendor as: V-2022-006 — Driver Upload Security. Additional Ana
endpoints. This vulnerability has been identified by the vendor as: V-2022-006 — Driver Upload Security. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#win-rce-01 - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-unquoted-path-during-driver-installation
CVE ID: CVE-2025-34196 State: PUBLISHED Published: 2025-09-29T19:11:16.044Z Last Updated: 2025-11-17T23:56:32.107Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application Problem Types: CWE-798, CWE-522 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 25.1.102 and Application prior to 25.1.1413 (Windows client deployments) contain a hardcoded private key for the PrinterLogic Certificate Authority (CA) and a hardcoded password in product configuration files. The Windows client ships the CA certificate and its associated private key (and other sensitive settings such as a configured password) directly in shipped configuration files (f
ated private key (and other sensitive settings such as a configured password) directly in shipped configuration files (for example clientsettings.dat and defaults.ini). An attacker who obtains these files can impersonate the CA, sign arbitrary certificates trusted by the Windows client, intercept or decrypt TLS-protected communications, and otherwise perform man-in-the-middle or impersonation attacks against the product's network communications. This vulnerability has been identified by the vendor as: V-2022-001 — Configuration File Contains CA & Private Key. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.
lyst Notes: - CISA ADP Vulnrichment: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#win-hardcoded-private-key - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-hardcoded-printerlogic-ca-private-key-and-hardcoded-password
CVE ID: CVE-2025-34197 State: PUBLISHED Published: 2025-09-19T18:39:36.317Z Last Updated: 2025-11-17T23:56:32.424Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application Problem Types: CWE-798 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.951, Application prior to 20.0.2368 (VA and SaaS deployments) contain an undocumented local user account named ubuntu with a preset password and a sudoers entry granting that account passwordless root privileges (ubuntu ALL=(ALL) NOPASSWD: ALL). Anyone who knows the hardcoded password can obtain root privileges via local console or equivalent administrative access, enabling local privilege
oded password can obtain root privileges via local console or equivalent administrative access, enabling local privilege escalation. This vulnerability has been identified by the vendor as: V-2024-010 — Hardcoded Linux Password. NOTE: The patch for this vulnerability is reported to be incomplete: /etc/shadow was remediated but /etc/sudoers remains vulnerable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-hardcoded-password-ubuntu - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https:
ties.html#va-hardcoded-password-ubuntu - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-undocumented-local-account-with-hardcoded-password-and-passwordless-sudo
CVE ID: CVE-2025-34198 State: PUBLISHED Published: 2025-09-19T18:40:31.977Z Last Updated: 2025-11-17T23:56:32.583Z Vendors: Vasion Products: Print Virtual Appliance Host, Print Application Problem Types: CWE-798 Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.951 and Application prior to 20.0.2368 (VA and SaaS deployments) contain shared, hardcoded SSH host private keys in the appliance image. The same private host keys (RSA, ECDSA, and ED25519) are present across installations, rather than being uniquely generated per appliance. An attacker who obtains these private keys (for example from one compromised appliance image or another installation
ce. An attacker who obtains these private keys (for example from one compromised appliance image or another installation) can impersonate the appliance, decrypt or intercept SSH connections to appliances that use the same keys, and perform man-in-the-middle or impersonation attacks against administrative SSH sessions. This vulnerability has been identified by the vendor as: V-2024-011 — Hardcoded SSH Host Key. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-hardcoded-ssh-keys - https://help.printerlogic.com/va/P
o/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-hardcoded-ssh-keys - https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm - https://www.vulncheck.com/advisories/vasion-print-printerlogic-shared-hardcoded-ssh-host-private-keys-in-appliance-image