Lucene search
K

571 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-26051

Malicious code in bioql PyPI...

5.5CVSS6.6AI score0.00268EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2021-9780

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.00657EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2023-2629

Malicious code in bioql PyPI...

9.8CVSS9AI score0.00808EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2024-2326

Malicious code in bioql PyPI...

9.1CVSS8.8AI score0.00722EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/10/01 1:20 p.m.10 views

CVE-2025-34217

Vasion Print formerly PrinterLogic Virtual Appliance Host and Application VA/SaaS deployments contain an undocumented 'printerlogic' user with a hardcoded SSH public key in '/.ssh/authorizedkeys' and a sudoers rule granting the printerlogicssh group 'NOPASSWD: ALL'. Possession of the matching...

10CVSS6.8AI score0.00697EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/09/30 7:37 p.m.10 views

CVE-2025-34196

Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 25.1.102 and Application prior to 25.1.1413 Windows client deployments contain a hardcoded private key for the PrinterLogic Certificate Authority CA and a hardcoded password in product configuration files. The Windows...

9.8CVSS6.9AI score0.00445EPSS
Exploits1References1
NVD
NVD
added 2025/09/30 2:15 p.m.9 views

CVE-2025-34217

Vasion Print formerly PrinterLogic Virtual Appliance Host and Application VA/SaaS deployments contain an undocumented 'printerlogic' user with a hardcoded SSH public key in '/.ssh/authorizedkeys' and a sudoers rule granting the printerlogicssh group 'NOPASSWD: ALL'. Possession of the matching...

10CVSS0.00697EPSS
Exploits1References4
Cvelist
Cvelist
added 2025/09/30 1:3 p.m.9 views

CVE-2025-34217 Vasion Print (formerly PrinterLogic) Undocumented Hardcoded SSH Key

Vasion Print formerly PrinterLogic Virtual Appliance Host and Application VA/SaaS deployments contain an undocumented 'printerlogic' user with a hardcoded SSH public key in '/.ssh/authorizedkeys' and a sudoers rule granting the printerlogicssh group 'NOPASSWD: ALL'. Possession of the matching...

10CVSS0.00697EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/09/30 1:3 p.m.4 views

CVE-2025-34217 Vasion Print (formerly PrinterLogic) Undocumented Hardcoded SSH Key

Vasion Print formerly PrinterLogic Virtual Appliance Host and Application VA/SaaS deployments contain an undocumented 'printerlogic' user with a hardcoded SSH public key in '/.ssh/authorizedkeys' and a sudoers rule granting the printerlogicssh group 'NOPASSWD: ALL'. Possession of the matching...

10CVSS6.5AI score0.00697EPSS
Exploits1References4
CVE
CVE
added 2025/09/30 1:3 p.m.22 views

CVE-2025-34217

CVE-2025-34217 concerns Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA/SaaS deployments). The advisory documents an undocumented local user named printerlogic with a hardcoded SSH public key stored in ~/.ssh/authorized_keys and a sudoers rule giving the printerlog...

10CVSS6.5AI score0.00697EPSS
Exploits1References4Affected Software2
CNNVD
CNNVD
added 2025/09/30 12:0 a.m.2 views

Vasion Print Virtual Appliance Host和Vasion Print Application 安全漏洞

Vasion Print Virtual Appliance Host and Vasion Print Application are both products of Vasion Corporation of the U.S.A. Vasion Print Virtual Appliance Host is a print management software.Vasion Print Vasion Print Application is a printer management application. A security vulnerability exists in...

10CVSS6.6AI score0.00697EPSS
Exploits1References4
OSV
OSV
added 2025/09/29 9:15 p.m.3 views

CVE-2025-34209

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to 22.0.862 and Application prior to 20.0.2014 VA and SaaS deployments contain Docker images with the private GPG key and passphrase for the account no‑reply+virtual‑[email protected]. The key is stored in cleartext and the...

7.2CVSS5.8AI score
Exploits0References4
Cvelist
Cvelist
added 2025/09/29 8:35 p.m.34 views

CVE-2025-34209 Vasion Print (formerly PrinterLogic) Hardcoded GPG Private Key

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to 22.0.862 and Application prior to 20.0.2014 VA and SaaS deployments contain Docker images with the private GPG key and passphrase for the account no‑reply+virtual‑[email protected]. The key is stored in cleartext and the...

9.4CVSS0.00656EPSS
Exploits1References4
NVD
NVD
added 2025/09/22 4:15 p.m.15 views

CVE-2025-57601

AiKaan Cloud Controller uses a single hardcoded SSH private key and the username proxyuser for remote terminal access to all managed IoT/edge devices. When an administrator initiates "Open Remote Terminal" from the AiKaan dashboard, the controller sends this same static private key to the target...

9.8CVSS0.00397EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/09/22 12:0 a.m.11 views

CVE-2025-57602

Insufficient hardening of the proxyuser account in the AiKaan IoT management platform, combined with the use of a shared, hardcoded SSH private key, allows remote attackers to authenticate to the cloud controller, gain interactive shell access, and pivot into other connected IoT devices. This can...

0.00494EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/09/22 12:0 a.m.8 views

PT-2025-38730

Name of the Vulnerable Software and Affected Versions AiKaan Cloud Controller affected versions not specified Description The AiKaan Cloud Controller utilizes a single, hardcoded SSH private key and the username proxyuser for remote terminal access to all managed IoT/edge devices. When an...

9.8CVSS6.6AI score0.00397EPSS
Exploits0References3
CVE
CVE
added 2025/09/22 12:0 a.m.25 views

CVE-2025-57601

Affected software : AiKaan Cloud Controller. Vulnerability : uses a single hardcoded SSH private key and the same proxyuser for remote terminal access to all managed IoT/edge devices; when Open Remote Terminal is invoked, the static key is sent to the target device, enabling reverse SSH tunnels t...

9.8CVSS6.7AI score0.00397EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/09/18 12:29 p.m.11 views

CVE-2025-55112

Out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlier unsupported versions that are configured to use the non-default Blowfish cryptography algorithm use a hardcoded key. An attacker with access to network traffic and to this key could decrypt network traffic between th...

7.6CVSS6.7AI score0.00202EPSS
Exploits0References1
NVD
NVD
added 2025/09/16 1:16 p.m.4 views

CVE-2025-55112

Out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlier unsupported versions that are configured to use the non-default Blowfish cryptography algorithm use a hardcoded key. An attacker with access to network traffic and to this key could decrypt network traffic between th...

7.6CVSS0.00202EPSS
Exploits0References2
OSV
OSV
added 2025/09/16 1:16 p.m.5 views

CVE-2025-55112

Out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlier unsupported versions that are configured to use the non-default Blowfish cryptography algorithm use a hardcoded key. An attacker with access to network traffic and to this key could decrypt network traffic between th...

7.6CVSS5.8AI score
Exploits0References2
Rows per page
Query Builder