Lucene search
+L

134 matches found

PyPA
PyPA
added 2026/07/07 11:45 a.m.17 views

OpenStack Barbican credential leak flaw

A credentials leak flaw was found in OpenStack Barbican. This flaw allows a local authenticated attacker to read the configuration file, gaining access to sensitive credentials...

6.6CVSS6.5AI score0.00193EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2026/07/07 11:45 a.m.9 views

PYSEC-2026-1213 OpenStack Barbican credential leak flaw

A credentials leak flaw was found in OpenStack Barbican. This flaw allows a local authenticated attacker to read the configuration file, gaining access to sensitive credentials...

6.6CVSS6.5AI score0.00193EPSS
SaveExploits0References6
PyPA
PyPA
added 2026/07/07 11:45 a.m.26 views

OpenStack Barbican information disclosure vulnerability

A vulnerability was found in OpenStack Barbican containers. This vulnerability is only applicable to deployments that utilize an all-in-one configuration. Barbican containers share the same CGROUP, USER, and NET namespace with the host system and other OpenStack services. If any service is...

6CVSS6.1AI score0.00484EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2026/07/07 11:45 a.m.9 views

PYSEC-2026-1214 OpenStack Barbican information disclosure vulnerability

A vulnerability was found in OpenStack Barbican containers. This vulnerability is only applicable to deployments that utilize an all-in-one configuration. Barbican containers share the same CGROUP, USER, and NET namespace with the host system and other OpenStack services. If any service is...

6CVSS6.1AI score0.00484EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/06 8:03 a.m.10 views

PYSEC-2026-785 openstack-barbican Denial of Service vulnerability

An authorization flaw was found in openstack-barbican, where anyone with an admin role could add secrets to a different project container. This flaw allows an attacker on the network to consume protected resources and cause a denial of service...

4.9CVSS6.4AI score0.01258EPSS
SaveExploits0References12
OSV
OSV
added 2026/07/06 8:03 a.m.8 views

PYSEC-2026-786 Barbican authorization flaw before v14.0.0

An authorization flaw was found in openstack-barbican. The default policy rules for the secret metadata API allowed any authenticated user to add, modify, or delete metadata from any secret regardless of ownership. This flaw allows an attacker on the network to modify or delete protected data,...

8.1CVSS6.7AI score0.01036EPSS
SaveExploits0References11
BDU FSTEC
BDU FSTEC
added 2026/03/25 12:00 a.m.9 views

The vulnerability of the openstack-barbican component in the Red Hat OpenStack Platform cloud service platform allows a hacker to gain unauthorized access to protected information.

The vulnerability of the openstack-barbican component in the Red Hat OpenStack Platform cloud service platform is related to insufficient spatial partitioning. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

6CVSS5.8AI score0.00484EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/03/25 12:00 a.m.10 views

The vulnerability of the openstack-barbican component in the Red Hat OpenStack Platform cloud service platform allows a hacker to gain unauthorized access to protected information.

The vulnerability of the openstack-barbican component in the Red Hat OpenStack Platform cloud service platform is related to errors in information processing. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information...

6.6CVSS5.8AI score0.00193EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/03/23 12:00 a.m.13 views

The vulnerability of the openstack-barbican component in the Red Hat OpenStack Platform cloud service platform allows a hacker to escalate their privileges.

The vulnerability of the openstack-barbican component in the Red Hat OpenStack Platform cloud service platform relates to the bypassing of authentication processes. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...

5.9CVSS5.7AI score0.00433EPSS
SaveExploits0References5Affected Software3
Redos
Redos
added 2026/01/29 12:00 a.m.7 views

ROS-20260129-73-0003

Vulnerability in openstack-barbican related to insufficient spatial partitioning. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

6CVSS6.2AI score0.00484EPSS
SaveExploits0
Redos
Redos
added 2026/01/29 12:00 a.m.10 views

ROS-20260129-73-0002

Vulnerability in openstack-barbican related to lack of protection of proprietary data. Exploitation of the vulnerability may allow a remote attacker to gain unauthorized access to protected information...

6.6CVSS5.9AI score0.00193EPSS
SaveExploits0
Redos
Redos
added 2026/01/29 12:00 a.m.9 views

ROS-20260129-73-0001

Vulnerability in openstack-barbican related to authentication bypass due to an initial bug. Exploitation of the vulnerability could allow an attacker acting remotely to escalate their privileges...

5.9CVSS5.9AI score0.00433EPSS
SaveExploits0
EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2023-2450

Malicious code in bioql PyPI...

6CVSS5.7AI score0.00484EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/03 8:07 p.m.14 views

EUVD-2022-42529

Malicious code in bioql PyPI...

5.9CVSS5.9AI score0.00433EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/03 8:07 p.m.12 views

EUVD-2022-6721

Malicious code in bioql PyPI...

4.9CVSS5.6AI score0.01258EPSS
SaveExploits0References12
EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2023-2449

Malicious code in bioql PyPI...

6.6CVSS6AI score0.00193EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/03 8:07 p.m.12 views

EUVD-2022-6888

Malicious code in bioql PyPI...

8.1CVSS6.5AI score0.01036EPSS
SaveExploits0References12
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2022-3100

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the openstack-barbican component. This issue allows an access policy bypass via a query string when accessing the API. CVE-2022-3100 Note th...

5.9CVSS6.1AI score0.00433EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2022-23451

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authorization flaw was found in openstack-barbican. The default policy rules for the secret metadata API allowed any authenticated user to add, modify, or...

8.1CVSS6.5AI score0.01036EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2022-23452

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authorization flaw was found in openstack-barbican, where anyone with an admin role could add secrets to a different project container. This flaw allows an...

4.9CVSS5.6AI score0.01258EPSS
SaveExploits0References2
Rows per page
Query Builder