75 matches found
PT-2026-39662
Name of the Vulnerable Software and Affected Versions Bitwarden Server versions prior to 2026.4.1 Description A missing authorization issue allows any authenticated user to write ciphers into an arbitrary organization. This occurs when submitting an empty collections array to the 'POST...
Vaultwarden 安全漏洞
Vaultwarden is an alternative implementation of the Bitwarden server API, developed by Daniel García. Versions of Vaultwarden prior to 1.35.4 contained security vulnerabilities. These vulnerabilities stemmed from the Manager’s ability to execute multiple management operations even when the...
EUVD-2019-9366
Malware in sbrugna...
EUVD-2020-7858
Malware in sbrugna...
EUVD-2025-3679
Malicious code in bioql PyPI...
CVE-2020-15879
Bitwarden Server 1.35.1 allows SSRF because it does not consider certain IPv6 addresses ones beginning with fc, fd, fe, or ff, and the :: address and certain IPv4 addresses 0.0.0.0/8, 127.0.0.0/8, and 169.254.0.0/16...
CVE-2019-19766
The Bitwarden server through 1.32.0 has a potentially unwanted KDF...
[SECURITY] Fedora 41 Update: vaultwarden-1.33.2-1.fc41
Unofficial Bitwarden compatible server...
[SECURITY] Fedora 40 Update: vaultwarden-1.33.0-1.fc40
Unofficial Bitwarden compatible server...
Bitwarden Server Code Issue Vulnerability
Bitwarden is a U.S. Bitwarden company's open source password manager. Bitwarden server is Bitwarden's core infrastructure back-end server. A code issue vulnerability exists in Bitwarden Server version 1.35.1. A remote attacker can exploit this vulnerability to obtain sensitive data with the help ...
CVE-2020-15879
Bitwarden Server 1.35.1 allows SSRF because it does not consider certain IPv6 addresses ones beginning with fc, fd, fe, or ff, and the :: address and certain IPv4 addresses 0.0.0.0/8, 127.0.0.0/8, and 169.254.0.0/16...
Server side request forgery (ssrf)
Bitwarden Server 1.35.1 allows SSRF because it does not consider certain IPv6 addresses ones beginning with fc, fd, fe, or ff, and the :: address and certain IPv4 addresses 0.0.0.0/8, 127.0.0.0/8, and 169.254.0.0/16...
CVE-2020-15879: Server-Side Request Forgery (SSRF)
Bitwarden Server 1.35.1 allows SSRF because it does not consider certain IPv6 addresses ones beginning with fc, fd, fe, or ff, and the :: address and certain IPv4 addresses 0.0.0.0/8, 127.0.0.0/8, and 169.254.0.0/16...
Bitwarden server encryption issue vulnerability
Bitwarden is an open source password manager.Bitwarden server is the core infrastructure of Bitwarden back-end server . A cryptographic vulnerability exists in Bitwarden server version 1.32.0 and earlier versions. The vulnerability stems from a network system or product that does not properly use...