Lucene search
+L

906 matches found

OSV
OSV
•added 2025/10/23 9:31 p.m.•7 views

GHSA-9G4H-H484-3578 HashiCorp Vault and Vault Enterprise's AWS Auth method may be susceptible to authentication bypass

Vault and Vault Enterprise's "Vault" AWS Auth method may be susceptible to authentication bypass if the role of the configured boundprincipaliam is the same across AWS accounts, or uses a wildcard. This vulnerability is fixed in Vault Community Edition 1.21.0 and Vault Enterprise 1.21.0, 1.20.5,...

8.1CVSS7.9AI score0.00489EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/10/23 7:08 p.m.•33 views

CVE-2025-11621 Vault AWS auth method bypass due to AWS client cache

Vault and Vault Enterprise’s “Vault” AWS Auth method may be susceptible to authentication bypass if the role of the configured boundprincipaliam is the same across AWS accounts, or uses a wildcard. This vulnerability, CVE-2025-11621, is fixed in Vault Community Edition 1.21.0 and Vault Enterprise...

8.1CVSS0.00489EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/23 12:00 a.m.•16 views

HashiCorp Vault Enterprise 安全漏洞

HashiCorp Vault Enterprise is an enterprise information archiving platform from HashiCorp, Inc. in the United States. A security vulnerability exists in HashiCorp Vault Enterprise versions 1.21.0, 1.20.5, 1.19.11, and 1.16.27, which stems from the same or wildcard use of the boundprincipaliam rol...

8.1CVSS7.9AI score0.00489EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/23 12:00 a.m.•1 views

CVE-2025-59048: Incorrect Authorization

OpenBao's AWS Plugin generates AWS access credentials based on IAM policies. Prior to version 0.1.1, the AWS Plugin is vulnerable to cross-account IAM role Impersonation in the AWS auth method. The vulnerability allows an IAM role from an untrusted AWS account to authenticate by impersonating a...

8.1CVSS5.8AI score0.00266EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/16 12:00 a.m.•3 views

CVE-2025-62506: Incorrect Authorization

MinIO is a high-performance object storage system. In all versions prior to RELEASE.2025-10-15T17-29-55Z, a privilege escalation vulnerability allows service accounts and STS Security Token Service accounts with restricted session policies to bypass their inline policy restrictions when performin...

8.1CVSS7.3AI score0.00553EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•27 views

EUVD-2017-18298

Malware in sbrugna...

9.8CVSS8.2AI score0.03291EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2019-2220

Malware in sbrugna...

9CVSS7.2AI score0.01254EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2016-9368

Malware in sbrugna...

8.8CVSS8.8AI score0.01357EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•45 views

EUVD-2021-2368

Malware in sbrugna...

5.3CVSS6.1AI score0.00859EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2021-1705

Malware in sbrugna...

8.2CVSS7.8AI score0.01508EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2019-1989

Malware in sbrugna...

6.1CVSS6.9AI score0.01268EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2015-6797

Malware in sbrugna...

7.5CVSS7.6AI score0.01033EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2025-1817

Malicious code in bioql PyPI...

6.9CVSS6.6AI score0.00368EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2023-2463

Malicious code in bioql PyPI...

7.6CVSS7.5AI score0.00514EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2022-6388

Malicious code in bioql PyPI...

8.8CVSS8.3AI score0.01101EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2022-4268

Malicious code in bioql PyPI...

2.1CVSS6.3AI score0.00353EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2022-5084

Malicious code in bioql PyPI...

9.8CVSS9.3AI score0.01915EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2025-0113

Malicious code in bioql PyPI...

8.1CVSS6.3AI score0.00327EPSS
SaveExploits0References9
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•24 views

EUVD-2024-1151

Malicious code in bioql PyPI...

9.8CVSS9AI score0.01665EPSS
SaveExploits2References9
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•34 views

EUVD-2025-19636

Malicious code in bioql PyPI...

5.7CVSS6.6AI score0.00163EPSS
SaveExploits0References3
Rows per page
Query Builder