EUVD-2025-24034

Malicious code in bioql PyPI...

EUVD-2025-24033

Malicious code in bioql PyPI...

EUVD-2025-24036

Malicious code in bioql PyPI...

OPENSUSE-SU-2025:15579-1 openbao-2.4.1-1.1 on GA media

These are all security issues fixed in the openbao-2.4.1-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: php-fpmexporter, karpenter, kubernetes-dashboard-fips, wazero-fips, terraform-provider-tls-fips, secrets-store-csi-driver-provider-aws, custom-pod-autoscaler-operator, k8sgpt-operator, karpenter-fips, etcd-fips, prometheus-beat-exporter-fips, lvm-driver,...

The vulnerability of OpenBao’s secret and encryption management system, related to insufficient restrictions on authentication attempts, allows a perpetrator to gain access to confidential information.

The vulnerability of the OpenBao encryption and secret management system is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information...

The vulnerability of OpenBao’s encryption and secret management system, related to the exposure of information through incompatibility, allows attackers to gain access to confidential information.

The vulnerability of the OpenBao encryption and secret management system is related to the exposure of information through incompatibility. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information...

The vulnerability of OpenBao’s secret and encryption management system, related to improper handling of code generation, allows a perpetrator to execute arbitrary codes.

The vulnerability of the OpenBao encryption and secret management system lies in improper handling of code generation, particularly by manipulating the prefixes of logs. Exploiting this vulnerability allows a remote attacker to generate arbitrary codes...

The vulnerability of OpenBao’s secret and encryption management system, related to improper handling of vulnerabilities, allows attackers to gain access to confidential information.

The vulnerability of the OpenBao secret and encryption management system is related to improper elimination of vulnerabilities in the basic TOTP library. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information...

The vulnerability of OpenBao’s secret and encryption management system, related to improper handling of vulnerabilities, allows attackers to circumvent existing security restrictions.

The vulnerability of the OpenBao encryption and secret management system lies in the improper handling of gaps during the processing of the parameter usernameasalias=true in the LDAP authentication method. Exploiting this vulnerability allows a malicious actor to circumvent existing security...

The vulnerability of the OpenBao encryption and secret management system, related to improper management of privileges, allows a perpetrator to elevate their privileges.

The vulnerability of the OpenBao encryption and secret management system is related to improper management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of OpenBao’s secret and encryption management system lies in its insufficient limit on authentication attempts, allowing attackers to circumvent existing security restrictions.

The vulnerability of the OpenBao encryption and secret management system is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

Linux Distros Unpatched Vulnerability : CVE-2025-52893

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. OpenBao before v2.3.0 m...

openbao-2.3.2-1.1 on GA media (moderate)

openbao-2.3.2-1.1 on GA media Announcement ID: openSUSE-SU-2025:15461-1 Rating: moderate Cross-References: CVE-2025-54996 CVE-2025-55000 CVE-2025-55003 CVE-2025-5999 CVE-2025-6000 CVE-2025-6004 CVE-2025-6010 CVE-2025-6011 CVE-2025-6013 CVE-2025-6014 CVE-2025-6015 CVSS scores: CVE-2025-6000 SUSE :...

OPENSUSE-SU-2025:15460-1 openbao-2.3.2-1.1 on GA media

These are all security issues fixed in the openbao-2.3.2-1.1 package on the GA media of openSUSE Tumbleweed...

OpenBao suffers from an unspecified vulnerability (CNVD-2025-18607)

OpenBao is OpenBao open source a sensitive data management software . A security vulnerability exists in OpenBao versions 0.1.0 through 2.3.1, which stems from the TOTP key engine being able to accept valid code multiple times, and no details of the vulnerability are provided at this time...

OpenBao suffers from an unspecified vulnerability (CNVD-2025-18606)

OpenBao is OpenBao open source a sensitive data management software . A security vulnerability exists in OpenBao 2.3.1 and earlier versions that can be exploited by an attacker to cause bypassing of internal rate limiting and reuse of existing MFA code...

OpenBao has an unspecified vulnerability (CNVD-2025-18598)

OpenBao is OpenBao open source a sensitive data management software . A security vulnerability exists in OpenBao 2.3.1 and earlier versions, which can be exploited by attackers to cause MFA requirements to be bypassed...

OpenBao has an unspecified vulnerability (CNVD-2025-18599)

OpenBao is OpenBao open source a sensitive data management software . OpenBao has a security vulnerability that can be exploited by attackers to cause a brute-force crack...

OpenBao has an unspecified vulnerability (CNVD-2025-18597)

OpenBao is OpenBao open source a sensitive data management software . A security vulnerability exists in OpenBao 2.3.1 and earlier versions that can be exploited by attackers to cause elevation of privilege...