304 matches found
CVE-2025-59425
A flaw was found in vLLM’s API token authentication logic, where token comparisons were not performed in constant time. This weakness could allow an attacker to exploit timing differences to guess valid tokens and bypass authentication. Mitigation Mitigation for this issue is either not available...
EUVD-2011-3540
Malware in sbrugna...
EUVD-2021-1009
Malware in sbrugna...
EUVD-2020-19370
Malware in sbrugna...
EUVD-2021-1396
Malware in sbrugna...
EUVD-2012-2280
Malware in sbrugna...
EUVD-2021-18456
Malware in sbrugna...
EUVD-2012-2700
Malware in sbrugna...
GHSA-F2HF-PFRJ-VRM7 XWiki OIDC Authenticator: Users with "view" access can create tokens for any users they can view
Impact Anyone with VIEW access to a user profile can create a token for that user. If that XWiki instance is configured to allow token authentication, it allows authentication with any user since users are very commonly viewable, at least to other registered users. Patches Version 2.18.2...
CVE-2025-49594 XWiki OIDC Authenticator vulnerable to creation of token for any user with just `view` right
XWiki OIDC has various tools to manipulate OpenID Connect protocol in XWiki. Starting in version 2.17.1 and prior to version 2.18.2, anyone with VIEW access to a user profile can create a token for that user. If that XWiki instance is configured to allow token authentication, it allows...
CVE-2025-61673 Karapace is vulnerable to Authentication Bypass
Karapace is an open-source implementation of Kafka REST and Schema Registry. Versions 5.0.0 and 5.0.1 contain an authentication bypass vulnerability when configured to use OAuth 2.0 Bearer Token authentication. If a request is sent without an Authorization header, the token validation logic is...
EUVD-2023-1265
Malicious code in bioql PyPI...
EUVD-2023-54575
Malicious code in bioql PyPI...
EUVD-2023-1966
Malicious code in bioql PyPI...
EUVD-2023-1266
Malicious code in bioql PyPI...
EUVD-2024-2648
Malicious code in bioql PyPI...
EUVD-2024-3142
Malicious code in bioql PyPI...
EUVD-2023-2786
Malicious code in bioql PyPI...