305 matches found
EUVD-2011-3540
Malware in sbrugna...
EUVD-2021-1009
Malware in sbrugna...
EUVD-2021-18456
Malware in sbrugna...
EUVD-2012-2280
Malware in sbrugna...
EUVD-2020-19370
Malware in sbrugna...
EUVD-2021-1396
Malware in sbrugna...
EUVD-2012-2700
Malware in sbrugna...
GHSA-F2HF-PFRJ-VRM7 XWiki OIDC Authenticator: Users with "view" access can create tokens for any users they can view
Impact Anyone with VIEW access to a user profile can create a token for that user. If that XWiki instance is configured to allow token authentication, it allows authentication with any user since users are very commonly viewable, at least to other registered users. Patches Version 2.18.2...
CVE-2025-49594 XWiki OIDC Authenticator vulnerable to creation of token for any user with just `view` right
XWiki OIDC has various tools to manipulate OpenID Connect protocol in XWiki. Starting in version 2.17.1 and prior to version 2.18.2, anyone with VIEW access to a user profile can create a token for that user. If that XWiki instance is configured to allow token authentication, it allows...
CVE-2025-61673 Karapace is vulnerable to Authentication Bypass
Karapace is an open-source implementation of Kafka REST and Schema Registry. Versions 5.0.0 and 5.0.1 contain an authentication bypass vulnerability when configured to use OAuth 2.0 Bearer Token authentication. If a request is sent without an Authorization header, the token validation logic is...
EUVD-2023-1265
Malicious code in bioql PyPI...
EUVD-2023-54575
Malicious code in bioql PyPI...
EUVD-2024-3142
Malicious code in bioql PyPI...
EUVD-2023-1266
Malicious code in bioql PyPI...
EUVD-2024-2648
Malicious code in bioql PyPI...
EUVD-2023-1966
Malicious code in bioql PyPI...
EUVD-2023-2786
Malicious code in bioql PyPI...
EUVD-2025-3999
Malicious code in bioql PyPI...
EUVD-2025-14949
Malicious code in bioql PyPI...
CVE-2025-59036
Infrahub offers a central hub to manage data, templates, and playbooks. Prior to versiond 1.3.9 and 1.4.5, a bug in the authentication logic will cause API tokens that were deleted and/or expired to be considered valid. This means that any API token that is associated with an active user account...