115 matches found
CVE-2026-2590
Improper enforcement of the Disable password saving in vaults setting in the connection entry component in Devolutions Remote Desktop Manager 2025.3.30 and earlier allows an authenticated user to persist credentials in vault entries, potentially exposing sensitive information to other users, by...
CVE-2026-27801
Vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwardenrs. Vaultwarden versions 1.34.3 and prior are susceptible to a 2FA bypass when performing protected actions. An attacker who gains authenticated access to a user’s account can exploit this bypass ...
Vaultwarden 安全漏洞
Vaultwarden is an alternative implementation of the Bitwarden server API, developed by Daniel García. Versions of Vaultwarden 1.34.3 and earlier contained security vulnerabilities. These vulnerabilities stemmed from the ability to bypass two-factor authentication when performing protected...
CVE-2026-2590
Improper enforcement of the Disable password saving in vaults setting in the connection entry component in Devolutions Remote Desktop Manager 2025.3.30 and earlier allows an authenticated user to persist credentials in vault entries, potentially exposing sensitive information to other users, by...
CVE-2026-2590
CVE-2026-2590 affects Devolutions Remote Desktop Manager up to version 2025.3.30. The issue is improper enforcement of the Disable password saving in vaults setting in the connection entry component, allowing an authenticated user to persist credentials in vault entries by creating or editing cer...
GHSA-9H8M-3FM2-QJRQ vulnerabilities
Vulnerabilities for packages: cerbos-fips, pulumi-kubernetes-operator, prometheus-alertmanager, loki-fips, tekton-pipelines-fips, scorecard, sftpgo-plugin-pubsub, terraform-provider-grafana-fips, spicedb-operator, kubernetes-dns-node-cache-fips, jaeger-operator-fips, kube-vip-cloud-provider,...
CVE-2025-11065 vulnerabilities
Vulnerabilities for packages: bank-vaults, jitsucom-bulker...
CVE-2025-11065 vulnerabilities
Vulnerabilities for packages: tkn-fips, jitsucom-bulker, grafana, kyverno-notation-aws-fips, mattermost-fips, k9s-fips, beats-fips, grafana-fips, rancher-security-scan, bank-vaults, beats, neuvector-sigstore-interface-fips, gitlab-cng, gitlab-cng-fips, boring-registry-fips, zitadel, kyverno,...
GHSA-FRHW-MQJ2-WXW2 vulnerabilities
Vulnerabilities for packages: wave, sops, harbor, ip-masq-agent, rancher-helm, dfc, otel-cli, xeol, pguser, spegel, kubernetes-event-exporter, custom-pod-autoscaler-operator, yunikorn-web, oras, nerdctl, sbom-scorecard, timestamp-authority, whereabouts, docker-credential-acr-env, go-bindata,...
Malicious code in haedal-vaults-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4cdc575f935d62b37b17082181381a8002b5784fedda1dfc854ef2f74f39edf6 The OpenSSF Package Analysis project identified 'haedal-vaults-sdk' @ 1.6.0 npm as malicious. It is considered malicious because: - The package...
MAL-2025-48948 Malicious code in haedal-vaults-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4cdc575f935d62b37b17082181381a8002b5784fedda1dfc854ef2f74f39edf6 The OpenSSF Package Analysis project identified 'haedal-vaults-sdk' @ 1.6.0 npm as malicious. It is considered malicious because: - The package...
Information Disclosure
sigs.k8s.io/secrets-store-sync-controller is vulnerable to Information Disclosure. The vulnerability is due to improper error handling and service account tokens being logged during parameter marshaling errors, and attackers with log access can use these tokens to retrieve secrets from cloud vaul...
EUVD-2023-33930
Malicious code in bioql PyPI...
EUVD-2025-6156
Malicious code in bioql PyPI...
EUVD-2022-4934
Malicious code in bioql PyPI...
EUVD-2023-33890
Malicious code in bioql PyPI...
EUVD-2025-16378
Malicious code in bioql PyPI...
GHSA-GWRF-JF3H-W649 vulnerabilities
Vulnerabilities for packages: pvc-autoresizer, kube-vip-cloud-provider, vault-benchmark, linkerd2-proxy-init, bank-vaults, rancher-machine, k8sgpt-operator, checksec, gostatsd, mongodb-kubernetes-operator, ctop, sftpgo-plugin-pubsub, lvm-driver, sftpgo-plugin-geoipfilter,...
CVE-2025-47906 vulnerabilities
Vulnerabilities for packages: pvc-autoresizer, kube-vip-cloud-provider, vault-benchmark, linkerd2-proxy-init, bank-vaults, rancher-machine, k8sgpt-operator, checksec, gostatsd, mongodb-kubernetes-operator, ctop, sftpgo-plugin-pubsub, lvm-driver, sftpgo-plugin-geoipfilter,...
Malicious code in noya-vaults (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c04ef9aa2ad40a3e1dacb5babc831a84e76560f5eddec262e912da4087187a49 The OpenSSF Package Analysis project identified 'noya-vaults' @ 1.0.1...