601 matches found
CVE-2025-11971
GitLab EE fixed CVE-2025-11971, which allowed an authenticated attacker to trigger unauthorized pipeline executions by manipulating commits. Affected versions were 10.6 to before 18.3.5, 18.3.x before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1; remediation was released as patch updates (n...
EUVD-2025-35718
Hashicorp Vault and Vault Enterprise vulnerable to a denial of service when processing JSON...
HashiCorp Vault and Vault Enterprise's AWS Auth method may be susceptible to authentication bypass
Vault and Vault Enterprise's "Vault" AWS Auth method may be susceptible to authentication bypass if the role of the configured boundprincipaliam is the same across AWS accounts, or uses a wildcard. This vulnerability is fixed in Vault Community Edition 1.21.0 and Vault Enterprise 1.21.0, 1.20.5,...
CVE-2025-11621
Vault and Vault Enterprise’s “Vault” AWS Auth method may be susceptible to authentication bypass if the role of the configured boundprincipaliam is the same across AWS accounts, or uses a wildcard. This vulnerability, CVE-2025-11621, is fixed in Vault Community Edition 1.21.0 and Vault Enterprise...
CVE-2025-59530
CVE-2025-59530 affects quic-go, a QUIC protocol implementation in Go. In versions prior to 0.49.0, 0.54.1, and 0.55.0 a misbehaving or malicious server can trigger an assertion during the handshake, causing a DoS by crashing the client. This requires no authentication and can occur during the han...
EUVD-2020-25326
Malware in sbrugna...
EUVD-2021-26499
Malware in sbrugna...
EUVD-2020-0213
Malware in sbrugna...
EUVD-2017-16263
Malware in sbrugna...
EUVD-2020-0447
Malware in sbrugna...
EUVD-2020-28251
Malware in sbrugna...
EUVD-2021-10024
Malware in sbrugna...
EUVD-2015-7364
Malware in sbrugna...
EUVD-2020-25374
Malware in sbrugna...
EUVD-2019-10104
Malware in sbrugna...
PT-2025-41013
Name of the Vulnerable Software and Affected Versions Rack versions prior to 2.2.19 Rack versions prior to 3.1.17 Rack versions prior to 3.2.2 Description Rack is a modular Ruby web server interface. The Rack::Multipart::Parser component stores non-file form fields in memory as Ruby String object...
EUVD-2025-26253
Malicious code in bioql PyPI...
EUVD-2022-1741
Malicious code in bioql PyPI...