https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 14:48:30 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-223467 EUVD-2026-223467 https://cve.radiocsirt.org/vuln/euvd-2026-223467 https://cve.radiocsirt.org/vuln/fkie_cve-2024-39924 <p>An issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3. A vulnerability has been identified in the authentication and authorization process of the endpoint responsible for altering the metadata of an emergency access. It permits an attacker with granted emergency access to escalate their privileges by changing the access level and modifying the wait time. Consequently, the attacker can gain full control over the vault (when only intended to have read access) while bypassing the necessary wait period.</p> <p>An issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3. A vulnerability has been identified in the authentication and authorization process of the endpoint responsible for altering the metadata of an emergency access. It permits an attacker with granted emergency access to escalate their privileges by changing the access level and modifying the wait time. Consequently, the attacker can gain full control over the vault (when only intended to have read access) while bypassing the necessary wait period.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-39924 https://cve.radiocsirt.org/vuln/ghsa-974p-hhmc-6h46 <p>An issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3. A vulnerability has been identified in the authentication and authorization process of the endpoint responsible for altering the metadata of an emergency access. It permits an attacker with granted emergency access to escalate their privileges by changing the access level and modifying the wait time. Consequently, the attacker can gain full control over the vault (when only intended to have read access) while bypassing the necessary wait period.</p> <p>An issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3. A vulnerability has been identified in the authentication and authorization process of the endpoint responsible for altering the metadata of an emergency access. It permits an attacker with granted emergency access to escalate their privileges by changing the access level and modifying the wait time. Consequently, the attacker can gain full control over the vault (when only intended to have read access) while bypassing the necessary wait period.</p> https://cve.radiocsirt.org/vuln/ghsa-974p-hhmc-6h46 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2147 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Vaultwarden ausnutzen, um Informationen offenzulegen, erhöhte Rechte zu erlangen und einen Cross-Site-Scripting-Angriff zu starten.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Vaultwarden ausnutzen, um Informationen offenzulegen, erhöhte Rechte zu erlangen und einen Cross-Site-Scripting-Angriff zu starten.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2147