https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 17:25:49 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-223403 EUVD-2026-223403 https://cve.radiocsirt.org/vuln/euvd-2026-223403 https://cve.radiocsirt.org/vuln/fkie_cve-2024-39926 <p>An issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3. A stored cross-site scripting (XSS) or, due to the default CSP, HTML injection vulnerability has been discovered in the admin dashboard. This potentially allows an authenticated attacker to inject malicious code into the dashboard, which is then executed or rendered in the context of an administrator&#39;s browser when viewing the injected content. However, it is important to note that the default Content Security Policy (CSP) of the application blocks most exploitation paths, significantly mitigating the potential impact.</p> <p>An issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3. A stored cross-site scripting (XSS) or, due to the default CSP, HTML injection vulnerability has been discovered in the admin dashboard. This potentially allows an authenticated attacker to inject malicious code into the dashboard, which is then executed or rendered in the context of an administrator&#39;s browser when viewing the injected content. However, it is important to note that the default Content Security Policy (CSP) of the application blocks most exploitation paths, significantly mitigating the potential impact.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-39926 https://cve.radiocsirt.org/vuln/ghsa-vfwm-h968-g65h <p>An issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3. A stored cross-site scripting (XSS) or, due to the default CSP, HTML injection vulnerability has been discovered in the admin dashboard. This potentially allows an authenticated attacker to inject malicious code into the dashboard, which is then executed or rendered in the context of an administrator&#39;s browser when viewing the injected content. However, it is important to note that the default Content Security Policy (CSP) of the application blocks most exploitation paths, significantly mitigating the potential impact.</p> <p>An issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3. A stored cross-site scripting (XSS) or, due to the default CSP, HTML injection vulnerability has been discovered in the admin dashboard. This potentially allows an authenticated attacker to inject malicious code into the dashboard, which is then executed or rendered in the context of an administrator&#39;s browser when viewing the injected content. However, it is important to note that the default Content Security Policy (CSP) of the application blocks most exploitation paths, significantly mitigating the potential impact.</p> https://cve.radiocsirt.org/vuln/ghsa-vfwm-h968-g65h https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2147 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Vaultwarden ausnutzen, um Informationen offenzulegen, erhöhte Rechte zu erlangen und einen Cross-Site-Scripting-Angriff zu starten.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Vaultwarden ausnutzen, um Informationen offenzulegen, erhöhte Rechte zu erlangen und einen Cross-Site-Scripting-Angriff zu starten.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2147