361,800
Total CVEs
26,223
Critical
85,816
High
1,626
CISA KEV
0
This Week
28 results · Page 2/2
Bitwarden through 2023.2.1 offers password auto-fill within a cross-domain IFRAME element. NOTE: the vendor's position is that there have been important legitimate cross-domain configurations (e.g., an apple.com IFRAME element on the icloud.com website) and that "Auto-fill on page load" is not enabled by default.
bitwarden
Bitwarden Server 1.35.1 allows SSRF because it does not consider certain IPv6 addresses (ones beginning with fc, fd, fe, or ff, and the :: address) and certain IPv4 addresses (0.0.0.0/8, 127.0.0.0/8, and 169.254.0.0/16).
bitwarden
The Bitwarden server through 1.32.0 has a potentially unwanted KDF.
bitwarden