İçeriğe atla
Noroxi

bitwarden kayıtları

bitwarden üreticisine ait 14 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%50
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 20
  3. 23
  4. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Bug bounty kapsamı

Ürünün üreticisi herkese açık bir programda görünüyor. Eşleşme ad üzerinden yapıldı; kapsam metnini programda doğrulayın.

Tüm kayıtlar

14 kayıt
  • CVE-2026-60104
    37İzleyin

    Bitwarden Server < 2026.6.0 Authorization Bypass via Admin Auth Request

    KritikCVSS 9,3İstismar yokEPSS %0

    bitwarden · server8 Tem 2026

  • CVE-2026-43639
    35İzleyin

    Bitwarden Server < 2026.4.0 Missing Authorization via Provider Clients

    YüksekCVSS 8,9İstismar yokEPSS %1

    bitwarden · server11 May 2026

  • CVE-2026-42994
    35İzleyin

    Bitwarden CLI 2026.4.0 from 2026-04-22T21:57Z to 2026-04-22T23:30Z, when obtained from npm, had embedded malicious code.

    YüksekCVSS 8,8İstismar yokEPSS %1

    bitwarden · cli1 May 2026

  • CVE-2026-43640
    34İzleyin

    Bitwarden Server < 2026.4.1 Authentication Bypass via SCIM API Key

    YüksekCVSS 8,6İstismar yokEPSS %1

    bitwarden · server11 May 2026

  • CVE-2020-15879
    31İzleyin

    Bitwarden Server 1.35.1 allows SSRF because it does not consider certain IPv6 addresses (ones beginning with fc, fd, fe, or ff, and the :: a

    YüksekCVSS 7,5İstismar yokEPSS %3

    bitwarden · server21 Tem 2020

  • CVE-2019-19766
    30İzleyin

    The Bitwarden server through 1.32.0 has a potentially unwanted KDF.

    YüksekCVSS 7,5İstismar yokEPSS %1

    bitwarden · server12 Ara 2019

  • CVE-2018-25081
    30İzleyin

    Bitwarden through 2023.2.1 offers password auto-fill within a cross-domain IFRAME element.

    YüksekCVSS 7,5İstismar yokEPSS %1

    bitwarden · bitwarden8 Mar 2023

  • CVE-2023-27974
    30İzleyin

    Bitwarden through 2023.2.1 offers password auto-fill when the second-level domain matches, e.g., a password stored for an example.com hostin

    YüksekCVSS 7,5İstismar yokEPSS %1

    bitwarden · bitwarden8 Mar 2023

  • CVE-2026-57520
    28İzleyin

    Bitwarden Server < 2026.5.0 Privilege Escalation via Bulk User Remove Endpoint

    YüksekCVSS 7,1İstismar yokEPSS %1

    bitwarden · server25 Haz 2026

  • CVE-2023-27706
    28İzleyin

    Bitwarden Windows desktop application versions prior to v2023.4.0 store biometric keys in Windows Credential Manager, accessible to other lo

    YüksekCVSS 7,1İstismar yokEPSS %1

    bitwarden · bitwarden9 Haz 2023

  • CVE-2023-38840
    22İzleyin

    Bitwarden Desktop 2023.7.0 and below allows an attacker with local access to obtain sensitive information via the Bitwarden.exe process.

    OrtaCVSS 5,5Kavram kanıtıEPSS %1

    bitwarden · bitwarden15 Ağu 2023

  • CVE-2026-57521
    21İzleyin

    Bitwarden Server < 2026.5.0 Broken Access Control via PreviewInvoiceController

    OrtaCVSS 5,3İstismar yokEPSS %0

    bitwarden · server25 Haz 2026

  • CVE-2026-43638
    21İzleyin

    Bitwarden Server < 2026.4.1 Missing Authorization via Organization Cipher Import

    OrtaCVSS 5,3İstismar yokEPSS %0

    bitwarden · server11 May 2026

  • CVE-2026-57522
    9İzleyin

    Bitwarden Server < 2026.5.0 JSON Injection via Webhook Templates

    DüşükCVSS 2,3İstismar yokEPSS %0

    bitwarden · server25 Haz 2026