CVE-2024-53910

An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24336. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized...

CVE-2024-53909

An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24334. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized...

CVE-2024-53912

An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24341. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized...

CVE-2024-57967

PVWA Password Vault Web Access in CyberArk Privileged Access Manager Self-Hosted before 14.4 has potentially elevated privileges in LDAP mapping...

CVE-2024-54840

PVWA Password Vault Web Access in CyberArk Privileged Access Manager Self-Hosted before 14.4 does not properly address environment issues that can contribute to Host header injection...

CyberArk Privileged Access Manager Self-Hosted 安全漏洞

CyberArk Privileged Access Manager Self-Hosted is a privileged access self-hosted manager from CyberArk, Israel. A security vulnerability exists in CyberArk Privileged Access Manager Self-Hosted versions prior to 14.4, which stems from an environmental issue where password vault Web access is not...

CyberArk Privileged Access Manager Self-Hosted 安全漏洞

CyberArk Privileged Access Manager Self-Hosted is a privileged access self-hosted manager from CyberArk, Israel. A security vulnerability exists in CyberArk Privileged Access Manager Self-Hosted versions prior to 14.4, which stems from a password vault Web access may elevate privileges in LDAP...

The vulnerability of the EVTaskGuardian service of the Vault Enterprise platform for archiving corporate information allows a perpetrator to execute arbitrary code.

The vulnerability of the EVTaskGuardian service, a platform for archiving corporate information in Vault Enterprise, is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted data...

The vulnerability of the EVStgOfflineOpns service on the Vault Enterprise platform for archiving corporate information allows a perpetrator to execute arbitrary code.

The vulnerability of the EVStgOfflineOpns service of the corporate information archiving platform Vault Enterprise is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted data...

The vulnerability of the MonitoringMiddleTier service of the Vault Enterprise platform for archiving corporate information allows a perpetrator to execute arbitrary code.

The vulnerability of the MonitoringMiddleTier server service of the Vault Enterprise platform for archiving corporate information is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially...

The vulnerability of the EVMonitoring service of the Vault Enterprise platform for archiving corporate information allows a perpetrator to execute arbitrary code.

The vulnerability of the EVMonitoring service of the Vault Enterprise platform for archiving corporate information is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted data...

The vulnerability of the EVStgOfflineOpns service for archiving corporate information in Vault Enterprise allows a perpetrator to execute arbitrary code.

The vulnerability of the EVStgOfflineOpns service on the corporate information archiving platform Vault Enterprise is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted data...

GHSA-WPFP-CM49-9M9Q vulnerabilities

Vulnerabilities for packages: terraform, opentofu, vault, opentofu-fips...

CVE-2025-24459

In JetBrains TeamCity before 2024.12.1 reflected XSS was possible on the Vault Connection page...

CVE-2025-24459

In JetBrains TeamCity before 2024.12.1 reflected XSS was possible on the Vault Connection page...

CVE-2025-24459

CVE-2025-24459 — JetBrains TeamCity is affected on versions prior to 2024.12.1. The vulnerability is a reflected cross‑site scripting (XSS) issue on the Vault Connection page. Root cause details are not elaborated beyond “reflected XSS,” and exploitation status is not provided in the documents. I...

CVE-2025-24459

In JetBrains TeamCity before 2024.12.1 reflected XSS was possible on the Vault Connection page...

CVE-2025-24459

In JetBrains TeamCity before 2024.12.1 reflected XSS was possible on the Vault Connection page...

CVE-2025-0377 vulnerabilities

Vulnerabilities for packages: terraform, opentofu, vault, opentofu-fips...

CVE-2024-2048

A flaw was found in Vault and Vault Enterprise's TLS certificate authentication method. This vulnerability allows an attacker to bypass authentication via a crafted malicious certificate when a non-CA certificate is used as a trusted certificate. Mitigation There's no mitigation available for thi...