150 matches found
CVE-2026-45170
Idira Vendor PAM - Self-Hosted Connector versions prior 1.1.100504 under specific conditions and configuration scenarios, TLS certificate validation may not be fully enforced. CyberArk Security Bulletin: CA26-17...
CVE-2026-45170 Idira Vendor PAM - Self-Hosted Connector: Potential Security Bypass due to Incomplete TLS Certificate Validation
Idira Vendor PAM - Self-Hosted Connector versions prior 1.1.100504 under specific conditions and configuration scenarios, TLS certificate validation may not be fully enforced. CyberArk Security Bulletin: CA26-17...
CVE-2026-45170
CVE-2026-45170 concerns Idira Privilege Cloud Connector, where versions prior to 1.1.100504 may not enforce TLS certificate validation under certain conditions/configurations. This could enable a potential security bypass affecting confidentiality, integrity, and availability, as indicated by the...
CVE-2026-45170 Idira Vendor PAM - Self-Hosted Connector: Potential Security Bypass due to Incomplete TLS Certificate Validation
Idira Vendor PAM - Self-Hosted Connector versions prior 1.1.100504 under specific conditions and configuration scenarios, TLS certificate validation may not be fully enforced. CyberArk Security Bulletin: CA26-17...
PT-2026-48816
Name of the Vulnerable Software and Affected Versions Idira Privilege Cloud Connector versions prior to 1.1.100504 Description Under specific conditions and configuration scenarios, TLS certificate validation may not be fully enforced, potentially leading to a security bypass. TLS Transport Layer...
CVE-2021-33693
SAP Cloud Connector, version - 2.0, allows an authenticated administrator to modify a configuration file to inject malicious codes that could potentially lead to OS command execution...
CVE-2021-33694
SAP Cloud Connector, version - 2.0, does not sufficiently encode user-controlled inputs, allowing an attacker with Administrator rights, to include malicious codes that get stored in the database, and when accessed, could be executed in the application, resulting in Stored Cross-Site Scripting...
CVE-2021-33692
SAP Cloud Connector, version - 2.0, allows the upload of zip files as backup. This backup file can be tricked to inject special elements such as '..' and '/' separators, for attackers to escape outside of the restricted location to access files or directories...
The vulnerability of the connection application between the cloud platform and the local system via SAP Cloud Connector arises from the lack of authentication. This allows attackers to gain unauthorized access and modify protected information.
The vulnerability of the connection application between the cloud platform and the local system via SAP Cloud Connector is related to the absence of authentication. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access and modify protected...
EUVD-2021-20371
Malware in sbrugna...
EUVD-2021-20370
Malware in sbrugna...
EUVD-2021-20369
Malware in sbrugna...
EUVD-2019-1020
Malware in sbrugna...
EUVD-2021-10043
Malware in sbrugna...
EUVD-2018-14264
Malware in sbrugna...
EUVD-2021-20372
Malware in sbrugna...
EUVD-2019-1019
Malware in sbrugna...
EUVD-2025-24204
Malicious code in bioql PyPI...