The vulnerability of the EVMonitoring service of the Vault Enterprise platform for archiving corporate information allows a perpetrator to execute arbitrary code.

The vulnerability of the EVMonitoring service of the Vault Enterprise platform for archiving corporate information is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted data...

The vulnerability of the EVStgOfflineOpns service for archiving corporate information in Vault Enterprise allows a perpetrator to execute arbitrary code.

The vulnerability of the EVStgOfflineOpns service on the corporate information archiving platform Vault Enterprise is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted data...

GHSA-WPFP-CM49-9M9Q vulnerabilities

Vulnerabilities for packages: opentofu-fips, terraform, opentofu, vault...

CVE-2025-24459

In JetBrains TeamCity before 2024.12.1 reflected XSS was possible on the Vault Connection page...

CVE-2025-24459

In JetBrains TeamCity before 2024.12.1 reflected XSS was possible on the Vault Connection page...

CVE-2025-24459

CVE-2025-24459 — JetBrains TeamCity is affected on versions prior to 2024.12.1. The vulnerability is a reflected cross‑site scripting (XSS) issue on the Vault Connection page. Root cause details are not elaborated beyond “reflected XSS,” and exploitation status is not provided in the documents. I...

CVE-2025-24459

In JetBrains TeamCity before 2024.12.1 reflected XSS was possible on the Vault Connection page...

CVE-2025-24459

In JetBrains TeamCity before 2024.12.1 reflected XSS was possible on the Vault Connection page...

CVE-2025-0377 vulnerabilities

Vulnerabilities for packages: opentofu-fips, terraform, opentofu, vault...

CVE-2024-2048

A flaw was found in Vault and Vault Enterprise's TLS certificate authentication method. This vulnerability allows an attacker to bypass authentication via a crafted malicious certificate when a non-CA certificate is used as a trusted certificate. Mitigation There's no mitigation available for thi...

JetBrains TeamCity 跨站脚本漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. JetBrains TeamCity suffers from a cross-site...

PT-2025-5365 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2024.12.1 Description: The issue allows for reflected XSS on the "Vault Connection page". There is no information provided about the estimated number of potentially affected devices worldwide or details...

CVE-2024-45337 vulnerabilities

Vulnerabilities for packages: argo-cd, guac, age, prometheus-mongodb-exporter, docker-compose, flux, gitsign, metrics-server-fips, hugo-fips, spegel, kube-rbac-proxy-fips, wgcf, extism, helm-operator, prometheus-statsd-exporter-fips, bank-vaults, kubernetes-dns-node-cache, openbao-k8s, caddy,...

GHSA-V778-237X-GJRC vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, crossplane-provider-aws-lambda, terragrunt, containerd, portieris, undock, vcluster, crossplane-provider-aws-s3, filebrowser, podman, kyverno-notation-aws, litestream, crossplane-provider-azure, crossplane-provider-aws-cloudwatchlogs,...

Veritas Enterprise Vault Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Veritas Enterprise Vault. Authentication is required to exploit this vulnerability. The specific flaw exists within the EVStgOfflineOpns service. The issue results from the lack of proper...

Veritas Enterprise Vault Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Veritas Enterprise Vault. Authentication is required to exploit this vulnerability. The specific flaw exists within the EVStgOfflineOpns service. The issue results from the lack of proper...

Veritas Enterprise Vault HTMLView Cross-Site Scripting Vulnerability

This vulnerability allows remote attackers to execute web requests with the target user's privileges on affected installations of Veritas Enterprise Vault. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The...

Veritas Enterprise Vault HTMLView Cross-Site Scripting Vulnerability

This vulnerability allows remote attackers to execute web requests with the target user's privileges on affected installations of Veritas Enterprise Vault. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The...

Veritas Enterprise Vault Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Veritas Enterprise Vault. Authentication is required to exploit this vulnerability. The specific flaw exists within the EVTaskGuardian service. The issue results from the lack of proper...

Veritas Enterprise Vault HTMLView Cross-Site Scripting Vulnerability

This vulnerability allows remote attackers to execute web requests with the target user's privileges on affected installations of Veritas Enterprise Vault. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The...