CVE-2022-4536

The IP Vault – WP Firewall plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 1.1. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can supply the...

CVE-2022-4536

The IP Vault – WP Firewall plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 1.1. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can supply the...

CVE-2022-4536 IP Vault – WP Firewall <= 1.1 - IP Address Spoofing to Protection Mechanism Bypass

The IP Vault – WP Firewall plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 1.1. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can supply the...

CVE-2022-4536 IP Vault – WP Firewall <= 1.1 - IP Address Spoofing to Protection Mechanism Bypass

The IP Vault – WP Firewall plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 1.1. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can supply the...

Vault Leaks Client Token and Token Accessor in Audit Devices

Summary Vault Community Edition and Vault Enterprise experienced a regression where functionality that HMAC’d sensitive headers in the configured audit device, specifically client tokens and token accessors, was removed. This resulted in the plaintext values of client tokens and token accessors...

PT-2024-11706 · WordPress · The Ip Vault – Wp Firewall

Name of the Vulnerable Software and Affected Versions: The IP Vault – WP Firewall plugin for WordPress versions up to, and including, 1.1 Description: The issue is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions...

One Identity Safeguard for Privileged Passwords 安全漏洞

One Identity Safeguard for Privileged Passwords is a platform from US-based One Identity, Inc. stores and manages sensitive credentials such as passwords, keys and other keys in a centralized, hardened vault. A security vulnerability exists in One Identity Safeguard for Privileged Passwords that...

CVE-2023-4680

A flaw was found in HashiCorp Vault and Vault Enterprise, where the transit secrets engine allowed authorized users to specify arbitrary nonces, even with convergent encryption disabled. The encrypt endpoint, in combination with an offline attack, could be used to decrypt arbitrary ciphertext and...

JetBrains TeamCity < 2024.07.1 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2024.07.1. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2024.07.1 possible privilege escalation due to incorrect directory permissions CVE-2024-43114 - In JetBrains TeamCity before...

GO-2022-1021 HashiCorp Vault vulnerable to incorrect metadata access in github.com/hashicorp/vault

HashiCorp Vault vulnerable to incorrect metadata access in github.com/hashicorp/vault...

GO-2022-0825 Authentication Bypass by Spoofing and Insufficient Verification of Data Authenticity in Hashicorp Vault in github.com/hashicorp/vault

Authentication Bypass by Spoofing and Insufficient Verification of Data Authenticity in Hashicorp Vault in github.com/hashicorp/vault...

GO-2022-0804 Improper Input Validation in HashiCorp Vault in github.com/hashicorp/vault-plugin-secrets-gcp

Improper Input Validation in HashiCorp Vault in github.com/hashicorp/vault-plugin-secrets-gcp...

GO-2022-0816 Improper Resource Shutdown or Release in HashiCorp Vault in github.com/hashicorp/vault

Improper Resource Shutdown or Release in HashiCorp Vault in github.com/hashicorp/vault...

GO-2022-0778 Information Disclosure in HashiCorp Vault in github.com/hashicorp/vault

Information Disclosure in HashiCorp Vault in github.com/hashicorp/vault...

GO-2022-0620 HashiCorp Vault underlying database had excessively broad filesystem permissions from v1.4.0 until v1.8.0 in github.com/hashicorp/vault

HashiCorp Vault underlying database had excessively broad filesystem permissions from v1.4.0 until v1.8.0 in github.com/hashicorp/vault...

GO-2022-0632 Improper Removal of Sensitive Information Before Storage or Transfer in HashiCorp Vault in github.com/hashicorp/vault

Improper Removal of Sensitive Information Before Storage or Transfer in HashiCorp Vault in github.com/hashicorp/vault...

GO-2022-0618 Hashicorp Vault Privilege Escalation Vulnerability in github.com/hashicorp/vault

Hashicorp Vault Privilege Escalation Vulnerability in github.com/hashicorp/vault...

GO-2022-0623 Invalid session token expiration in github.com/hashicorp/vault

Invalid session token expiration in github.com/hashicorp/vault...

GO-2022-0611 HashiCorp Vault Incorrect Permission Assignment for Critical Resource in github.com/hashicorp/vault

HashiCorp Vault Incorrect Permission Assignment for Critical Resource in github.com/hashicorp/vault...

GO-2022-0590 HashiCorp Vault improper configuration of multi factor authentication in github.com/hashicorp/vault

HashiCorp Vault improper configuration of multi factor authentication in github.com/hashicorp/vault...