GO-2023-2329 HashiCorp Vault Missing Release of Memory after Effective Lifetime vulnerability in github.com/hashicorp/vault

HashiCorp Vault Missing Release of Memory after Effective Lifetime vulnerability in github.com/hashicorp/vault...

GO-2023-2063 HashiCorp Vault Improper Input Validation vulnerability in github.com/hashicorp/vault

HashiCorp Vault Improper Input Validation vulnerability in github.com/hashicorp/vault...

GO-2023-2088 Hashicorp Vault Incorrect Permission Assignment for Critical Resource vulnerability in github.com/hashicorp/vault

Hashicorp Vault Incorrect Permission Assignment for Critical Resource vulnerability in github.com/hashicorp/vault...

GO-2023-1986 HashiCorp Vault and Vault Enterprise vulnerable to user enumeration in github.com/hashicorp/vault

HashiCorp Vault and Vault Enterprise vulnerable to user enumeration in github.com/hashicorp/vault...

GO-2023-1900 Hashicorp Vault Fails to Verify if Approle SecretID Belongs to Role During a Destroy Operation in github.com/hashicorp/vault

Hashicorp Vault Fails to Verify if Approle SecretID Belongs to Role During a Destroy Operation in github.com/hashicorp/vault...

GO-2023-1897 HashiCorp Vault's revocation list not respected in github.com/hashicorp/vault

HashiCorp Vault's revocation list not respected in github.com/hashicorp/vault...

GO-2023-1849 Hashicorp Vault vulnerable to Cross-site Scripting in github.com/hashicorp/vault

Hashicorp Vault vulnerable to Cross-site Scripting in github.com/hashicorp/vault...

GO-2023-1708 HashiCorp Vault's PKI mount vulnerable to denial of service in github.com/hashicorp/vault

HashiCorp Vault's PKI mount vulnerable to denial of service in github.com/hashicorp/vault...

GO-2023-1685 HashiCorp Vault’s Microsoft SQL Database Storage Backend Vulnerable to SQL Injection Via Configuration File in github.com/hashicorp/vault

HashiCorp Vault’s Microsoft SQL Database Storage Backend Vulnerable to SQL Injection Via Configuration File in github.com/hashicorp/vault...

JetBrains TeamCity Cross-Site Scripting Vulnerability (CNVD-2025-16717)

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. JetBrains TeamCity suffers from a cross-site...

CVE-2024-43808

In JetBrains TeamCity before 2024.07.1 self XSS was possible in the HashiCorp Vault plugin...

CVE-2024-43808

In JetBrains TeamCity before 2024.07.1 self XSS was possible in the HashiCorp Vault plugin...

CVE-2024-43808

In JetBrains TeamCity before 2024.07.1 self XSS was possible in the HashiCorp Vault plugin...

CVE-2024-43808

In JetBrains TeamCity before 2024.07.1 self XSS was possible in the HashiCorp Vault plugin...

CVE-2024-43808

CVE-2024-43808 affects JetBrains TeamCity before 2024.07.1. The issue is a self XSS vulnerability in the HashiCorp Vault plugin . Root cause: inadequate handling/sanitation of user-controllable content in the Vault plugin UI, enabling client-side script execution. Impact: the vulnerability could ...

JetBrains TeamCity 安全漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. JetBrains TeamCity suffers from a cross-site...

PT-2024-7655 · Hashicorp +1 · Hashicorp Vault +2

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2024.07.1 Description: The issue exists due to inadequate protection of the web page structure in the HashiCorp Vault plugin of the JetBrains TeamCity CI/CD system. Exploitation of this issue may allow a...

AgileBits 1Password IPC Protection Bypass (CVE-2024-42219) (macOS)

The version of AgileBits 1Password installed on the remote macOS or Mac OS X host is prior to 8.10.36. It is, therefore, affected by an inter-process communication bypass vulnerability that allows local attackers to exfiltrate vault items. Note that Nessus has not tested for this issue but has...

Keys to the Kingdom - Gaining access to the Physical Facility through Internal Access

This is a story of network segmentation and the impact that seemingly trivial misconfigurations can have for your organization. This is one of those occasions. This particular pen test asked for goals-based assessment focusing on post-compromise activities — an attempt by the client to discover h...

The vulnerability of HashiCorp’s Vault and Vault Enterprise archiving platforms for corporate information lies in the improper assignment of permissions to critical resources, allowing attackers to increase their privileges.

The vulnerability of the HashiCorp Vault and Vault Enterprise archiving platforms for corporate information lies in the improper assignment of permissions to critical resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...