Lucene search
K

15 matches found

ATTACKERKB
ATTACKERKB
added 2026/04/28 6:9 p.m.3 views

CVE-2026-41388

OpenClaw before 2026.3.31 contains a configuration management vulnerability where startup migration treats empty-array settings as missing values. Attackers can restart the application to rehydrate revoked Tlon configuration from file state, bypassing intended revocation controls...

6.5CVSS5.2AI score0.00307EPSS
Exploits0References4
OSV
OSV
added 2025/05/09 10:15 a.m.2 views

UBUNTU-CVE-2025-46392

Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x. There are a number of issues in Apache Commons Configuration 1.x that allow excessive resource consumption when loading untrusted configurations or using unexpected usage patterns. The Apache Commons Configuratio...

6.5CVSS6.8AI score0.02054EPSS
Exploits0References5
NVD
NVD
added 2025/01/26 7:15 a.m.9 views

CVE-2024-46881

Develocity formerly Gradle Enterprise before 2024.1.8 has Incorrect Access Control. Project-level access control configuration was introduced in Enterprise Config schema version 8. Migration functionality from schema version 8 to versions 9 and 10 in affected vulnerable versions does not include...

7.1CVSS0.00333EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2025/01/16 12:0 a.m.5 views

The vulnerability of the Palo Alto Networks Expedition configuration migration tool lies in its inability to remove special elements used in the basic operating system, allowing attackers to execute arbitrary commands.

The vulnerability of the Palo Alto Networks Expedition configuration migration tool lies in the lack of measures taken to neutralize special elements used in the basic operating system. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

7.4CVSS8.3AI score0.77653EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/13 12:0 a.m.3 views

The vulnerability of the Palo Alto Networks Expedition configuration migration tool lies in the lack of protection for the SQL query structure. This allows attackers to extract the contents of the database of the software tool and gain access to write and read arbitrary files.

The vulnerability of the Palo Alto Networks Expedition configuration migration tool lies in the lack of security measures for SQL query structures. Exploiting this vulnerability allows an attacker to remotely access and manipulate the database content of the software platform, as well as gain...

9.3CVSS8.3AI score0.00596EPSS
Exploits0References2Affected Software1
Citrix
Citrix
added 2024/12/13 12:0 a.m.7 views

NetScaler Gateway - 14.1 - How to perform backup and restore of NetScaler configuration

Migrating configurations to a new device -- Facing issues while performing a restore of the backup...

7AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2024/10/17 12:0 a.m.4 views

The vulnerability of the Palo Alto Networks Expedition configuration migration tool lies in the lack of measures to neutralize special elements used in the operating system team. This allows attackers to enhance their privileges and execute arbitrary commands on the basic operating system.

The vulnerability of the Palo Alto Networks Expedition configuration migration tool lies in the lack of measures taken to neutralize special elements used in the operating system team. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary command...

7.8CVSS8.4AI score0.98423EPSS
Exploits0References5Affected Software1
NVD
NVD
added 2024/07/10 7:15 p.m.33 views

CVE-2024-5910

Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. Note: Expedition is a tool aiding in configuration migration, tuning, and enrichment. Configuration secrets, credential...

9.8CVSS0.91684EPSS
Exploits9References3
Vulnrichment
Vulnrichment
added 2024/07/10 6:39 p.m.47 views

CVE-2024-5910 Expedition: Missing Authentication Leads to Admin Account Takeover

Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. Note: Expedition is a tool aiding in configuration migration, tuning, and enrichment. Configuration secrets, credential...

9.3CVSS7.2AI score0.91684EPSS
Exploits9References1
CVE
CVE
added 2024/07/10 6:39 p.m.2522 views

CVE-2024-5910

CVE-2024-5910 affects Palo Alto Networks Expedition (versions prior to 1.2.92). The issue is missing authentication for a critical function, enabling an attacker with network access to potentially takeover an Expedition admin account and exfiltrate configuration secrets and credentials. Public so...

9.8CVSS6.8AI score0.91684EPSS
In wildExploits9References3Affected Software1
Cvelist
Cvelist
added 2024/07/10 6:39 p.m.61 views

CVE-2024-5910 Expedition: Missing Authentication Leads to Admin Account Takeover

Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. Note: Expedition is a tool aiding in configuration migration, tuning, and enrichment. Configuration secrets, credential...

9.3CVSS0.91684EPSS
Exploits9References1
ATTACKERKB
ATTACKERKB
added 2024/07/10 12:0 a.m.381 views

CVE-2024-5910

Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. Note: Expedition is a tool aiding in configuration migration, tuning, and enrichment. Configuration secrets, credential...

9.8CVSS10AI score0.99597EPSS
In wildExploits13References3
Citrix
Citrix
added 2023/08/15 12:0 a.m.9 views

How to migrate ns.conf from one appliance to another using Batch Configuration

Demystifying how to migrate the configuration of an existing NetScaler appliance to another NetScaler appliance...

7AI score
Exploits0
OSV
OSV
added 2022/03/01 5:2 p.m.3 views

OPENSUSE-SU-2022:0061-1 Security update for mc

This update for mc fixes the following issues: Midnight Commander 4.8.27: Core - Reimplement version detection 3603, 4249 - Significantly reduce rebuilt time after version change 2252, 4266 - Drop automatic migration of configuration from /.mc to XDG-based directories 3682 - zsh: support custom...

7.5CVSS7.6AI score0.02216EPSS
Exploits1References3
OSV
OSV
added 2021/09/20 3:26 p.m.4 views

SUSE-SU-2021:3170-1 Security update for SUSE Manager Server 4.2

This update fixes the following issues: branch-network-formula: - Use kernel parameters from PXE formula also for local boot cobbler - security issues fixed: - CVE-2021-40323: Fixed an arbitrary file disclosure/Template Injection bsc1189458 - CVE-2021-40324: Fixed an arbitrary file write bsc11894...

9.8CVSS8.5AI score0.88482EPSS
Exploits0References32
Rows per page
Query Builder