Lucene search
+L

22 matches found

osv_cleanstart
osv_cleanstart
•added 2026/10/10 12:36 a.m.•14 views

CLEANSTART-2026-NA10191 Authorization handling for component configuration verification requests in Apache NiFi 1

Security vulnerability affects the apache-nifi package. Authorization handling for component configuration verification requests in Apache NiFi 1...

6.3CVSS5.3AI score0.00516EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/01 12:35 a.m.•14 views

CLEANSTART-2026-OT47585 Authorization handling for component configuration verification requests in Apache NiFi 1

Security vulnerability affects the apache-nifi package. Authorization handling for component configuration verification requests in Apache NiFi 1...

6.3CVSS5.3AI score0.00516EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/08/07 4:07 p.m.•16 views

CVE-2026-17597 Nexus Repository 3 - Server-Side Request Forgery via Email Configuration Verification

Nexus Repository 3 contains a Server-Side Request Forgery SSRF vulnerability in the email configuration verification feature. A user holding the nexus:settings:update permission could submit arbitrary host and port values to the email test/verification endpoint, causing the server to attempt...

5.1CVSS5.8AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/07 12:00 a.m.•12 views

CVE-2026-17597: Server-Side Request Forgery (SSRF)

Nexus Repository 3 contains a Server-Side Request Forgery SSRF vulnerability in the email configuration verification feature. A user holding the nexus:settings:update permission could submit arbitrary host and port values to the email test/verification endpoint, causing the server to attempt...

5.1CVSS5.8AI score0.00311EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/07 12:00 a.m.•17 views

PT-2026-69059

Name of the Vulnerable Software and Affected Versions Nexus Repository 3 versions prior to 3.95.0 Description A Server-Side Request Forgery SSRF issue exists in the email configuration verification feature. A user with the nexus:settings:update permission can submit arbitrary host and port values...

5.1CVSS5.9AI score0.00311EPSS
SaveExploits0References6
osv_bit
osv_bit
•added 2026/06/24 11:07 a.m.•39 views

BIT-NIFI-2026-44911 Apache NiFi: Incorrect Authorization for Configuration Verification Requests

Authorization handling for component configuration verification requests in Apache NiFi 1.15.0 through 2.9.0 allows clients with read access to submit proposed configuration properties. The proposed properties override current configuration, enabling users with read access to invoke predefined...

6.3CVSS5.3AI score0.00516EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2026/06/22 9:30 a.m.•19 views

Apache NiFi allows read-only users to submit component configuration verification request

Authorization handling for component configuration verification requests in Apache NiFi 1.15.0 through 2.9.0 allows clients with read access to submit proposed configuration properties. The proposed properties override current configuration, enabling users with read access to invoke predefined...

6.3CVSS5.3AI score0.00516EPSS
SaveExploits0References5Affected Software1
osv_ghsa
osv_ghsa
•added 2026/06/22 9:30 a.m.•15 views

GHSA-QVJ8-GWPM-4X49 Apache NiFi allows read-only users to submit component configuration verification request

Authorization handling for component configuration verification requests in Apache NiFi 1.15.0 through 2.9.0 allows clients with read access to submit proposed configuration properties. The proposed properties override current configuration, enabling users with read access to invoke predefined...

2.3CVSS5.3AI score0.00516EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/06/22 7:37 a.m.•17 views

CVE-2026-44911 Apache NiFi: Incorrect Authorization for Configuration Verification Requests

Authorization handling for component configuration verification requests in Apache NiFi 1.15.0 through 2.9.0 allows clients with read access to submit proposed configuration properties. The proposed properties override current configuration, enabling users with read access to invoke predefined...

2.3CVSS5.3AI score0.00516EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/06/22 7:37 a.m.•23 views

CVE-2026-44911 Apache NiFi: Incorrect Authorization for Configuration Verification Requests

Authorization handling for component configuration verification requests in Apache NiFi 1.15.0 through 2.9.0 allows clients with read access to submit proposed configuration properties. The proposed properties override current configuration, enabling users with read access to invoke predefined...

2.3CVSS5.9AI score
SaveExploits0References5
attackerkb
attackerkb
•added 2026/06/22 7:37 a.m.•20 views

CVE-2026-44911

Authorization handling for component configuration verification requests in Apache NiFi 1.15.0 through 2.9.0 allows clients with read access to submit proposed configuration properties. The proposed properties override current configuration, enabling users with read access to invoke predefined...

2.3CVSS5.4AI score0.00516EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2026/06/22 7:37 a.m.•101 views

CVE-2026-44911

CVE-2026-44911 affects Apache NiFi 1.15.0–2.9.0 where authorization for component configuration verification requests is insufficient: users with read access can submit proposed configuration properties, potentially overriding current settings and invoking verification methods with altered parame...

6.3CVSS5.3AI score0.00516EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/06/22 7:37 a.m.•60 views

CVE-2026-44911 Apache NiFi: Incorrect Authorization for Configuration Verification Requests

Authorization handling for component configuration verification requests in Apache NiFi 1.15.0 through 2.9.0 allows clients with read access to submit proposed configuration properties. The proposed properties override current configuration, enabling users with read access to invoke predefined...

2.3CVSS0.00516EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/22 12:00 a.m.•38 views

PT-2026-51282

Name of the Vulnerable Software and Affected Versions Apache NiFi versions 1.15.0 through 2.9.0 Description Authorization handling for component configuration verification requests allows clients with read access to submit proposed configuration properties. These proposed properties override the...

7.5CVSS5.9AI score0.00609EPSS
SaveExploits0References191
Fedora
Fedora
•added 2026/02/11 1:00 a.m.•23 views

[SECURITY] Fedora 42 Update: rust-resctl-bench-2.2.5-10.fc42

resctl-bench is a collection of whole-system benchmarks to evaluate resource control and hardware behaviors using realistic simulated workloads. Comprehensive resource control involves the whole system. Furthermore, testing resource control end-to-end requires scenarios involving realistic...

7.5CVSS6AI score0.00503EPSS
SaveExploits1
Citrix
Citrix
•added 2020/11/09 12:00 a.m.•25 views

SsOnExpert - Single Sign-On (SSON) Receiver/Plug-in Troubleshooting Tool

Created Date: 04/15/2010 Description The SsOnExpert tool is a command-line based application that automates the process of checking common causes of Single Sign On issues in XenApp environments. The tool can be used to verify configuration settings both from the console and remotely. Depending on...

7.1AI score
SaveExploits0
Citrix
Citrix
•added 2017/06/07 12:00 a.m.•22 views

Frequently Asked Questions During NetScaler MAS Troubleshooting

Citrix ADM, formerly NetScaler MAS The following section lists some of the frequently asked questions during diagnosis and troubleshooting of NetScaler MAS issues: How to verify the NetScaler MAS build version using CLI and support file? How does MAS fetch all the dashboard related data from...

6.9AI score
SaveExploits0
osv_suse
osv_suse
•added 2017/03/06 10:26 a.m.•40 views

SUSE-SU-2017:0607-1 Security update for openssh

This update for openssh fixes the following issues: - CVE-2016-8858: prevent resource depletion during key exchange bsc1005480 - CVE-2016-10009: limit directories for loading PKCS11 modules to avoid privilege escalation bsc1016366 - CVE-2016-10011: Prevent possible leaks of host private keys to...

7.8CVSS7.9AI score0.37431EPSS
SaveExploits6References9
osv_suse
osv_suse
•added 2017/03/03 4:46 p.m.•33 views

SUSE-SU-2017:0603-1 Security update for openssh

This update for openssh fixes the following issues: Security issues fixed: - CVE-2016-8858: prevent resource depletion during key exchange bsc1005480 - CVE-2016-10009: limit directories for loading PKCS11 modules to avoid privilege escalation bsc1016366 - CVE-2016-10011: Prevent possible leaks of...

7.8CVSS8.1AI score0.37431EPSS
SaveExploits6References9
osv_suse
osv_suse
•added 2017/01/23 12:26 p.m.•29 views

SUSE-SU-2017:0264-1 Security update for openssh

This update for openssh fixes several issues. These security issues were fixed: - CVE-2016-8858: The kexinputkexinit function in kex.c allowed remote attackers to cause a denial of service memory consumption by sending many duplicate KEXINIT requests bsc1005480. - CVE-2016-10012: The shared memor...

7.8CVSS8.8AI score0.37431EPSS
SaveExploits10References13
Rows per page
Query Builder