113 matches found
CVE-2020-8467
CVE-2020-8467 affects Trend Micro Apex One (2019) and OfficeScan XG via a vulnerability in the migration tool component that enables remote code execution. The attack requires user authentication to be attempted. NVD scoring indicates high impact (CVSSv3.1 base 8.8; HIGH). CISA KEV catalogs this ...
PT-2020-1851 · Trend Micro · Trend Micro Apex One +1
Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One version 2019 Trend Micro OfficeScan XG Description: The vulnerability in the migration tool component of Trend Micro Apex One and OfficeScan could allow remote attackers to execute arbitrary code on affected installations...
VulnCheck KEV: CVE-2020-8467
Trend Micro Apex One and OfficeScan contain an unspecified vulnerability within a migration tool component that allows for remote code execution...
Palo Alto Networks Expedition Migration Tool Cross-Site Request Forgery Vulnerability
Palo Alto Networks Expedition Migration Tool is a security policy configuration migration tool from Palo Alto Networks, USA. A cross-site request forgery vulnerability exists in Palo Alto Networks Expedition Migration Tool. The vulnerability stems from a web application that does not adequately...
CVE-2020-1977
Insufficient Cross-Site Request Forgery XSRF protection on Expedition Migration Tool allows remote unauthenticated attackers to hijack the authentication of administrators and to perform actions on the Expedition Migration Tool. This issue affects Expedition Migration Tool 1.1.51 and earlier...
CVE-2020-1977
Insufficient Cross-Site Request Forgery XSRF protection on Expedition Migration Tool allows remote unauthenticated attackers to hijack the authentication of administrators and to perform actions on the Expedition Migration Tool. This issue affects Expedition Migration Tool 1.1.51 and earlier...
Cross site scripting
Insufficient Cross-Site Request Forgery XSRF protection on Expedition Migration Tool allows remote unauthenticated attackers to hijack the authentication of administrators and to perform actions on the Expedition Migration Tool. This issue affects Expedition Migration Tool 1.1.51 and earlier...
CVE-2020-1977 Expedition Migration Tool: Insufficient Cross Site Request Forgery protection.
Insufficient Cross-Site Request Forgery XSRF protection on Expedition Migration Tool allows remote unauthenticated attackers to hijack the authentication of administrators and to perform actions on the Expedition Migration Tool. This issue affects Expedition Migration Tool 1.1.51 and earlier...
CVE-2020-1977
CVE-2020-1977 affects Palo Alto Networks Expedition Migration Tool (v1.1.51 and earlier). The root cause is insufficient anti-cross-site request forgery protections in the web application, allowing remote unauthenticated attackers to hijack administrator sessions and perform actions on the tool. ...
Expedition Migration Tool: Insufficient Cross Site Request Forgery protection.
Insufficient Cross-Site Request Forgery XSRF protection on Expedition Migration Tool allows remote unauthenticated attackers to hijack the authentication of administrators and to perform actions on the Expedition Migration Tool. This issue affects Expedition Migration Tool 1.1.51 and earlier...
Description of the security update for SharePoint Foundation 2010: November 12, 2019
Description of the security update for SharePoint Foundation 2010: November 12, 2019 Summary This security update resolves an information disclosure vulnerability that exists in Microsoft SharePoint if an attacker uploads a specially crafted file to the SharePoint Server. To learn more about the...
CVE-2019-3397
Atlassian Bitbucket Data Center licensed instances starting with version 5.13.0 before 5.13.6 the fixed version for 5.13.x, from 5.14.0 before 5.14.4 fixed version for 5.14.x, from 5.15.0 before 5.15.3 fixed version for 5.15.x, from 5.16.0 before 5.16.3 fixed version for 5.16.x, from 6.0.0 before...
Atlassian BitBucket Data Center Migration Tool Directory Traversal Vulnerability
Bitbucket Data Center is the on-premises Git repository management solution for larger enterprises that require high availability and performance at scale. It uses a cluster of Bitbucket server nodes and is designed in your own data center. A vulnerability was found in the Data Center’s migration...
Bitbucket Path Traversal / Remote Code Execution Vulnerability
Bitbucket Data Center had a path traversal vulnerability in the Data Center migration tool. A remote attacker with authenticated user with admin permissions can exploit this path traversal vulnerability to write files to arbitrary locations which can lead to remote code execution on systems that...
Bitbucket Data Center migration tool path traversal vulnerability
Atlassian Bitbucket Server is a Git code hosting solution from Atlassian Australia. The solution manages and reviews code with features such as diff view, JIRA integration, and build integration.Bitbucket Data Center migration tool is a data center migration tool. A path traversal vulnerability...
Palo Alto Networks Expedition Migration Tool Cross-Site Scripting Vulnerability (CNVD-2019-13414)
Palo Alto Networks Expedition Migration Tool is a security policy configuration migration tool from Palo Alto Networks, USA. An HTML injection vulnerability exists in Palo Alto Networks Expedition Migration Tool, which stems from the program's inability to properly filter user-supplied input. A...
Cross site scripting
Cross-site scripting XSS vulnerability in Palo Alto Networks Expedition Migration tool 1.1.12 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the Devices View...
CVE-2019-1574
Cross-site scripting XSS vulnerability in Palo Alto Networks Expedition Migration tool 1.1.12 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the Devices View...
CVE-2019-1574
CVE-2019-1574 describes a cross-site scripting (XSS) vulnerability in the Palo Alto Networks Expedition Migration Tool (versions up to 1.1.12). An authenticated attacker can craft a link to execute arbitrary JavaScript/HTML in the user’s Devices View due to improper input validation. Affected rel...
Cross-Site Scripting in Expedition Migration Tool
A cross-site scripting XSS vulnerability exist in the Palo Alto Networks Migration Tool “Expedition”. Ref MT-1009/ CVE-2019-1574 Successful exploitation of this issue may allow an authenticated attacker to inject arbitrary JavaScript or HTML in the Devices View. This issue affects Expedition 1.1....