expedition migration tool vulnerabilities and exploits

(subscribe to this query)

6.8

CVSSv2

Insufficient Cross-Site Request Forgery (XSRF) protection on Expedition Migration Tool allows remote unauthenticated malicious users to hijack the authentication of administrators and to perform actions on the Expedition Migration Tool. This issue affects Expedition Migration Too...

Paloaltonetworks Expedition Migration Tool

6.5

CVSSv2

TigerVNC version before 1.10.1 is vulnerable to heap buffer overflow, which could be triggered from DecodeManager::decodeRect. Vulnerability occurs due to the signdness error in processing MemOutStream. Exploitation of this vulnerability could potentially result into remote code ...

Tigervnc Tigervnc Opensuse Leap 15.1

2.1

CVSSv2

A clear text storage of sensitive information vulnerability in FortiClient for Mac may allow a local malicious user to read sensitive information logged in the console window when the user connects to an SSL VPN Gateway.

Fortinet Forticlient Fortinet Forticlient 6.2.0

5

CVSSv2

cli/lib/main.js in Entropic prior to 2019-06-13 does not reject / and \ in command names, which might allow a directory traversal attack in unusual situations.

Entropic Project Entropic

3.5

CVSSv2

Cross-site scripting (XSS) vulnerability in Palo Alto Networks Expedition Migration tool 1.1.12 and previous versions may allow an authenticated malicious user to run arbitrary JavaScript or HTML in the Devices View.

Paloaltonetworks Expedition Migration Tool

3.5

CVSSv2

The Expedition Migration tool 1.1.6 and previous versions may allow an authenticated malicious user to run arbitrary JavaScript or HTML in the User Mapping Settings.

Paloaltonetworks Expedition Migration Tool

3.5

CVSSv2

The Expedition Migration tool 1.1.8 and previous versions may allow an authenticated malicious user to run arbitrary JavaScript or HTML in the RADIUS server settings.

Paloaltonetworks Expedition

3.5

CVSSv2

The Expedition Migration tool 1.1.8 and previous versions may allow an authenticated malicious user to run arbitrary JavaScript or HTML in the User Mapping Settings for account name of admin user.

Paloaltonetworks Expedition

3.5

CVSSv2

The Expedition Migration tool 1.1.8 and previous versions may allow an authenticated malicious user to run arbitrary JavaScript or HTML in the LDAP server settings.

Paloaltonetworks Expedition

10

CVSSv2

The Palo Alto Networks Expedition Migration tool 1.0.107 and previous versions may allow an unauthenticated attacker with remote access to run system level commands on the device hosting this service/application.

Paloaltonetworks Expedition 1.0.107

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook