Lucene search
K

145 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 11:16 a.m.4 views

CVE-2021-0108

Uncontrolled search path in the Intel UniteR Client for Windows before version 4.2.25031 may allow an authenticated user to potentially enable an escalation of privilege via local access...

7.3CVSS7.1AI score0.00154EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/09 12:0 a.m.1 views

RockyLinux 10 : gcc-toolset-15-binutils (RLSA-2026:0108)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:0108 advisory. binutils: GNU Binutils Linker heap-based overflow CVE-2025-11083 Tenable has extracted the preceding description block directly from the RockyLinux security...

7.8CVSS6.3AI score0.00026EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2026/01/06 12:0 a.m.1 views

Oracle Linux 10 : gcc-toolset-15-binutils (ELSA-2026-0108)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-0108 advisory. 2.44-7.1 - Fix a potential illegal memory access when linking a corrupt input file. RHEL-130616 Tenable has extracted the preceding description block directly...

7.8CVSS6.2AI score0.00026EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2026/01/06 12:0 a.m.1 views

RHEL 10 : gcc-toolset-15-binutils (RHSA-2026:0108)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:0108 advisory. Binutils is a collection of binary utilities, including ar for creating, modifying and extracting from archives, as a family of GNU assemblers, gpro...

7.8CVSS6.3AI score0.00026EPSS
Exploits1References5
EUVD
EUVD
added 2026/01/02 6:30 p.m.0 views

EUVD-2026-0108

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

5.5AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/09 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2022-0108

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7.3AI score0.00406EPSS
Exploits1References2
GithubExploit
GithubExploit
added 2025/06/19 12:19 p.m.299 views

Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os

CVE-2025-0108 PAN-OS: Authentication Bypass in the Management...

9.1CVSS9AI score0.94115EPSS
Exploits8
RedhatCVE
RedhatCVE
added 2025/05/22 3:57 p.m.7 views

CVE-2020-0108

In postNotification of ServiceRecord.java, there is a possible bypass of foreground process restrictions due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

7.8CVSS7AI score0.01836EPSS
Exploits1References1
Information Security Automation
Information Security Automation
added 2025/02/27 10:32 a.m.20 views

About Authentication Bypass – PAN-OS (CVE-2025-0108) vulnerability

About Authentication Bypass - PAN-OS CVE-2025-0108 vulnerability. PAN-OS is the operating system used in all Palo Alto Network NGFWs. This vulnerability allows an unauthenticated attacker to gain access to the PAN-OS management web interface. The attacker can then "invoke certain PHP scripts",...

5.9CVSS8.6AI score0.94174EPSS
Exploits22
NCSC
NCSC
added 2025/02/21 8:8 a.m.3 views

Vulnerabilities fixed in Palo Alto Networks PAN OS

Palo Alto Networks has fixed vulnerabilities in PAN-OS. The vulnerabilities include an authentication bypass that allows unauthenticated malicious actors to invoke specific PHP scripts through the management Web interface, an unauthenticated file deletion that allows malicious actors to delete...

9.1CVSS8.7AI score0.94115EPSS
Exploits8References4
GithubExploit
GithubExploit
added 2025/02/19 4:0 p.m.256 views

Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os

CVE-2025-0108 - PAN-OS PoC SCRIPT /!\ Disclaimer: This...

9.1CVSS7.5AI score0.94115EPSS
Exploits8
GithubExploit
GithubExploit
added 2025/02/19 6:19 a.m.201 views

Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os

This tool tests whether a target PAN-OS device is vulnerable to...

9.1CVSS7.5AI score0.94115EPSS
Exploits8
GithubExploit
GithubExploit
added 2025/02/19 6:19 a.m.260 views

Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os

This tool tests whether a target PAN-OS device is vulnerable to...

9.1CVSS7.5AI score0.94115EPSS
Exploits8
The Hacker News
The Hacker News
added 2025/02/19 4:48 a.m.28 views

CISA Adds Palo Alto Networks and SonicWall Flaws to Exploited Vulnerabilities List

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added two security flaws impacting Palo Alto Networks PAN-OS and SonicWall SonicOS SSLVPN to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The flaws are listed below -...

5.9CVSS8.6AI score0.94174EPSS
Exploits23
GithubExploit
GithubExploit
added 2025/02/18 9:4 p.m.408 views

Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os

CVE-2025-0108 PAN-OS: Authentication Bypass in the Management...

9.1CVSS10AI score0.94115EPSS
Exploits8
RedhatCVE
RedhatCVE
added 2025/02/14 9:39 p.m.14 views

CVE-2025-0108

An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to bypass the authentication otherwise required by the PAN-OS management web interface and invoke certain PHP scripts. While invoking these PH...

9.1CVSS8AI score0.94115EPSS
Exploits8References3
The Hacker News
The Hacker News
added 2025/02/13 9:39 a.m.35 views

Palo Alto Networks Patches Authentication Bypass Exploit in PAN-OS Software

Palo Alto Networks has addressed a high-severity security flaw in its PAN-OS software that could result in an authentication bypass. The vulnerability, tracked as CVE-2025-0108 , carries a CVSS score of 7.8 out of 10.0. The score, however, drops to 5.1 if access to the management interface is...

7.5CVSS10AI score0.94174EPSS
Exploits22
GithubExploit
GithubExploit
added 2025/02/13 6:39 a.m.644 views

Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os

Disclaimer: The vulnerabilities described in this article, alo...

9.1CVSS7.4AI score0.94115EPSS
Exploits8
NVD
NVD
added 2025/02/12 9:15 p.m.15 views

CVE-2025-0108

An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to bypass the authentication otherwise required by the PAN-OS management web interface and invoke certain PHP scripts. While invoking these PH...

9.1CVSS0.94115EPSS
Exploits8References8
Cvelist
Cvelist
added 2025/02/12 8:55 p.m.14 views

CVE-2025-0108 PAN-OS: Authentication Bypass in the Management Web Interface

An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to bypass the authentication otherwise required by the PAN-OS management web interface and invoke certain PHP scripts. While invoking these PH...

8.8CVSS0.94115EPSS
Exploits8References1
Rows per page
Query Builder