28071 matches found
Irfanview JPEG2000 jp2 Stack Buffer Overflow (CVE-2012-0897)
A buffer overflow vulnerability has been reported in Irfanview JPEG2000 v4.3.2.0 jp2 QCD parsing...
CVE-2012-6593
Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.4 allows remote attackers to execute arbitrary commands via unspecified vectors, aka Ref ID 30088...
CVE-2012-6594
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11, 4.0.x before 4.0.8, and 4.1.x before 4.1.1 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID 34299...
CVE-2012-6595
The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.2 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID 34595...
CVE-2012-6601
PAN-OS < 3.1.12, < 4.0.10 (4.0.x) and
CVE-2012-6600
Consolidated details: CVE-2012-6600 affects Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.2. The device-management CLI allows remote authenticated users to execute arbitrary commands via unspecified vectors. Impact is arbitrary command execution potentially leading to device c...
CVE-2012-6590
The CVE-2012-6590 entry affects Palo Alto Networks PAN-OS 4.0.x prior to 4.0.8. The vulnerability is an information-disclosure issue where the web-based management UI may leak verbose error information to remote attackers through specially crafted input. Affected component: the PAN-OS web managem...
CVE-2012-6591
Summary: CVE-2012-6591 affects Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.5. The device-management CLI is vulnerable to command injection. Impact: remotely (via authenticated admin) execute arbitrary commands with potentially complete device compromise. Affected versions: PAN-OS...
CVE-2012-6603
CVE-2012-6603 affects Palo Alto Networks PAN-OS: the web management UI allows an unauthenticated attacker to bypass authentication and obtain administrator privileges. Affected releases are PAN-OS before 3.1.12, 4.0.x before 4.0.10, and 4.1.x before 4.1.4. The vulnerability is described as an aut...
CVE-2012-6606
The CVE-2012-6606 issue affects Palo Alto Networks GlobalProtect (before 1.1.7) and NetConnect, where the client fails to validate X.509 certificates from SSL servers. The root cause is certificate validation being skipped, enabling an attacker to perform a man-in-the-middle attack and potentiall...
CVE-2012-6605
CVE-2012-6605 affects Palo Alto Networks PAN-OS prior to 3.1.11 and 4.0.x prior to 4.0.9. The device-management CLI allows remote authenticated users to execute arbitrary code via unspecified vectors, potentially compromising the device (root). Affected versions require upgrading to PAN-OS 3.1.11...
CVE-2012-6593
PAN-OS versions prior to 3.1.10 and 4.x prior to 4.0.4 are affected by CVE-2012-6593, a multiple command injection vulnerability that allows an unauthenticated remote attacker to inject commands and achieve arbitrary command execution as root on the device. The underlying issue is in the manageme...
CVE-2012-6601
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x before 4.0.10, and 4.1.x before 4.1.4 allows remote attackers to execute arbitrary code via unspecified vectors, aka Ref ID 36983...
CVE-2012-6605
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11 and 4.0.x before 4.0.9 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka Ref ID 34896...
CVE-2012-6602
CVE-2012-6602 affects Palo Alto Networks PAN-OS before 3.1.10 and 4.x before 4.0.4. The device-management CLI allows remote authenticated users to inject arbitrary shell commands, enabling arbitrary command execution via the CLI. Root cause: command injection in the management interface. Impact a...
CVE-2012-6597
The CVE affects Palo Alto Networks PAN-OS pre-3.1.11 and pre-4.0.9 (specifically PAN-OS 3.1.x before 3.1.11 and 4.0.x before 4.0.9). The underlying issue is a denial-of-service via a crafted command sent to the CLI, exploitable by remote authenticated users to crash the management server. Remedia...
CVE-2012-6598
Affected product : Palo Alto Networks PAN-OS 4.0.x (prior to 4.0.8). Vulnerability : device-management CLI allows authenticated remote users to execute arbitrary shell commands via unspecified vectors. Root cause / impact : command injection via the management interface could lead to arbitrary co...
CVE-2012-6595
CVE-2012-6595 affects Palo Alto Networks PAN-OS prior to 4.0.9 (4.0.x) and prior to 4.1.2 (4.1.x). The issue arises in the device-management command-line interface, allowing an authenticated user to execute arbitrary shell commands via the CLI (unspecified vectors). Impact described in connected ...
CVE-2012-6604
CVE-2012-6604 : Affected are Palo Alto Networks PAN-OS versions prior to 3.1.11 and 4.0.x prior to 4.0.9. The device-management CLI has a vulnerability that allows remote authenticated users to execute arbitrary code via unspecified vectors, potentially leading to full device compromise (root acc...