Lucene search
+L

1399 matches found

Positive Technologies
Positive Technologies
•added 2013/09/16 12:00 a.m.•1 views

PT-2013-2822

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.8.5 Description The issue allows local users to obtain sensitive information by listing the process, due to the mdmclient in Mobile Device Management placing a password on the command line. Recommendations F...

2.1CVSS0.00338EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/09/16 12:00 a.m.•6 views

CVE-2013-1030: Exposure of Sensitive Information to an Unauthorized Actor

mdmclient in Mobile Device Management in Apple Mac OS X before 10.8.5 places a password on the command line, which allows local users to obtain sensitive information by listing the process...

2.1CVSS5.8AI score0.00338EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2013/09/13 12:00 a.m.•158 views

Mac OS X 10.8.x < 10.8.5 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.8.x that is prior to 10.8.5. The newer version contains multiple security-related fixes for the following components : - Apache - Bind - Certificate Trust Policy - CoreGraphics - ImageIO - Installer - IPSec - Kernel - Mobile Device Management -...

10CVSS7.5AI score0.54312EPSS
SaveExploits34References34
NVD
NVD
•added 2013/08/31 5:55 p.m.•33 views

CVE-2012-6600

The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.2 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 34502...

9CVSS7.2AI score0.03089EPSS
SaveExploits0References1
NVD
NVD
•added 2013/08/31 5:55 p.m.•34 views

CVE-2012-6595

The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.2 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID 34595...

9CVSS7.3AI score0.03001EPSS
SaveExploits0References1
NVD
NVD
•added 2013/08/31 5:55 p.m.•27 views

CVE-2012-6598

The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.8 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 33080...

9CVSS7.2AI score0.03001EPSS
SaveExploits0References1
NVD
NVD
•added 2013/08/31 5:55 p.m.•29 views

CVE-2013-5664

Cross-site scripting XSS vulnerability in the web-based device-management API browser in Palo Alto Networks PAN-OS before 4.1.13 and 5.0.x before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via crafted data, aka Ref ID 50908...

4.3CVSS5.7AI score0.02294EPSS
SaveExploits0References1
Prion
Prion
•added 2013/08/31 5:55 p.m.•24 views

Command injection

The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x before 4.0.10, and 4.1.x before 4.1.4 allows remote attackers to execute arbitrary code via unspecified vectors, aka Ref ID 36983...

10CVSS8.3AI score0.04404EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2013/08/31 5:55 p.m.•28 views

Design/Logic Flaw

The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11 and 4.0.x before 4.0.9 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka Ref ID 34896...

9CVSS7.9AI score0.03214EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2013/08/31 5:00 p.m.•17 views

EUVD-2012-6448

The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x before 4.0.10, and 4.1.x before 4.1.4 allows remote attackers to execute arbitrary code via unspecified vectors, aka Ref ID 36983...

10CVSS7.7AI score0.04404EPSS
SaveExploits0References1
CVE
CVE
•added 2013/08/31 5:00 p.m.•64 views

CVE-2012-6604

CVE-2012-6604 : Affected are Palo Alto Networks PAN-OS versions prior to 3.1.11 and 4.0.x prior to 4.0.9. The device-management CLI has a vulnerability that allows remote authenticated users to execute arbitrary code via unspecified vectors, potentially leading to full device compromise (root acc...

9CVSS7.6AI score0.03214EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2013/08/31 5:00 p.m.•41 views

CVE-2013-5664

Cross-site scripting XSS vulnerability in the web-based device-management API browser in Palo Alto Networks PAN-OS before 4.1.13 and 5.0.x before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via crafted data, aka Ref ID 50908...

5.7AI score0.02294EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2013/08/31 5:00 p.m.•38 views

CVE-2012-6591

The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.5 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID 31116...

7.3AI score0.03001EPSS
SaveExploits0References1
CVE
CVE
•added 2013/08/31 5:00 p.m.•68 views

CVE-2012-6601

PAN-OS &lt; 3.1.12, &lt; 4.0.10 (4.0.x) and

10CVSS8AI score0.04404EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2013/08/31 5:00 p.m.•64 views

CVE-2012-6605

CVE-2012-6605 affects Palo Alto Networks PAN-OS prior to 3.1.11 and 4.0.x prior to 4.0.9. The device-management CLI allows remote authenticated users to execute arbitrary code via unspecified vectors, potentially compromising the device (root). Affected versions require upgrading to PAN-OS 3.1.11...

9CVSS7.6AI score0.03214EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2013/08/31 5:00 p.m.•69 views

CVE-2012-6591

Summary: CVE-2012-6591 affects Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.5. The device-management CLI is vulnerable to command injection. Impact: remotely (via authenticated admin) execute arbitrary commands with potentially complete device compromise. Affected versions: PAN-OS...

9CVSS7.5AI score0.03001EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2013/08/31 5:00 p.m.•37 views

CVE-2012-6601

The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x before 4.0.10, and 4.1.x before 4.1.4 allows remote attackers to execute arbitrary code via unspecified vectors, aka Ref ID 36983...

7.8AI score0.04404EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/08/31 12:00 a.m.•6 views

CVE-2012-6591: Improper Neutralization of Special Elements used in an OS Command

The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.5 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID 31116...

9CVSS6.3AI score0.03001EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/08/31 12:00 a.m.•9 views

CVE-2012-6602: Improper Neutralization of Special Elements used in an OS Command

The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.4 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 30122...

9CVSS6.3AI score0.03001EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/08/31 12:00 a.m.•7 views

CVE-2012-6594: Improper Neutralization of Special Elements used in an OS Command

The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11, 4.0.x before 4.0.8, and 4.1.x before 4.1.1 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID 34299...

9CVSS6.3AI score0.03001EPSS
SaveExploits0References2
Rows per page
Query Builder