CVE-2023-0008

A file disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write administrator with access to the web interface to export local files from the firewall through a race condition...

CVE-2023-0008

A file disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write administrator with access to the web interface to export local files from the firewall through a race condition...

Palo Alto Networks PAN-OS 安全漏洞

Palo Alto Networks PAN-OS is a next-generation firewall software from Palo Alto Networks, USA. A security vulnerability exists in Palo Alto Networks PAN-OS that originates from an authenticated administrator having access to a web interface that can export local files from the firewall via a...

kernel: netfilter: nf_conntrack_irc message handling issue

A flaw was found in the Linux kernel in nfconntrackirc where the message handling can be confused and it incorrectly matches on the message. An attacker could exploit this vulnerability to bypass firewall when users are using unencrypted IRC with nfconntrackirc configured...

kernel: netfilter: nf_conntrack_irc message handling issue

A flaw was found in the Linux kernel in nfconntrackirc where the message handling can be confused and it incorrectly matches on the message. An attacker could exploit this vulnerability to bypass firewall when users are using unencrypted IRC with nfconntrackirc configured...

May 9, 2023—KB5026370 (OS Build 20348.1726)

None None...

NETGEAR SRX5308 Cross-Site Scripting Vulnerability (CNVD-2023-43026)

The NETGEAR SRX5308 is a VPN firewall appliance from NETGEAR. The NETGEAR SRX5308 suffers from a cross-site scripting vulnerability that originates from a misuse of the parameter dhcp.SecDnsIPByte2. The vulnerability can be exploited by an attacker to obtain sensitive information such as user...

NETGEAR SRX5308 Cross-Site Scripting Vulnerability (CNVD-2023-43020)

The NETGEAR SRX5308 is a VPN firewall appliance from NETGEAR. The NETGEAR SRX5308 suffers from a cross-site scripting vulnerability that originates from incorrect manipulation of the parameter ntp.server1. The vulnerability can be exploited by an attacker to obtain sensitive information such as...

NETGEAR SRX5308 Cross-Site Scripting Vulnerability (CNVD-2023-43019)

The NETGEAR SRX5308 is a VPN firewall appliance from NETGEAR. The NETGEAR SRX5308 suffers from a cross-site scripting vulnerability that originates from an incorrect operation of the parameter smtpServer.fromAddr. The vulnerability can be exploited by an attacker to obtain sensitive information...

NETGEAR SRX5308 Cross-Site Scripting Vulnerability (CNVD-2023-43022)

The NETGEAR SRX5308 is a VPN firewall appliance from NETGEAR. The NETGEAR SRX5308 suffers from a cross-site scripting vulnerability that stems from incorrect manipulation of the parameter ManualDate.minutes. An attacker can exploit this vulnerability to execute client-side code...

NETGEAR SRX5308 Denial of Service Vulnerability

The NETGEAR SRX5308 is a VPN firewall appliance from NETGEAR. A denial of service vulnerability exists in the NETGEAR SRX5308. An attacker could exploit this vulnerability to cause a denial of service on the system...

NETGEAR SRX5308 Cross-Site Scripting Vulnerability

The NETGEAR SRX5308 is a VPN firewall appliance from NETGEAR. The NETGEAR SRX5308 suffers from a cross-site scripting vulnerability that originates from an incorrect operation of the parameter sysLogInfo.serverName, which can be exploited by an attacker to obtain sensitive information such as use...

NETGEAR SRX5308 Cross-Site Scripting Vulnerability (CNVD-2023-43018)

The NETGEAR SRX5308 is a VPN firewall appliance from NETGEAR. The NETGEAR SRX5308 suffers from a cross-site scripting vulnerability that originates from incorrect manipulation of the parameter smtpServer.emailServer. The vulnerability can be exploited by an attacker to obtain sensitive informatio...

NETGEAR SRX5308 Cross-Site Scripting Vulnerability (CNVD-2023-42977)

The NETGEAR SRX5308 is a VPN firewall appliance from NETGEAR. The NETGEAR SRX5308 suffers from a cross-site scripting vulnerability that stems from an incorrect manipulation of the parameter BandWidthProfile.ProfileName. An attacker could use this vulnerability to steal the victim's cookie-based...

NETGEAR SRX5308 Cross-Site Scripting Vulnerability (CNVD-2023-43024)

The NETGEAR SRX5308 is a VPN firewall appliance from NETGEAR. The NETGEAR SRX5308 suffers from a cross-site scripting vulnerability that stems from an incorrect manipulation of the parameter wanName. The vulnerability can be exploited by an attacker to obtain sensitive information such as user...

NETGEAR SRX5308 Cross-Site Scripting Vulnerability (CNVD-2023-43029)

The NETGEAR SRX5308 is a VPN firewall appliance from NETGEAR. The NETGEAR SRX5308 suffers from a cross-site scripting vulnerability that stems from incorrect manipulation of the parameter winsServer1. An attacker can exploit the vulnerability to execute client-side code...

NETGEAR SRX5308 Cross-Site Scripting Vulnerability (CNVD-2023-43021)

The NETGEAR SRX5308 is a VPN firewall appliance from NETGEAR. The NETGEAR SRX5308 suffers from a cross-site scripting vulnerability that originates from a misuse of the parameter ntp.server2. The vulnerability can be exploited by an attacker to obtain sensitive information such as user cookies...

NETGEAR SRX5308 Cross-Site Scripting Vulnerability (CNVD-2023-43023)

The NETGEAR SRX5308 is a VPN firewall appliance from NETGEAR. The NETGEAR SRX5308 suffers from a cross-site scripting vulnerability that originates from a misuse of the parameter ConfigPort.LogicalIfName. An attacker can exploit this vulnerability to obtain sensitive information such as user...

NETGEAR SRX5308 Cross-Site Scripting Vulnerability (CNVD-2023-43028)

The NETGEAR SRX5308 is a VPN firewall appliance from NETGEAR. The NETGEAR SRX5308 suffers from a cross-site scripting vulnerability that originates from incorrect manipulation of the parameter smtpServer.toAddr. The vulnerability can be exploited by an attacker to obtain sensitive information suc...

NETGEAR SRX5308 Cross-Site Scripting Vulnerability (CNVD-2023-43017)

The NETGEAR SRX5308 is a VPN firewall appliance from NETGEAR. The NETGEAR SRX5308 suffers from a cross-site scripting vulnerability that stems from incorrect manipulation of the parameter USERDBUsers.Password. An attacker can exploit this vulnerability to execute client-side code...