Lucene search
+L

753 matches found

CISA KEV Catalog
CISA KEV Catalog
added 2024/12/30 12:0 a.m.33 views

Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability

Palo Alto Networks PAN-OS contains a vulnerability in parsing and logging malicious DNS packets in the DNS Security feature that, when exploited, allows an unauthenticated attacker to remotely reboot the firewall. Repeated attempts to trigger this condition will cause the firewall to enter...

8.7CVSS7.2AI score0.26636EPSS
SaveIn wildExploits0
NCSC
NCSC
added 2024/12/27 1:26 p.m.8 views

Vulnerability fixed in Palo Alto Networks PAN OS

Palo Alto Networks has fixed a vulnerability in PAN-OS. The vulnerability is in the way PAN-OS processes specially crafted DNS packets from attackers. This can lead to a device reboot and, on repeated attempts, the firewall can enter maintenance mode. Palo Alto says it has received reports from...

8.7CVSS8.9AI score0.26636EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/27 10:15 a.m.6 views

CVE-2024-3393

A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall t...

7.5CVSS5.8AI score0.26636EPSS
SaveExploits0References2
CVE
CVE
added 2024/12/27 9:44 a.m.610 views

CVE-2024-3393

CVE-2024-3393 affects Palo Alto Networks PAN-OS DNS Security: a vulnerability in parsing/logging malicious DNS packets allows an unauthenticated attacker to reboot the firewall via a crafted packet, with repeated attempts forcing maintenance mode. Connected sources indicate active exploitation an...

8.7CVSS6.5AI score0.26636EPSS
SaveIn wildExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/12/27 12:0 a.m.33 views

Palo Alto Networks PAN-OS 10.1.x < 10.1.15 / 10.2.x < 10.2.14 / 11.1.x < 11.1.5 / 11.2.x < 11.2.3 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 10.1.x prior to 10.1.15 or 10.2.x prior to 10.2.14 or 11.1.x prior to 11.1.5 or 11.2.x prior to 11.2.3. It is, therefore, affected by a vulnerability. A Denial of Service vulnerability in the DNS Security feature of Palo Alto...

8.7CVSS8.1AI score0.26636EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/12/27 12:0 a.m.7 views

PT-2024-9866

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks PAN-OS versions 10.X and 11.X, including Prisma Access. Description: A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious...

8.7CVSS8.2AI score0.26636EPSS
SaveExploits0References111
CNNVD
CNNVD
added 2024/12/27 12:0 a.m.5 views

Palo Alto Networks PAN-OS 安全漏洞

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A security vulnerability exists in Palo Alto Networks PAN-OS, which arises from a denial of service vulnerability in the DNS Security feature that allows an unauthenticated attacker...

8.7CVSS7.8AI score0.26636EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/11/20 12:0 a.m.11 views

Palo Alto Networks PAN-OS 10.2.x < 10.2.11 / 11.0.x < 11.0.6 / 11.1.x < 11.1.5 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 10.2.x prior to 10.2.7-h21 or 11.0.x prior to 11.0.6 or 11.1.x prior to 11.1.4-h9. It is, therefore, affected by a vulnerability. A null pointer dereference vulnerability in the GlobalProtect gateway in Palo Alto Networks PAN-...

8.7CVSS7.3AI score0.0051EPSS
SaveExploits0References2
NVD
NVD
added 2024/11/19 5:15 p.m.12 views

CVE-2024-51645

Cross-Site Request Forgery CSRF vulnerability in themefusecom ThemeFuse Maintenance Mode themefuse-maintenance-mode allows Stored XSS.This issue affects ThemeFuse Maintenance Mode: from n/a through = 1.1.3...

7.1CVSS0.00206EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/19 4:32 p.m.10 views

CVE-2024-51645 WordPress ThemeFuse Maintenance Mode plugin <= 1.1.3 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in themefusecom ThemeFuse Maintenance Mode themefuse-maintenance-mode allows Stored XSS.This issue affects ThemeFuse Maintenance Mode: from n/a through = 1.1.3...

7.1CVSS5.9AI score0.00206EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/19 4:32 p.m.52 views

CVE-2024-51645

CVE-2024-51645: ThemeFuse Maintenance Mode WordPress plugin

7.1CVSS5.9AI score0.00206EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/19 4:32 p.m.45 views

CVE-2024-51645 WordPress ThemeFuse Maintenance Mode plugin <= 1.1.3 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in themefusecom ThemeFuse Maintenance Mode themefuse-maintenance-mode allows Stored XSS.This issue affects ThemeFuse Maintenance Mode: from n/a through = 1.1.3...

7.1CVSS0.00206EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/19 12:0 a.m.5 views

WordPress plugin ThemeFuse Maintenance Mode 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

7.1CVSS6.4AI score0.00206EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/14 9:40 a.m.9 views

CVE-2024-2550 PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway Using a Specially Crafted Packet

A null pointer dereference vulnerability in the GlobalProtect gateway in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to stop the GlobalProtect service on the firewall by sending a specially crafted packet that causes a denial of service DoS condition. Repeated attempts ...

8.7CVSS6.9AI score0.0051EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/14 9:40 a.m.21 views

CVE-2024-2550 PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway Using a Specially Crafted Packet

A null pointer dereference vulnerability in the GlobalProtect gateway in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to stop the GlobalProtect service on the firewall by sending a specially crafted packet that causes a denial of service DoS condition. Repeated attempts ...

8.7CVSS0.0051EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/14 9:40 a.m.82 views

CVE-2024-2550

CVE-2024-2550 affects Palo Alto Networks PAN-OS GlobalProtect gateway. The connected sources describe a null pointer dereference vulnerability that, when exploited by an unauthenticated attacker via a specially crafted packet, can stop the GlobalProtect service and cause a denial-of-service condi...

8.7CVSS6.6AI score0.0051EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/14 9:36 a.m.27 views

CVE-2024-2551 PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted Packet

A null pointer dereference vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to stop a core system service on the firewall by sending a crafted packet through the data plane that causes a denial of service DoS condition. Repeated attempts to trigger this...

8.7CVSS6.9AI score0.00482EPSS
SaveExploits0References1
Palo Alto Networks
Palo Alto Networks
added 2024/11/13 6:0 p.m.17 views

PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted Packet

A null pointer dereference vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to stop a core system service on the firewall by sending a crafted packet through the data plane that causes a denial of service DoS condition. Repeated attempts to trigger this...

8.7CVSS7.1AI score0.00482EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/06 3:15 a.m.9 views

CVE-2024-34682

Improper authorization in Settings prior to SMR Nov-2024 Release 1 allows physical attackers to access stored WiFi password in Maintenance Mode...

2.4CVSS5.8AI score0.00187EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/06 3:15 a.m.43 views

CVE-2024-34682

Improper authorization in Settings prior to SMR Nov-2024 Release 1 allows physical attackers to access stored WiFi password in Maintenance Mode...

2.4CVSS0.00187EPSS
SaveExploits0References1
Rows per page
Query Builder