Command injection

An OS Command Injection vulnerability in the PAN-OS web management interface allows authenticated administrators to execute arbitrary OS commands with root privileges by sending a malicious request to generate new certificates for use in the PAN-OS configuration. This issue affects: All versions ...

CVE-2020-2029

CVE-2020-2029 is an OS command injection vulnerability in PAN-OS web management interface. Authenticated administrators can execute arbitrary OS commands with root privileges by sending a malicious request to generate new certificates for PAN-OS configuration. Affected are PAN-OS 8.0 (all version...

CVE-2020-2029 PAN-OS: OS command injection vulnerability in management interface certificate generator

An OS Command Injection vulnerability in the PAN-OS web management interface allows authenticated administrators to execute arbitrary OS commands with root privileges by sending a malicious request to generate new certificates for use in the PAN-OS configuration. This issue affects: All versions ...

PAN-OS: Buffer overflow in authd authentication response

A buffer overflow vulnerability in the authd component of the PAN-OS management server allows authenticated administrators to disrupt system processes and potentially execute arbitrary code with root privileges. This issue affects: All versions of PAN-OS 7.1 and PAN-OS 8.0; PAN-OS 8.1 versions...

PAN-OS: OS command injection vulnerability in management interface certificate generator

An OS Command Injection vulnerability in the PAN-OS web management interface allows authenticated administrators to execute arbitrary OS commands with root privileges by sending a malicious request to generate new certificates for use in the PAN-OS configuration. This issue affects: All versions ...

PT-2020-3477

Name of the Vulnerable Software and Affected Versions PAN-OS versions 8.0 PAN-OS versions 7.1 earlier than 7.1.26 PAN-OS versions 8.1 earlier than 8.1.13 Description The issue is related to an OS Command Injection vulnerability in the PAN-OS web management interface. This vulnerability allows...

CVE-2020-2029: Improper Neutralization of Special Elements used in an OS Command

An OS Command Injection vulnerability in the PAN-OS web management interface allows authenticated administrators to execute arbitrary OS commands with root privileges by sending a malicious request to generate new certificates for use in the PAN-OS configuration. This issue affects: All versions ...

Unauthorized Access Vulnerability in ZLAN Serial Server

Shanghai Zoran Information Technology Co., Ltd. is a high-tech enterprise providing industrial IoT solutions. An unauthorized access vulnerability exists in the ZLAN serial port server, which can be exploited by an attacker to gain unauthorized access to the WEB management interface...

CVE-2020-3339 Cisco Prime Infrastructure SQL Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability is due to improper validation of user-submitted parameters. An attacker could exploit this...

CVE-2020-3339: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability is due to improper validation of user-submitted parameters. An attacker could exploit this...

PT-2020-2876

Name of the Vulnerable Software and Affected Versions Cisco Prime Infrastructure affected versions not specified Description The issue is related to a vulnerability in the web-based management interface, allowing an authenticated, remote attacker to conduct SQL injection attacks. This is due to...

Cisco Adaptive Security Appliance Software Web-Based Management Interface Privilege Escalation Vulnerability

According to its self-reported version, Cisco Adaptive Security Appliance ASA Software is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information C Tenable Network Security, Inc. include'compat.inc'; if description scriptid137052;...

Cisco Firepower Threat Defense Software Management Interface DoS (cisco-sa-ftd-mgmt-interface-dos-FkG4MuTU)

According to its self-reported version, Cisco Firepower Threat Defense Software is affected by a denial of service DoS vulnerability in the management interface due to how FTD handles session timeouts for management connections. An unauthenticated, remote attacker can exploit this issue, by sendi...

Important: Red Hat Security Advisory: ipmitool security update

An update for ipmitool is now available for Red Hat Enterprise Linux 7.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

Important: Red Hat Security Advisory: ipmitool security update

An update for ipmitool is now available for Red Hat Enterprise Linux 7.3 Advanced Update Support, Red Hat Enterprise Linux 7.3 Telco Extended Update Support, and Red Hat Enterprise Linux 7.3 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security...

Huawei Data Communication: Improper Resource Management Vulnerability in Some Huawei Products (huawei-sa-20180418-01-ar)

There is an improper resource management vulnerability in some AR series products. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

CVE-2020-3184 Cisco Prime Collaboration Provisioning Software SQL Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly validates...

PT-2020-3053

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning Software affected versions not specified Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected...

CVE-2020-3184: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly validates...

CVE-2020-3280: Improper Input Validation

A vulnerability in the Java Remote Management Interface of Cisco Unified Contact Center Express Unified CCX could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to insecure deserialization of user-supplied content by the affecte...