18998 matches found
CVE-2023-38046
A vulnerability exists in Palo Alto Networks PAN-OS software that enables an authenticated administrator with the privilege to commit a specifically created configuration to read local files and resources from the system...
Code injection
A vulnerability exists in Palo Alto Networks PAN-OS software that enables an authenticated administrator with the privilege to commit a specifically created configuration to read local files and resources from the system...
CVE-2023-38046
CVE-2023-38046 affects Palo Alto Networks PAN-OS: an authenticated administrator with commit privileges can read local files and resources from the system during a specifically crafted configuration commit. The ENISA/EUVD and Palo Alto advisories describe the root cause as an externally controlle...
PT-2023-3932 · Palo Alto Networks · Pan-Os
Name of the Vulnerable Software and Affected Versions: Palo Alto Networks PAN-OS affected versions not specified Description: A vulnerability exists in Palo Alto Networks PAN-OS software that enables an authenticated administrator with the privilege to commit a specifically created configuration ...
Siemens RUGGEDCOM ROX cross-site scripting vulnerability (CNVD-2023-55710)
RUGGEDCOM products offer a degree of robustness and reliability that sets the standard for communication networks deployed in harsh environments. A cross-site scripting vulnerability exists in Siemens RUGGEDCOM ROX, which can be exploited by attackers to execute malicious javascript code by...
Siemens RUGGEDCOM ROX Weak Password Vulnerability
RUGGEDCOM products offer a degree of robustness and reliability that sets the standard for communication networks deployed in harsh environments. A weak password vulnerability exists in the Siemens RUGGEDCOM ROX, which can be exploited by an attacker to read and modify any data passed to the...
Siemens RUGGEDCOM ROX Input Validation Error Vulnerability
RUGGEDCOM products offer a degree of robustness and reliability that sets the standard for communication networks deployed in harsh environments. An input validation error vulnerability exists in the Siemens RUGGEDCOM ROX, which can be exploited by an attacker to send an incorrectly formatted HTT...
Siemens RUGGEDCOM ROX Cross-Site Scripting Vulnerability
RUGGEDCOM products offer a degree of robustness and reliability that sets the standard for communication networks deployed in harsh environments. A cross-site scripting vulnerability exists in Siemens RUGGEDCOM ROX, which can be exploited by attackers to execute malicious javascript code by...
Juniper Junos OS Vulnerability (JSA71640)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA71640 advisory. - A Use After Free vulnerability in the packet forwarding engine PFE of Juniper Networks Junos OS Evolved on PTX10001-36MR, and PTX10004, PTX10008, PTX10016 with LC1201/1202...
Juniper Junos OS Vulnerability (JSA71642)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA71642 advisory. - An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on QFX10000 Series allows a network...
Siemens RUGGEDCOM ROX cross-site scripting vulnerability (CNVD-2023-55709)
RUGGEDCOM products offer a degree of robustness and reliability that sets the standard for communication networks deployed in harsh environments. A cross-site scripting vulnerability exists in Siemens RUGGEDCOM ROX, which can be exploited by attackers to execute malicious javascript code by...
PT-2023-4000 · Juniper Networks · Srx Series +2
Name of the Vulnerable Software and Affected Versions: Juniper Networks SRX Series and MX Series versions prior to SigPack 3598 Description: The issue is related to an improper validation of syntactic correctness of input in the Intrusion Detection and Prevention IDP system of Junos OS, allowing ...
Palo Alto Networks PAN-OS 安全漏洞
Palo Alto Networks PAN-OS is a next-generation firewall software from Palo Alto Networks, USA. A security vulnerability exists in Palo Alto Networks PAN-OS that originates from an authenticated administrator having the right to submit a specially created configuration to read local files and...
Juniper Junos OS Vulnerability (JSA71661)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA71661 advisory. - An Improper Validation of Specified Index, Position, or Offset in Input vulnerability in the Connectivity Fault ManagementCFM module of Juniper Networks Junos OS on MX...
Juniper Junos OS Vulnerability (JSA71643)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA71643 advisory. - A Use of an Uninitialized Resource vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a local, authenticated attacke...
Siemens RUGGEDCOM ROX 系列多款产品 跨站脚本漏洞
RUGGEDCOM products offer a degree of robustness and reliability that sets the standard for communication networks deployed in harsh environments. A cross-site scripting vulnerability exists in Siemens RUGGEDCOM ROX, which can be exploited by attackers to execute malicious javascript code by...
Exploit for Classic Buffer Overflow in Extremenetworks Iq_Engine
CVE-2023-35803 - Unauthenticated RCE in Extreme Networks/Aer...
CLSA-2023-1689010064 Fix CVE(s): CVE-2022-29885
SECURITY UPDATE: EncryptInterceptor only provides partial protection on untrusted network - debian/patches/CVE-2022-29885.patch: Update the documentation to state that the EncryptInterceptor does not provide sufficient protection to run Tomcat clustering over an untrusted network. - CVE-2022-2988...
Ruijie Networks BCR810W 操作系统命令注入漏洞
The Ruijie Networks BCR810W is an intelligent cloud router from Ruijie Networks China. An operating system command injection vulnerability exists in the Ruijie Networks BCR810W version 2.5.10. An attacker could exploit this vulnerability to conduct an OS command injection attack...
PT-2023-8665 · Google +6 · Android +7
Name of the Vulnerable Software and Affected Versions: wpa supplicant versions through 2.10 Description: The issue is related to the implementation of PEAP in wpa supplicant, which allows authentication bypass. For a successful attack, wpa supplicant must be configured to not verify the network's...