CVE-2023-32752 L7 Networks InstantScan & InstantQoS - Arbitrary File Upload

L7 Networks InstantScan IS-8000 & InstantQoS IQ-8000’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt servi...

VMware Aria Operations For Networks Web Interface Detection

Binary data vmwareariaoperationsfornetworkswebdetect.nbin...

VMWare Aria Operations for Networks Multiple Vulnerabilities (VMSA-2023-0012)

According to its self-reported version, the instance of VMWare Aria Operations for Networks running on the remote web server is 6.x 6.2.0.1684162127, 6.3.x 6.3.0.1684163738, 6.4.x 6.4.0.1684166601, 6.5.x 6.5.1.1684151627, 6.6.x 6.6.0.1684154516, 6.7.x 6.7.0.1684151941, 6.8.x 6.8.0.1684995353, 6.9...

CVE-2023-34565

Netbox 3.5.1 is vulnerable to Cross Site Scripting XSS in the "Create Wireless LAN Groups" function...

CVE-2023-0010

A reflected cross-site scripting XSS vulnerability in the Captive Portal feature of Palo Alto Networks PAN-OS software can allow a JavaScript payload to be executed in the context of an authenticated Captive Portal user’s browser when they click on a specifically crafted link...

CVE-2023-0010

A reflected cross-site scripting XSS vulnerability in the Captive Portal feature of Palo Alto Networks PAN-OS software can allow a JavaScript payload to be executed in the context of an authenticated Captive Portal user’s browser when they click on a specifically crafted link...

CVE-2023-0009

A local privilege escalation PE vulnerability in the Palo Alto Networks GlobalProtect app on Windows enables a local user to execute programs with elevated privileges...

Privilege escalation

A local privilege escalation PE vulnerability in the Palo Alto Networks GlobalProtect app on Windows enables a local user to execute programs with elevated privileges...

Cross site scripting

A reflected cross-site scripting XSS vulnerability in the Captive Portal feature of Palo Alto Networks PAN-OS software can allow a JavaScript payload to be executed in the context of an authenticated Captive Portal user’s browser when they click on a specifically crafted link...

CVE-2023-0009 GlobalProtect App: Local Privilege Escalation (PE) Vulnerability

A local privilege escalation PE vulnerability in the Palo Alto Networks GlobalProtect app on Windows enables a local user to execute programs with elevated privileges...

CVE-2023-0009

CVE-2023-0009 affects the Palo Alto Networks GlobalProtect App on Windows. The vulnerability is a local privilege escalation in the GlobalProtect Agent caused by issues in input data processing, which can allow a local user or service account with token impersonation privileges to execute program...

CVE-2023-0009 GlobalProtect App: Local Privilege Escalation (PE) Vulnerability

A local privilege escalation PE vulnerability in the Palo Alto Networks GlobalProtect app on Windows enables a local user to execute programs with elevated privileges...

CVE-2023-0010

CVE-2023-0010 is a reflected XSS in Palo Alto Networks PAN-OS Captive Portal. The vulnerability arises from inadequate filtering/escaping of user data in the Captive Portal page, allowing an attacker to execute JavaScript in the context of an authenticated user when they click a crafted link. Aff...

PT-2023-3283 · Palo Alto Networks +1 · Globalprotect +2

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks GlobalProtect Agent affected versions not specified Description: The issue is related to errors in processing input data in the GlobalProtect Agent. It allows an attacker to execute arbitrary commands with elevated...

PT-2023-3291 · Palo Alto Networks · Pan-Os

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks PAN-OS affected versions not specified Description: A reflected cross-site scripting XSS vulnerability in the Captive Portal feature of Palo Alto Networks PAN-OS software can allow a JavaScript payload to be executed in the...

Palo Alto Networks PAN-OS 跨站脚本漏洞

Palo Alto Networks PAN-OS is a next-generation firewall software from Palo Alto Networks, USA. A cross-site scripting vulnerability exists in Palo Alto Networks PAN-OS, which stems from the lack of effective filtering and escaping of user-supplied data in the Captive Portal feature, and can be...

Proofpoint Threat Response 跨站脚本漏洞

Proofpoint Threat Response is Proofpoint's leading Security Orchestration, Automation and Response SOAR solution that enables security teams to respond faster and more effectively to the evolving threat landscape. A security vulnerability exists in Proofpoint Threat Response versions prior to...

Palo Alto Networks PAN-OS 8.1.x < 8.1.24 / 9.0.x < 9.0.17 / 9.1.x < 9.1.16 / 10.0.x < 10.0.11 / 10.1.x < 10.1.6 / 10.2.x < 10.2.2 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 8.1.x prior to 8.1.24 or 9.0.x prior to 9.0.17 or 9.1.x prior to 9.1.16 or 10.0.x prior to 10.0.11 or 10.1.x prior to 10.1.6 or 10.2.x prior to 10.2.2. It is, therefore, affected by a vulnerability. - A reflected cross-site...

F5 Networks BIG-IP : BIG-IP iRules vulnerability (K69940053)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.0 / 15.0.0. It is, therefore, affected by a vulnerability as referenced in the K69940053 advisory. - In all BIG-IP 13.1.x versions, when an iRule containing the HTTP::collect command is configured on a virtual server,...

The vulnerability of the Juniper Networks Junos operating system’s bbe-smgd daemon, which allows a hacker to cause a service failure.

The vulnerability of the Juniper Networks Junos operating system’s bbe-smgd daemon is related to insufficient checking of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...