CVE-2021-3036

An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where secrets in PAN-OS XML API requests are logged in cleartext to the web server logs when the API is used incorrectly. This vulnerability applies only to PAN-OS appliances that are configured to...

CVE-2021-3038

A denial-of-service DoS vulnerability in Palo Alto Networks GlobalProtect app on Windows systems allows a limited Windows user to send specifically-crafted input to the GlobalProtect app that results in a Windows blue screen of death BSOD error. This issue impacts: GlobalProtect app 5.1 versions...

CVE-2021-3038

A denial-of-service DoS vulnerability in Palo Alto Networks GlobalProtect app on Windows systems allows a limited Windows user to send specifically-crafted input to the GlobalProtect app that results in a Windows blue screen of death BSOD error. This issue impacts: GlobalProtect app 5.1 versions...

Denial of service

A denial-of-service DoS vulnerability in Palo Alto Networks GlobalProtect app on Windows systems allows a limited Windows user to send specifically-crafted input to the GlobalProtect app that results in a Windows blue screen of death BSOD error. This issue impacts: GlobalProtect app 5.1 versions...

Cross site request forgery (csrf)

An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where secrets in PAN-OS XML API requests are logged in cleartext to the web server logs when the API is used incorrectly. This vulnerability applies only to PAN-OS appliances that are configured to...

CVE-2021-3038

The CVE-2021-3038 entry describes a DoS vulnerability in Palo Alto Networks GlobalProtect app for Windows. A local user can send specially crafted input that can trigger a BSOD. Affected versions are GlobalProtect app 5.1.x before 5.1.8 and 5.2.x before 5.2.4. Remediation is to update to GlobalPr...

CVE-2021-3038 GlobalProtect App: Windows VPN kernel driver denial of service (DoS)

A denial-of-service DoS vulnerability in Palo Alto Networks GlobalProtect app on Windows systems allows a limited Windows user to send specifically-crafted input to the GlobalProtect app that results in a Windows blue screen of death BSOD error. This issue impacts: GlobalProtect app 5.1 versions...

CVE-2021-3037

PAN-OS contains an information exposure where details for scheduled configuration exports (cleartext username, password, IP) are logged in system logs. Root cause: sensitive credentials are written to logs during export; impact is local access to credentials if logs are read. Exploitation details...

CVE-2021-3036

The CVE-2021-3036 issue affects Palo Alto Networks PAN-OS where secrets are logged in cleartext in web server logs when the PAN-OS XML API is used with duplicate API parameters. Affected component: PAN-OS XML API request handling; root cause: logging of administrator credentials (username, passwo...

CVE-2021-3037 PAN-OS: Secrets for scheduled configuration exports are logged in system logs

An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where the connection details for a scheduled configuration export are logged in system logs. Logged information includes the cleartext username, password, and IP address used to export the PAN-OS...

Weak Password Vulnerability in RG-NBR700G of Riptide Networks Inc.

RG-NBR700G is an Internet Behavior Management router from Riptide, which is designed for office full scenarios. A weak password vulnerability exists in RG-NBR700G, which can be exploited by attackers to obtain sensitive information...

Command Execution Vulnerability in NBR1000G of Riptide Networks Inc.

The NBR1000G is a router from Ruijie Networks Co. A command execution vulnerability exists in the NBR1000G from Riptide Networks Corporation, which can be exploited by an attacker to execute arbitrary commands...

PT-2021-18724 · Palo Alto Networks +1 · Globalprotect +1

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks GlobalProtect app versions prior to 5.1.8 Palo Alto Networks GlobalProtect app versions prior to 5.2.4 Description: A denial-of-service DoS issue in the GlobalProtect app on Windows systems allows a limited Windows user to...

Command Execution Vulnerability in NBR1300G of Riptide Networks Inc.

NBR1300G is an enterprise router from Ruijie Networks Co. A command execution vulnerability exists in the NBR1300G from Riptide Networks Corporation, which can be exploited by an attacker to execute arbitrary commands...

Palo Alto Networks PAN-OS Log Message Disclosure Vulnerability (CNVD-2021-31952)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. Palo Alto Networks PAN-OS suffers from a log information disclosure vulnerability that can be exploited by an attacker to access sensitive information...

Juniper Networks Paragon 访问控制错误漏洞

Juniper Networks Paragon is a software application from Juniper, USA. A real-time network topology view. An Access Control Error vulnerability exists in Paragon Active Assurance Control Center version 2.36, which allows remote attackers to bypass the authentication process. The following products...

Palo Alto Networks GlobalProtect Denial of Service Vulnerability

Palo Alto Networks GlobalProtect is a suite of network protection software from Palo Alto Networks, USA. The software provides firewall monitoring and threat prevention. A security vulnerability exists in the GlobalProtect app that allows local users to perform Denial of Service DoS attacks. No...

Juniper Networks Junos OS Privilege Permission and Access Control Issues Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Junos OS is vulnerable to privilege permission and access control issues, for which no information is currently available...

Weak Password Vulnerability in RG-ISG of Ruijie Networks Co.

Ruijie Networks is a specialized network vendor with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products, storage, and more. A weak password vulnerability exists in the RG-ISG of Ruijie Networks Corporation,...

Information Disclosure Vulnerability in RG-ISG of Riptide Networks Inc.

Ruijie Networks is a specialized network vendor with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products, storage, and more. An information disclosure vulnerability exists in RG-ISG of Ruijie Networks...