PT-2021-18730

Name of the Vulnerable Software and Affected Versions PAN-OS versions prior to 8.1.19 PAN-OS versions prior to 9.0.14 PAN-OS versions prior to 9.1.10 Description An OS command argument injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator to...

PT-2021-18737

Name of the Vulnerable Software and Affected Versions PAN-OS versions 8.1 through 8.1.18 PAN-OS versions 9.0 through 9.0.13 PAN-OS versions 9.1 through 9.1.8 PAN-OS versions 10.0 through 10.0.4 Description An improper authentication issue exists in Palo Alto Networks PAN-OS software, allowing a...

CVE-2021-3045: Improper Neutralization of Argument Delimiters in a Command

An OS command argument injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator to read any arbitrary file from the file system. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.19; PAN-OS 9.0 versions earlier than PAN-OS 9.0.14;...

Palo Alto Networks PAN-OS 8.1.x < 8.1.19 / 9.0.x < 9.0.14 / 9.1.x < 9.1.9 / 10.0.x < 10.0.5 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 8.1.x prior to 8.1.19 or 9.0.x prior to 9.0.14 or 9.1.x prior to 9.1.9 or 10.0.x prior to 10.0.5. It is, therefore, affected by a vulnerability. - An improper authentication vulnerability exists in Palo Alto Networks PAN-OS...

CVE-2021-3048: Improper Input Validation

Certain invalid URL entries contained in an External Dynamic List EDL cause the Device Server daemon devsrvr to stop responding. This condition causes subsequent commits on the firewall to fail and prevents administrators from performing commits and configuration changes even though the firewall...

CVE-2021-3050: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator to execute arbitrary OS commands to escalate privileges. This issue impacts: PAN-OS 9.0 version 9.0.10 through PAN-OS 9.0.14; PAN-OS 9.1 version 9.1.4 through PAN-OS 9.1.10;...

PT-2021-18763

Name of the Vulnerable Software and Affected Versions PAN-OS versions 9.0.10 through 9.0.14 PAN-OS versions 9.1.4 through 9.1.10 PAN-OS versions 10.0.0 through 10.0.7 PAN-OS versions 10.1.0 through 10.1.1 Description An OS command injection vulnerability in the Palo Alto Networks PAN-OS web...

PT-2021-18743

Name of the Vulnerable Software and Affected Versions PAN-OS versions 8.1 through 8.1.18 PAN-OS versions 9.0 through 9.0.13 PAN-OS versions 9.1 through 9.1.9 PAN-OS versions 10.0 through 10.0.3 Description A cryptographically weak pseudo-random number generator PRNG is used during authentication ...

PT-2021-18751

Name of the Vulnerable Software and Affected Versions PAN-OS versions prior to 9.0.14 PAN-OS versions prior to 9.1.9 PAN-OS versions prior to 10.0.5 Description The issue is caused by certain invalid URL entries contained in an External Dynamic List EDL that cause the Device Server daemon devsrvr...

Palo Alto Networks PAN-OS 操作系统命令注入漏洞

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. An operating system command injection vulnerability exists in the Palo Alto Networks PAN-OS web, which stems from an operating system command injection vulnerability in the Palo Alt...

PT-2021-11707

Name of the Vulnerable Software and Affected Versions: PAN-OS versions prior to 9.0.14 PAN-OS versions prior to 9.1.9 PAN-OS versions prior to 10.0.5 Description: The issue occurs when certain invalid URL entries are contained in an External Dynamic List EDL, causing the Device Server daemon to...

CVE-2021-3047: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

A cryptographically weak pseudo-random number generator PRNG is used during authentication to the Palo Alto Networks PAN-OS web interface. This enables an authenticated attacker, with the capability to observe their own authentication secrets over a long duration on the PAN-OS appliance, to...

CVE-2021-3046: Improper Authentication

An improper authentication vulnerability exists in Palo Alto Networks PAN-OS software that enables a SAML authenticated attacker to impersonate any other user in the GlobalProtect Portal and GlobalProtect Gateway when they are configured to use SAML authentication. This issue impacts: PAN-OS 8.1...

PT-2021-18778

Name of the Vulnerable Software and Affected Versions PAN-OS versions prior to 8.1.21 PAN-OS versions prior to 9.0.14-h4 PAN-OS versions prior to 9.1.11-h3 PAN-OS versions prior to 10.0.8-h4 PAN-OS versions prior to 10.1.3 Description An improper handling of exceptional conditions issue exists in...

Cisco 7000 Series IP Camera Memory Leak Vulnerability

The Cisco 7000 Series IP cameras are 5 megapixel, high definition, outdoor fixed dome cameras in vandal resistant enclosures with pan/tilt/zoom functionality.The Cisco 7000 Series IP camera implementation of Link Layer Discovery Protocol LLDP in firmware versions prior to 2.12.4 is vulnerable to ...

XSS Vulnerability in Disk Enterprise LCMS

Pan Enterprise LCMS is a lightweight PHP development framework . LCMS has an XSS vulnerability that can be exploited by attackers to obtain sensitive information such as user cookies...

Contiki-NG 缓冲区错误漏洞

Contiki-NG is an open source cross-platform operating system for next-generation IoT devices. An out-of-bounds read vulnerability exists in the 6LoWPAN implementation in Contiki-NG 4.6 and earlier. The vulnerability stems from the IPv6 header decompression function not performing proper boundary...

File upload vulnerability in disk enterprise LCMS (CNVD-2021-43592)

Pan Enterprise LCMS is a lightweight PHP development framework . A file upload vulnerability exists in PanEnterprise LCMS. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

SQL Injection Vulnerability in Disk Enterprise LCMS (CNVD-2021-40260)

Pan Enterprise LCMS is a lightweight PHP development framework . A SQL injection vulnerability exists in PanEnterprise LCMS. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Disk Enterprise LCMS (CNVD-2021-41519)

Pan Enterprise LCMS is a lightweight PHP development framework . A SQL injection vulnerability exists in PanEnterprise LCMS, which can be exploited by attackers to obtain sensitive information from the database...