CVE-2015-4162

XML external entity XXE vulnerability in the management interface in PAN-OS before 5.0.16, 6.x before 6.0.8, and 6.1.x before 6.1.4 allows remote authenticated administrators to obtain sensitive information via crafted XML data...

CVE-2015-4162

PAN-OS XXE vulnerability (CVE-2015-4162) affects the management interface. An authenticated PAN-OS user can craft XML to retrieve arbitrary content from the device. Impact: information disclosure. Affected versions: PAN-OS before 5.0.16; 6.x before 6.0.8; 6.1.x before 6.1.4. Mitigation/remediatio...

CVE-2015-4162: Undefined Security Weakness

XML external entity XXE vulnerability in the management interface in PAN-OS before 5.0.16, 6.x before 6.0.8, and 6.1.x before 6.1.4 allows remote authenticated administrators to obtain sensitive information via crafted XML data...

XML External Entity (XXE) Vulnerability

An XML parsing vulnerability exists in PAN-OS allowing a malicious user within PAN-OS to inject malicious XML data into the web-based device management front-end allowing the user to retrieve arbitrary content from the device. The user must be an authenticated user issuing the request. Ref 71273...

XML External Entity (XXE) Vulnerability

An XML parsing vulnerability exists in PAN-OS allowing a malicious user within PAN-OS to inject malicious XML data into the web-based device management front-end allowing the user to retrieve arbitrary content from the device. The user must be an authenticated user issuing the request. Ref 71273...

Palo Alto PAN-OS XSS Vulnerability (PAN-SA-2015-0003)

A cross-site scripting vulnerability exists in the web-based device management interface whereby data provided by the user is echoed back to the user without sanitization. Ref 73638 SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and...

Palo Alto Networks PAN-OS < 5.0.16 / 6.0.x < 6.0.9 / 6.1.x < 6.1.3 XSS

The remote host is running a version of Palo Alto Networks PAN-OS prior to 5.0.16 / 6.0.9 / 6.1.3. It is, therefore, affected by a cross-site vulnerability in the management interface due to improper validation of user-supplied input. A remote attacker can exploit this vulnerability by convincing...

Palo Alto Networks Pan-OS Management Interface Cross-Site Scripting Vulnerability

PAN-OS is a security-specific operating system designed to control Palo Alto Networks' next-generation firewalls, providing a rich set of firewall, management, and network features. A cross-site scripting vulnerability exists in the Palo Alto Networks Pan-OS WEB management interface, which allows...

The vulnerability of the Gentoo Linux operating system allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the pan package up to version 0.132-r3 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

The vulnerability of the Red Hat Linux operating system, which allows a remote attacker to compromise the accessibility of protected information

The vulnerability of the pan-0.13.4 package of the Red Hat Linux operating system can lead to a violation of the accessibility of protected information. Exploitation of this vulnerability can be carried out remotely...

The vulnerability of the Red Hat Linux operating system, which allows a remote attacker to compromise the accessibility of protected information

The vulnerability of the pan-0.11.4 package of the Red Hat Linux operating system can lead to a violation of the accessibility of protected information. Exploitation of this vulnerability can be carried out remotely...

The vulnerability of the Red Hat Linux operating system, which allows a remote attacker to compromise the accessibility of protected information

The vulnerability of the pan-0.9.7 package of the Red Hat Linux operating system can lead to a violation of the accessibility of protected information. Exploitation of this vulnerability can be carried out remotely...

Palo Alto PAN-OS PAN-SA-2015-0002

The open source library SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:paloaltonetworks:pan-os"; if description...

Palo Alto Device / PAN-OS Detection Consolidation

Consolidation of Palo Alto device detections including the underlying PAN-OS operating system. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Palo Alto Device / PAN-OS Detection (HTTP XML-API)

HTTP XML-API based detection of the Palo Alto devices and the underlying PAN-OS operating system. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

PT-2015-4358 · Embedthis +2 · Appweb +2

Name of the Vulnerable Software and Affected Versions: Embedthis Appweb versions 4.6.6 and earlier, 5.x before 5.2.1 PAN-OS versions prior to 5.0.20 PAN-OS versions prior to 5.1.13 PAN-OS versions prior to 6.0.15 PAN-OS versions prior to 6.1.15 PAN-OS versions prior to 7.0.11 PAN-OS versions prio...

Pan micro-Eoffice without having to log in directly getshell-a vulnerability warning-the black bar safety net

Detailed description: To website demo, for example, the Pan-micro connection to the database file named mysqlconfig. ini,Direct Download ! 1.jpg Pan micro-phpmyadmin address for/phpmyadmin or/phpmyadminall,pan micro demon:8 0 2 8/phpmyadminall/ The official website of the demo is awesome, don't...

Palo Alto Networks PAN-OS <= 5.0.15 / 6.0.x <= 6.0.8 / 6.1.x <= 6.1.2 GNU C Library (glibc) Buffer Overflow (GHOST)

The remote host is running a version of Palo Alto Networks PAN-OS equal to or prior to 5.0.15 / 6.0.8 / 6.1.2. It is, therefore, affected by a heap-based buffer overflow in the GNU C Library glibc due to improperly validating user-supplied input in the glibc functions nsshostnamedigitsdots,...

GHOST: glibc vulnerability

The open source library “glibc” has been found to contain a recently discovered vulnerability CVE-2015-0235, commonly referred to as “GHOST” that has been demonstrated to enable remote code execution in some software. Palo Alto Networks software makes use of the vulnerable library, however there ...

GHOST: glibc vulnerability

The open source library “glibc” has been found to contain a recently discovered vulnerability CVE-2015-0235, commonly referred to as “GHOST” that has been demonstrated to enable remote code execution in some software. Palo Alto Networks software makes use of the vulnerable library, however there ...