Lucene search
+L

2856 matches found

CNNVD
CNNVD
•added 2025/03/12 12:00 a.m.•20 views

Palo Alto Networks PAN-OS 安全漏洞

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A security vulnerability exists in Palo Alto Networks PAN-OS that originates from an authenticated administrator being able to read arbitrary files via the CLI...

6.8CVSS6.4AI score0.00192EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/03/12 12:00 a.m.•16 views

Palo Alto Networks PAN-OS 安全漏洞

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A security vulnerability exists in Palo Alto Networks PAN-OS, which originates in the GlobalProtect feature, where an unauthenticated attacker sending a large number of specially...

8.2CVSS6.5AI score0.00413EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/03/12 12:00 a.m.•3 views

PT-2025-11115

Name of the Vulnerable Software and Affected Versions: PAN-OS affected versions not specified Description: A vulnerability in the PAN-OS software enables an authenticated admin on the PAN-OS CLI to read arbitrary files. This issue does not affect Cloud NGFW or Prisma Access. Recommendations: At t...

6.8CVSS0.00192EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2025/03/12 12:00 a.m.•2 views

PT-2025-11113

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks PAN-OS affected versions not specified Description: A Denial of Service DoS issue in the GlobalProtect feature of the software allows an unauthenticated attacker to make the service unavailable by sending a large number of...

8.2CVSS0.00413EPSS
SaveExploits0References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/12 12:00 a.m.•7 views

CVE-2025-0116: Improper Check for Unusual or Exceptional Conditions

A Denial of Service DoS vulnerability in Palo Alto Networks PAN-OS software causes the firewall to unexpectedly reboot when processing a specially crafted LLDP frame sent by an unauthenticated adjacent attacker. Repeated attempts to initiate this condition causes the firewall to enter maintenance...

6.8CVSS5.6AI score0.00235EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/12 12:00 a.m.•3 views

CVE-2025-0115: Improper Resolution of Path Equivalence

A vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated admin on the PAN-OS CLI to read arbitrary files. The attacker must have network access to the management interface web, SSH, console, or telnet and successfully authenticate to exploit this issue. You can greatly...

6.8CVSS5.9AI score0.00192EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/03/12 12:00 a.m.•20 views

Palo Alto Networks PAN-OS 10.1.x < 10.1.14-h11 / 10.2.x < 10.2.11 / 11.0.x < 11.0.6 / 11.1.x < 11.1.4-h17 / 11.2.x < 11.2.3 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 10.1.x prior to 10.1.14-h11 or 10.2.x prior to 10.2.11 or 11.0.x prior to 11.0.6 or 11.1.x prior to 11.1.4-h17 or 11.2.x prior to 11.2.3. It is, therefore, affected by a vulnerability. A vulnerability in the Palo Alto Networks...

6.8CVSS5.9AI score0.00192EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/03/12 12:00 a.m.•23 views

Palo Alto Networks PAN-OS 10.1.x < 10.1.14-h11 / 10.2.x < 10.2.10-h17 / 11.1.x < 11.1.6-h6 / 11.2.x < 11.2.5 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 10.1.x prior to 10.1.14-h11 or 10.2.x prior to 10.2.10-h17 or 11.1.x prior to 11.1.6-h6 or 11.2.x prior to 11.2.5. It is, therefore, affected by a vulnerability. A Denial of Service DoS vulnerability in Palo Alto Networks PAN-...

6.8CVSS5.6AI score0.00235EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/03/12 12:00 a.m.•5 views

PT-2025-11116

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks PAN-OS affected versions not specified Description: A Denial of Service DoS issue in the software causes the firewall to unexpectedly reboot when processing a specially crafted LLDP frame sent by an unauthenticated adjacent...

6.8CVSS0.00235EPSS
SaveExploits0References14
Tenable Nessus
Tenable Nessus
•added 2025/03/12 12:00 a.m.•17 views

Palo Alto Networks PAN-OS 10.1.x < 10.1.14-h11 / 10.2.x < 10.2.5 / 11.0.x < 11.0.2 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 10.1.x prior to 10.1.14-h11 or 10.2.x prior to 10.2.5 or 11.0.x prior to 11.0.2. It is, therefore, affected by a vulnerability. A Denial of Service DoS vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS...

8.2CVSS5.6AI score0.00413EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/12 12:00 a.m.•5 views

CVE-2025-0114: Uncontrolled Resource Consumption

A Denial of Service DoS vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software enables an unauthenticated attacker to render the service unavailable by sending a large number of specially crafted packets over a period of time. This issue affects both the GlobalProtect...

8.2CVSS6.2AI score0.00413EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/10 12:00 a.m.•4 views

PT-2025-10596

ParsedReport CompletenessLow 10-03-2025 GreyNoise Detects Active Exploitation of Silk Typhoon-Linked CVEs https://www.greynoise.io/blog/active-exploitation-silk-typhoon-linked-cves Report completeness: Low Actors/Campaigns: Hafnium motivation: cyber espionage Threats: Proxylogon exploit Log4shell...

10CVSS0.99999EPSS
SaveExploits490References1
Information Security Automation
Information Security Automation
•added 2025/02/27 10:32 a.m.•79 views

About Authentication Bypass – PAN-OS (CVE-2025-0108) vulnerability

About Authentication Bypass - PAN-OS CVE-2025-0108 vulnerability. PAN-OS is the operating system used in all Palo Alto Network NGFWs. This vulnerability allows an unauthenticated attacker to gain access to the PAN-OS management web interface. The attacker can then "invoke certain PHP scripts",...

5.9CVSS8.6AI score0.98455EPSS
SaveExploits22
BDU FSTEC
BDU FSTEC
•added 2025/02/26 12:00 a.m.•14 views

The vulnerability of the PAN-OS operating system lies in its inability to neutralize special elements used in the operating system’s commands. This allows attackers to circumvent security restrictions, enhance their privileges, and execute arbitrary commands.

The vulnerability of the PAN-OS operating system is related to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows a malicious actor to bypass security restrictions, enhance their privileges, and execute arbitrary...

9CVSS7.4AI score0.01419EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/02/26 12:00 a.m.•16 views

The vulnerability of the GlobalProtect Portal operating system PAN-OS allows a hacker to bypass security restrictions.

The vulnerability of the GlobalProtect Portal operating system PAN-OS is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass security restrictions from a remote location...

7.4CVSS7.1AI score0.00322EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/02/25 12:00 a.m.•9 views

Palo Alto PAN-OS Authentication Bypass

Palo Alto PAN-OS versions 10.1.14-h9 / 10.2.x 10.2.13-h3 / 11.1.x 11.1.6-h1 / 11.2.x 11.2.4-h4 is affected by a vulnerability allowing an attacker to bypass authentication and invoke certain PHP scripts via a specially forged request. No source data...

9.1CVSS7.4AI score0.98455EPSS
SaveExploits8References2
CISA
CISA
•added 2025/02/20 12:00 p.m.•20 views

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-23209link is external Craft CMS Code Injection Vulnerability CVE-2025-0111link is external Palo Alto Networks PAN-OS File Read Vulnerability These types of...

8.1CVSS7.8AI score0.21776EPSS
SaveIn wildExploits1References7
CISA KEV Catalog
CISA KEV Catalog
•added 2025/02/20 12:00 a.m.•64 views

Palo Alto Networks PAN-OS File Read Vulnerability

Palo Alto Networks PAN-OS contains an external control of file name or path vulnerability. Successful exploitation enables an authenticated attacker with network access to the management web interface to read files on the PAN-OS filesystem that are readable by the “nobody” user...

7.1CVSS6.3AI score0.01999EPSS
SaveIn wildExploits0
GithubExploit
GithubExploit
•added 2025/02/19 4:00 p.m.•353 views

Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os

CVE-2025-0108 - PAN-OS PoC SCRIPT /!\ Disclaimer: This...

9.1CVSS7.5AI score0.98455EPSS
SaveExploits8
GithubExploit
GithubExploit
•added 2025/02/19 6:19 a.m.•313 views

Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os

This tool tests whether a target PAN-OS device is vulnerable to...

9.1CVSS7.5AI score0.98455EPSS
SaveExploits8
Rows per page
Query Builder