605 matches found
EUVD-2025-10831
Malicious code in bioql PyPI...
MAL-2025-41981 Malicious code in express-prisma (npm)
The package express-prisma was found to contain malicious code...
Malicious code in express-prisma (npm)
The package express-prisma was found to contain malicious code...
WordPress Prisma theme <= 1.10 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Prisma versions = 1.10...
CVE-2025-2180
An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma® Cloud. This issue impacts Checkov 3.0 versions earlier th...
CVE-2025-2181
A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can result in the cleartext exposure of Prisma Cloud access keys in Checkov's output...
MAL-2025-15836 Malicious code in blog-post-prisma-middleware-cls-hooked (npm)
The package blog-post-prisma-middleware-cls-hooked was found to contain malicious code...
Malicious code in blog-post-prisma-middleware-cls-hooked (npm)
The package blog-post-prisma-middleware-cls-hooked was found to contain malicious code...
CVE-2025-2181
A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can result in the cleartext exposure of Prisma Cloud access keys in Checkov's output...
CVE-2025-2180
An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma® Cloud. This issue impacts Checkov 3.0 versions earlier th...
CVE-2025-2181
CVE-2025-2181 affects Palo Alto Networks Checkov by Prisma Cloud. The vulnerability is a sensitive information disclosure that can cause Prisma Cloud access keys to be exposed in Checkov’s output (cleartext). Multiple sources corroborate exposure of credentials via Checkov output during operation...
CVE-2025-2181 Checkov by Prisma Cloud: Cleartext Exposure of Credentials
A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can result in the cleartext exposure of Prisma Cloud access keys in Checkov's output...
CVE-2025-2181 Checkov by Prisma Cloud: Cleartext Exposure of Credentials
A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can result in the cleartext exposure of Prisma Cloud access keys in Checkov's output...
CVE-2025-2180 Checkov by Prisma Cloud: Unsafe Deserialization of Terraform Files Allows Code Execution
An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma® Cloud. This issue impacts Checkov 3.0 versions earlier th...
CVE-2025-2180 Checkov by Prisma Cloud: Unsafe Deserialization of Terraform Files Allows Code Execution
An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma® Cloud. This issue impacts Checkov 3.0 versions earlier th...
CVE-2025-2180
The CVE-2025-2180 entry describes an unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma Cloud. Affected product: Checkov (in Prisma Cloud) versions prior to 3.2.415. Vulnerable component: the deserialization process when scanning Terraform files. Root cause: unsafe deser...
PT-2025-33021
Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Checkov by Prisma® Cloud affected versions not specified Description: A sensitive information disclosure issue exists in Palo Alto Networks Checkov by Prisma® Cloud. This can lead to the cleartext exposure of Prisma Cloud...
PT-2025-33020 · Palo Alto Networks · Prisma Cloud +1
Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Checkov by Prisma® Cloud versions prior to 3.2.415 Description: An unsafe deserialization issue in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non-administrative...
Palo Alto Networks Checkov 安全漏洞
Palo Alto Networks Checkov is a code static analysis tool from Palo Alto Networks USA. A security vulnerability exists in Palo Alto Networks Checkov, which stems from an information leak that could lead to the exposure of Prisma Cloud access keys in plaintext...
VulnCheck KEV: CVE-2020-2034
An OS Command Injection vulnerability in the PAN-OS GlobalProtect portal allows an unauthenticated network based attacker to execute arbitrary OS commands with root privileges. An attacker requires some knowledge of the firewall to exploit this issue. This issue can not be exploited if...