17428 matches found
The vulnerability in the web interface of the Cisco Intersight Virtual Appliance software for managing cloud systems allows a perpetrator to execute arbitrary commands with root privileges.
The vulnerability of the web interface for managing Cisco Intersight Virtual Appliance software exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands with root privileges remotely...
CVE-2021-27792
The request handling functions in web management interface of Brocade Fabric OS versions before v9.0.1a, v8.2.3a, and v7.4.2h do not properly handle malformed user input, resulting in a service crash. An authenticated attacker could use this weakness to cause the FOS HTTP application handler to...
Palo Alto Networks PAN-OS 8.1.x < 8.1.19 / 9.0.x < 9.0.14 / 9.1.x < 9.1.10 Vulnerability
The version of Palo Alto Networks PAN-OS running on the remote host is 8.1.x prior to 8.1.19 or 9.0.x prior to 9.0.14 or 9.1.x prior to 9.1.10. It is, therefore, affected by a vulnerability. - An OS command argument injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an...
The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV340, RV340W, RV345, and RV345P allows a hacker to execute arbitrary code or cause service failures.
The vulnerability of the web interface for managing microprogrammed software routers of Cisco Small Business RV340, RV340W, RV345, and RV345P is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure by...
CVE-2021-3045
An OS command argument injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator to read any arbitrary file from the file system. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.19; PAN-OS 9.0 versions earlier than PAN-OS 9.0.14;...
CVE-2021-3050
An OS command injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator to execute arbitrary OS commands to escalate privileges. This issue impacts: PAN-OS 9.0 version 9.0.10 through PAN-OS 9.0.14; PAN-OS 9.1 version 9.1.4 through PAN-OS 9.1.10;...
CVE-2021-3050
An OS command injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator to execute arbitrary OS commands to escalate privileges. This issue impacts: PAN-OS 9.0 version 9.0.10 through PAN-OS 9.0.14; PAN-OS 9.1 version 9.1.4 through PAN-OS 9.1.10;...
Design/Logic Flaw
An OS command argument injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator to read any arbitrary file from the file system. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.19; PAN-OS 9.0 versions earlier than PAN-OS 9.0.14;...
CVE-2021-3050
The CVE-2021-3050 issue affects Palo Alto Networks PAN-OS web interface where an authenticated administrator can trigger OS command injection. Affects PAN-OS 9.0.10–9.0.14; 9.1.4–9.1.10; 10.0.7 and earlier; 10.1.0–10.1.1. Prisma Access/firewalls running PAN-OS 8.1 are not impacted. Exploitation r...
CVE-2021-3047
CVE-2021-3047 affects PAN-OS web interface authentication due to a cryptographically weak PRNG. Affected: PAN-OS 8.1.x < 8.1.19, 9.0.x < 9.0.14, 9.1.x < 9.1.10, 10.0.x
CVE-2021-3045
CVE-2021-3045 is an OS command argument injection vulnerability in Palo Alto Networks PAN-OS web interface. An authenticated administrator can read arbitrary files from the file system. Affected: PAN-OS 8.1.x before 8.1.19; PAN-OS 9.0.x before 9.0.14; PAN-OS 9.1.x before 9.1.10. PAN-OS 10.0 and l...
PAN-OS: Weak Cryptography Used in Web Interface Authentication
A cryptographically weak pseudo-random number generator PRNG is used during authentication to the Palo Alto Networks PAN-OS web interface. This enables an authenticated attacker, with the capability to observe their own authentication secrets over a long duration on the PAN-OS appliance, to...
CVE-2021-3050
An OS command injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator to execute arbitrary OS commands to escalate privileges. This issue impacts: PAN-OS 9.0 version 9.0.10 through PAN-OS 9.0.14; PAN-OS 9.1 version 9.1.4 through PAN-OS 9.1.10;...
PAN-OS: OS Command Injection Vulnerability in Web Interface
An OS command injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator to execute arbitrary OS commands to escalate privileges. This issue impacts: PAN-OS 9.0 version 9.0.10 through PAN-OS 9.0.14; PAN-OS 9.1 version 9.1.4 through PAN-OS 9.1.10;...
Palo Alto Networks PAN-OS 安全特征问题漏洞
Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A security vulnerability exists in the Palo Alto Networks PAN-OS web interface that stems from the affected product's use of a cryptographically weak pseudo-random number generator...
Palo Alto Networks PAN-OS 参数注入漏洞
PAN-OS is an operating system designed specifically for the security and control of Palo Alto Networks firewalls, with a rich set of firewall, management and network features. An OS command parameter injection vulnerability exists in the web interface of PAN-OS. An attacker could exploit this...
Palo Alto Networks PAN-OS 操作系统命令注入漏洞
Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. An operating system command injection vulnerability exists in the Palo Alto Networks PAN-OS web, which stems from an operating system command injection vulnerability in the Palo Alt...
The vulnerability of the web interface of the Microprogramming Software-based Arcadyan Routers allows a hacker to bypass the authentication process.
The vulnerability of the web interface of the Microprogramming Software-based Arcadyan Routers Buffalo relates to the possibility of bypassing the path to the catalog. Exploiting this vulnerability can allow a malicious actor to circumvent the authentication process...
The vulnerability of the web interface of D-Link router microprogramming software, including models D-Link DIR-825/R1, DIR-825/GF, D-Link DIR-825/A/D1, and D-Link DIR-825/AC/E1A, allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the web interface of D-Link router microprogramming software, such as D-Link DIR-825/R1, DIR-825/GF, D-Link DIR-825/A/D1, and D-Link DIR-825/AC/E1A, is related to the lack of a mechanism for checking the size of copied data. Exploiting this vulnerability allows an attacker to...
The vulnerability in the web interface for managing microprogrammed software on Cisco Small Business 220 Series Smart Switches allows attackers to execute cross-site scripting attacks.
The vulnerability of the web interface for managing microprogramming software on Cisco Small Business 220 Series Smart Switches is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...