File Upload Vulnerability in the Center Management Server System of Guangzhou Bao Lun Electronics Company Limited (CNVD-2020-59882)

Guangzhou Paulun Electronic Co., Ltd. is a company mainly engaged in public broadcasting, campus broadcasting, conference system, paperless system, recording and broadcasting system, intelligent campus, stage lighting, LED big screen, landscape lighting and other projects. Guangzhou Paulan...

ReQuest Serious Play F3 Media Server 7.0.3 Debug Log Disclosure

Summary F3 packs all the power of ReQuest's multi-zone serious Play servers into a compact powerhouse. With the ability to add unlimited NAS devices, the F3 can handle your entire family's media collection with ease. Description The unprotected web management server is vulnerable to sensitive...

Security Bulletin: IBM API Connect V10 is impacted by denial of service vulnerabilities in Crunchy kernel (CVE-2020-8616, CVE-2020-8617)

Summary IBM API Connect has addressed the following vulnerabilities. Vulnerability Details CVEID: CVE-2020-8616 DESCRIPTION: ISC BIND is vulnerable to a denial of service, caused by the failure to limit the number of fetches performed when processing referrals. By using specially crafted referral...

The vulnerability of the PAN-OS operating system’s management server allows a hacker to execute arbitrary operating system commands with root privileges.

The vulnerability of the PAN-OS operating system management server exists because measures to neutralize special elements used in the operating system command are not taken. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary operating system commands...

The vulnerability of the management server component of the PAN-OS allows a attacker to load a corrupted operating system configuration and execute code with root privileges.

The vulnerability of the management server component of the PAN-OS operating system is caused by an overflow in the buffer on the stack. Exploiting this vulnerability allows a malicious actor to remotely load a corrupted operating system configuration and execute commands with root privileges...

Security Bulletin: IBM API Connect is impacted by a vulnerability in Java (CVE-2020-2654)

Summary IBM API Connect has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2020-2654 DESCRIPTION: An unspecified vulnerability in Java SE related to the Java SE Libraries component could allow an unauthenticated attacker to cause a denial of service resulting in a low...

Palo Alto Networks PAN-OS 7.1.x < 8.1.13 / 9.0.x < 9.0.7 Buffer Overflow

The version of Palo Alto Networks PAN-OS running on the remote host is 7.1.x prior to 8.1.13 or 9.0.x prior to 9.0.7. It is, therefore, affected by a buffer overflow vulnerability in the authd component of the PAN-OS management server. An authenticated, remote attacker can exploit this issue to...

Palo Alto Networks PAN-OS Operating System Command Injection Vulnerability (CNVD-2021-22179)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. An operating system command injection vulnerability exists in the management server in Palo Alto Networks PAN-OS. An attacker could exploit this vulnerability to execute arbitrary operati...

CVE-2020-2028

An OS Command Injection vulnerability in PAN-OS management server allows authenticated administrators to execute arbitrary OS commands with root privileges when uploading a new certificate in FIPS-CC mode. This issue affects: All versions of PAN-OS 7.1 and PAN-OS 8.0; PAN-OS 8.1 versions earlier...

CVE-2020-2028

An OS Command Injection vulnerability in PAN-OS management server allows authenticated administrators to execute arbitrary OS commands with root privileges when uploading a new certificate in FIPS-CC mode. This issue affects: All versions of PAN-OS 7.1 and PAN-OS 8.0; PAN-OS 8.1 versions earlier...

CVE-2020-2027

A buffer overflow vulnerability in the authd component of the PAN-OS management server allows authenticated administrators to disrupt system processes and potentially execute arbitrary code with root privileges. This issue affects: All versions of PAN-OS 7.1 and PAN-OS 8.0; PAN-OS 8.1 versions...

Command injection

An OS Command Injection vulnerability in PAN-OS management server allows authenticated administrators to execute arbitrary OS commands with root privileges when uploading a new certificate in FIPS-CC mode. This issue affects: All versions of PAN-OS 7.1 and PAN-OS 8.0; PAN-OS 8.1 versions earlier...

CVE-2020-2028 PAN-OS: OS command injection vulnerability in FIPS-CC mode certificate verification

An OS Command Injection vulnerability in PAN-OS management server allows authenticated administrators to execute arbitrary OS commands with root privileges when uploading a new certificate in FIPS-CC mode. This issue affects: All versions of PAN-OS 7.1 and PAN-OS 8.0; PAN-OS 8.1 versions earlier...

CVE-2020-2028

CVE-2020-2028 describes an OS command injection vulnerability in Palo Alto Networks PAN-OS management server that allows authenticated administrators to execute arbitrary commands with root privileges when uploading a new certificate in FIPS-CC mode. Affected products/versions are PAN-OS 7.1.x, a...

PAN-OS: OS command injection vulnerability in FIPS-CC mode certificate verification

An OS Command Injection vulnerability in PAN-OS management server allows authenticated administrators to execute arbitrary OS commands with root privileges when uploading a new certificate in FIPS-CC mode. This issue affects: All versions of PAN-OS 7.1 and PAN-OS 8.0; PAN-OS 8.1 versions earlier...

Palo Alto Networks PAN-OS 7.1.x < 8.1.14 / 8.0.x < 8.1.14 / 8.1.x < 8.1.14 / 9.0.x < 9.0.9 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 7.1.x prior to 8.1.14 or 8.0.x prior to 8.1.14 or 8.1.x prior to 8.1.14 or 9.0.x prior to 9.0.9. It is, therefore, affected by a vulnerability. - A missing authorization vulnerability in the management server component of PAN-...

Palo Alto Networks PAN-OS 7.1.x < 8.1.14 / 8.0.x < 8.1.14 / 8.1.x < 8.1.14 / 9.0.x < 9.0.7 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 7.1.x prior to 8.1.14 or 8.0.x prior to 8.1.14 or 8.1.x prior to 8.1.14 or 9.0.x prior to 9.0.7. It is, therefore, affected by a vulnerability. - An OS command injection vulnerability in the management server component of PAN-...

Palo Alto Networks PAN-OS 7.1.x / 8.0.x / 8.1.x < 8.1.14 Buffer Overflow

The version of Palo Alto Networks PAN-OS running on the remote host is 7.1.x, 8.0.x, or 8.1.x prior to 8.1.14. It is, therefore, affected by a stack-based buffer overflow vulnerability. - A stack-based buffer overflow vulnerability in the management server component of PAN-OS that allows an...

Palo Alto Networks PAN-OS Operating System Command Injection Vulnerability (CNVD-2020-32239)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. An operating system command injection vulnerability exists in the management server in Palo Alto Networks PAN-OS, which can be exploited by an attacker to execute arbitrary shell commands...

Palo Alto Networks PAN-OS Management Server Component Operating System Command Injection Vulnerability

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. An operating system command injection vulnerability exists in the Management Server component of Palo Alto Networks PAN-OS, which can be exploited by an attacker to execute arbitrary...