CVE-2016-2219

Cross-site scripting XSS vulnerability in the management interface in Palo Alto Networks PAN-OS 7.x before 7.0.8 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the management interface in Palo Alto Networks PAN-OS 7.x before 7.0.8 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-2219: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the management interface in Palo Alto Networks PAN-OS 7.x before 7.0.8 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Palo Alto Networks PAN-OS Management Interface API Remote DoS (PAN-SA-2016-0008)

The Palo Alto Networks PAN-OS running on the remote host is affected by a denial of service vulnerability in the API hosted on the management interface, specifically in the panUserLogin function within panmodule.so, due to improper validation of user-supplied input to the 'username' and 'password...

The vulnerability of Cisco Nexus 7000 software allows a malicious individual to increase their privileges.

The vulnerability in Cisco NX-OS devices of the Nexus 7000 series – where multiple virtual device contexts VDC are enabled, along with local authentication – allows remote users who have passed authentication to elevate their privileges within an unplanned VDC environment. This is achieved by usi...

PT-2016-4762

Name of the Vulnerable Software and Affected Versions Cisco RV110W versions through 1.2.1.4 Cisco RV130W versions through 1.0.2.7 Cisco RV215W versions through 1.3.0.7 Description A buffer overflow issue exists in the web-based management interface, allowing remote authenticated users to cause a...

CVE-2016-1398: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware through 1.2.1.4, RV130W devices with firmware through 1.0.2.7, and RV215W devices with firmware through 1.3.0.7 allows remote authenticated users to cause a denial of service device reload via a crafted HT...

Cross-site scripting vulnerability

A cross-site scripting vulnerability exists in the web interface whereby data provided by the user is stored without sanitization. Ref 90635 CVE-2016-2219. This issue affects the management interface of the device, where an authenticated administrator may be tricked into injecting malicious...

PAN-OS API denial of service

Palo Alto Networks firewalls offer an API to query and modify the configuration of the device. While access to this API is protected by the use of an API key, an issue was recently identified leading to a potential unauthenticated denial of service attack. Ref 91728 The API is hosted on a dedicat...

PT-2016-5071

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 7.0.1 through 7.0.7 Description A cross-site scripting issue exists in the management interface of the device, allowing remote authenticated users to inject arbitrary web script or HTML. This occurs because...

Cisco Unified Contact Center Enterprise Cross-Site Scripting Vulnerability

Cisco Unified Contact Center Enterprise is a set of IP-based contact center components from Cisco. It provides intelligent contact routing, call processing, network-to-desktop computer telephony integration CTI, and multi-channel contact management capabilities over an IP infrastructure. A...

CVE-2016-1439: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the management interface in Cisco Unified Contact Center Enterprise through 10.52 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux59650...

CVE-2016-1439

Cross-site scripting XSS vulnerability in the management interface in Cisco Unified Contact Center Enterprise through 10.52 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux59650...

PT-2016-4789

Name of the Vulnerable Software and Affected Versions Cisco Unified Contact Center Enterprise versions prior to 10.52 Description A cross-site scripting XSS issue exists in the management interface, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL. Recommendation...

CVE-2016-1396

Cross-site scripting XSS vulnerability in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote attackers to inject arbitrary web script or HTML via a...

PT-2016-2274

Name of the Vulnerable Software and Affected Versions Cisco RV110W versions prior to 1.2.1.7 Cisco RV130W versions prior to 1.0.3.16 Cisco RV215W versions prior to 1.3.0.8 Description The issue is related to a cross-site scripting XSS vulnerability in the web-based management interface of the...

CVE-2016-1397: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote authenticated users to cause a denial of service device reload via crafted...

PT-2016-2219

Name of the Vulnerable Software and Affected Versions Cisco RV110W versions prior to 1.2.1.7 Cisco RV130W versions prior to 1.0.3.16 Cisco RV215W versions prior to 1.3.0.8 Description The issue is related to insufficient input validation in the web-based management interface of the affected...

CVE-2016-1396: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote attackers to inject arbitrary web script or HTML via a...

PT-2016-2273

Name of the Vulnerable Software and Affected Versions Cisco RV110W versions prior to 1.2.1.7 Cisco RV130W versions prior to 1.0.3.16 Cisco RV215W versions prior to 1.3.0.8 Description The issue is caused by a buffer overflow in the web-based management interface, allowing remote authenticated use...