pan-sportswear.com Cross Site Scripting vulnerability OBB-1419457

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Palo Alto Networks PAN-OS 8.1.x / 9.0.x / 9.1.x / 10.0.x Improper Input Validation

The version of Palo Alto Networks PAN-OS running on the remote host is 8.1.x or 9.0.x or 9.1.x or 10.0.x. It is, therefore, affected by a improper input validation vulnerability. - When SSL/TLS Forward Proxy Decryption mode has been configured to decrypt the web transactions, the PAN-OS URL...

PAN-OS Critical Buffer Overflow Vulnerability (CVE-2020-2040) – Automatically Discover, Prioritize and Remediate Using Qualys VMDR®

On Sept 9, 2020, Palo Alto Networks published nine security bulletins addressing vulnerabilities in PAN-OS operating system versions 8.0 or later. One of the nine CVEs released, CVE-2020-2040, received a critical severity rating score of 9.8 based on the CVSS v3 Scoring system. PAN-OS devices are...

Palo Alto Networks PAN-OS Log Disclosure Vulnerability

Palo Alto Networks PAN-OS is a set of operating systems developed for its firewall appliances. Palo Alto Networks PAN-OS records administrator passwords or sensitive information in plaintext to a log file, which can be exploited by an attacker to submit a special request to obtain sensitive...

Buffer Overflow Vulnerability in Palo Alto Networks PAN-OS

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. A buffer overflow vulnerability exists in Palo Alto Networks PAN-OS. The vulnerability originates when a network system or product performs an operation on memory without properly...

Palo Alto Networks PAN-OS 8.1.x < 8.1.16 / 9.0.x < 9.0.9 XSS

The version of Palo Alto Networks PAN-OS running on the remote host is 8.1.x prior to 8.1.16 or 9.0.x prior to 9.0.9. It is, therefore, affected by a cross-site scripting XSS vulnerability in the management web interface. An unauthenticated, remote attacker can exploit this, by convincing an...

Palo Alto Networks PAN-OS 9.0.x < 9.0.10 / 9.1.x < 9.1.4 / 10.0.x < 10.0.1 Command Injection

The version of Palo Alto Networks PAN-OS running on the remote host is 9.0.x prior to 9.0.10, 9.1.x prior to 9.1.4, or 10.0.x prior to 10.0.1. It is, therefore, affected by a command injection vulnerability that allows authenticated administrators to execute arbitrary OS commands with root...

Palo Alto Networks PAN-OS 8.1.x < 8.1.16 / 9.0.x < 9.0.10 / 9.1.x < 9.1.4 / 10.0.x < 10.0.1 DoS

The version of Palo Alto Networks PAN-OS running on the remote host is 8.1.x prior to 8.1.16, 9.0.x prior to 9.0.10, 9.1.x prior to 9.1.4, or 10.0.x prior to 10.0.1. It is, therefore, affected by a denial of service DoS vulnerability. An uncontrolled resource consumption vulnerability in Palo Alt...

Palo Alto Networks PAN-OS 8.0.x / 8.1.x < 8.1.16 / 9.0.x < 9.0.10 / 9.1.x < 9.1.3 Information Exposure

The version of Palo Alto Networks PAN-OS running on the remote host is 8.0.x, 8.1.x prior to 8.1.16, 9.0.x prior to 9.0.10 or 9.1.x prior to 9.1.3. It is, therefore, affected by an information exposure vulnerability where an administrator's password or other sensitive information may be logged in...

Palo Alto Networks PAN-OS 8.0.x < 8.1.15 / 9.0.x < 9.0.9 / 9.1.x < 9.1.3 Buffer Overflow

The version of Palo Alto Networks PAN-OS running on the remote host is 8.0.x prior to 8.1.15 or 9.0.x prior to 9.0.9 or 9.1.x prior to 9.1.3. It is, therefore, affected by a buffer overflow condition in the Captive Portal or Multi-Factor Authentication interface. An unauthenticated, remote attack...

Palo Alto Networks PAN-OS 10.0.x < 10.0.1 Buffer Overflow

The version of Palo Alto Networks PAN-OS running on the remote host is 10.0.x prior to 10.0.1. It is, therefore, affected by a buffer overflow vulnerability in the management web interface that allows authenticated administrators to disrupt system processes and potentially execute arbitrary code...

Palo Alto Networks PAN-OS 8.1.x < 8.1.16 / 9.0.x < 9.0.10 / 9.1.x < 9.1.3 Command Injection

The version of Palo Alto Networks PAN-OS running on the remote host is 8.1.x prior to 8.1.16, 9.0.x prior to 9.0.10, or 9.1.x prior to 9.1.3. It is, therefore, affected by a command injection vulnerability that allows authenticated administrators to execute arbitrary OS commands with root...

CVE-2020-2042

A buffer overflow vulnerability in the PAN-OS management web interface allows authenticated administrators to disrupt system processes and potentially execute arbitrary code with root privileges. This issue impacts only PAN-OS 10.0 versions earlier than PAN-OS 10.0.1...

CVE-2020-2044

An information exposure through log file vulnerability where an administrator's password or other sensitive information may be logged in cleartext while using the CLI in Palo Alto Networks PAN-OS software. The opcmdhistory.log file was introduced to track operational command op-command usage but...

CVE-2020-2043

An information exposure through log file vulnerability where sensitive fields are recorded in the configuration log without masking on Palo Alto Networks PAN-OS software when the after-change-detail custom syslog field is enabled for configuration logs and the sensitive field appears multiple tim...

CVE-2020-2044

An information exposure through log file vulnerability where an administrator's password or other sensitive information may be logged in cleartext while using the CLI in Palo Alto Networks PAN-OS software. The opcmdhistory.log file was introduced to track operational command op-command usage but...

CVE-2020-2042

A buffer overflow vulnerability in the PAN-OS management web interface allows authenticated administrators to disrupt system processes and potentially execute arbitrary code with root privileges. This issue impacts only PAN-OS 10.0 versions earlier than PAN-OS 10.0.1...

CVE-2020-2041

An insecure configuration of the appweb daemon of Palo Alto Networks PAN-OS 8.1 allows a remote unauthenticated user to send a specifically crafted request to the device that causes the appweb service to crash. Repeated attempts to send this request result in denial of service to all PAN-OS...

CVE-2020-2039

An uncontrolled resource consumption vulnerability in Palo Alto Networks PAN-OS allows for a remote unauthenticated user to upload temporary files through the management web interface that are not properly deleted after the request is finished. It is possible for an attacker to disrupt the...

CVE-2020-2037

An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.16; PAN-OS 9.0 versions earlier than PAN-OS 9.0.10; PAN-OS 9.1...