2301 matches found
Palo Alto PAN-OS OpenSSH vulnerabilities (PAN-SA-2016-0011)
OpenSSH contains two vulnerabilities CVE-2016-0777 and CVE-2016-0778 affecting the SSH client roaming feature when connecting to a malicious server. Exploitation of this issue can leak portions of memory from the SSH client process. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions...
Local privilege escalation
Palo Alto Networks firewalls do not properly sanitize the rootreboot local invocation which can potentially allow executing code with higher privileges Ref. 92293 CVE-2016-1712. Exploitation of this privilege escalation is restricted to local users. Potential attackers would have to first obtain ...
Local privilege escalation
Palo Alto Networks firewalls do not properly sanitize the rootreboot local invocation which can potentially allow executing code with higher privileges Ref. 92293 CVE-2016-1712. Exploitation of this privilege escalation is restricted to local users. Potential attackers would have to first obtain ...
CVE-2016-2219
Cross-site scripting XSS vulnerability in the management interface in Palo Alto Networks PAN-OS 7.x before 7.0.8 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-2219
Cross-site scripting XSS vulnerability in the management interface in Palo Alto Networks PAN-OS 7.x before 7.0.8 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the management interface in Palo Alto Networks PAN-OS 7.x before 7.0.8 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-2219
Cross-site scripting XSS vulnerability in the management interface in Palo Alto Networks PAN-OS 7.x before 7.0.8 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-2219
The CVE-2016-2219 issue affects Palo Alto Networks PAN-OS 7.x prior to 7.0.8. It is a cross-site scripting (XSS) vulnerability in the management interface where authenticated users can inject arbitrary script or HTML via unspecified vectors. Multiple sources corroborate that the vulnerability exi...
OpenSSH vulnerabilities
OpenSSH contains two vulnerabilities CVE-2016-0777 and CVE-2016-0778 affecting the SSH client roaming feature when connecting to a malicious server. Exploitation of this issue can leak portions of memory from the SSH client process. Ref 90508 The Palo Alto Networks firewall outbound SSH client...
Palo Alto Networks PAN-OS 6.1.x < 6.1.11 Multiple Vulnerabilities
The version of Palo Alto Networks PAN-OS running on the remote host is 6.1.x 6.1.11. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists that allows an authenticated, remote attacker to access potentially sensitive information in the system logs. - A security...
Palo Alto Networks PAN-OS 7.0.x < 7.0.6 DHCP Packet Handling Dataplane DoS
The version of Palo Alto Networks PAN-OS running on the remote host is 7.0.x 7.0.6. It is, therefore, affected by a flaw in the firewall functionality that is triggered when the firewall is configured as a DHCP relay and it receives DHCP requests from a third-party client or server that exceed th...
Palo Alto Networks PAN-OS 7.0.x < 7.0.5 Multiple Vulnerabilities
The version of Palo Alto Networks PAN-OS running on the remote host is 7.0.x 7.0.5. It is, therefore, affected by multiple vulnerabilities : - A buffer overflow condition exists due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this to cause a deni...
Palo Alto Networks PAN-OS Management Interface API Remote DoS (PAN-SA-2016-0008)
The Palo Alto Networks PAN-OS running on the remote host is affected by a denial of service vulnerability in the API hosted on the management interface, specifically in the panUserLogin function within panmodule.so, due to improper validation of user-supplied input to the 'username' and 'password...
Pan micro-OA /ws/query database operation
No description provided by source...
The vulnerability of the Windows operating system, which allows a perpetrator to increase their privileges or execute arbitrary code
Vulnerability exists in the Message Queue Service MSMQ, the BthPan.sys and MQAC.sys drivers. This allows a malicious individual to elevate their privileges within the system and execute arbitrary code...
Palo Alto PAN-OS PAN-SA-2016-0009
A cross-site scripting vulnerability exists in the web interface whereby data provided by the user is echoed back to the user without sanitization. Ref 90635. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Update Server API Exposure
The Palo Alto Networks update server enables downloading of PAN-OS software releases and dynamic updates through a public API. Some functions of the API were inadvertently exposed to the public...
Cross-site scripting vulnerability
A cross-site scripting vulnerability exists in the web interface whereby data provided by the user is stored without sanitization. Ref 90635 CVE-2016-2219. This issue affects the management interface of the device, where an authenticated administrator may be tricked into injecting malicious...
Cross-site scripting vulnerability
A cross-site scripting vulnerability exists in the web interface whereby data provided by the user is stored without sanitization. Ref 90635 CVE-2016-2219. This issue affects the management interface of the device, where an authenticated administrator may be tricked into injecting malicious...