2856 matches found
CVE-2016-2219
Cross-site scripting XSS vulnerability in the management interface in Palo Alto Networks PAN-OS 7.x before 7.0.8 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-2219
The CVE-2016-2219 issue affects Palo Alto Networks PAN-OS 7.x prior to 7.0.8. It is a cross-site scripting (XSS) vulnerability in the management interface where authenticated users can inject arbitrary script or HTML via unspecified vectors. Multiple sources corroborate that the vulnerability exi...
OpenSSH vulnerabilities
OpenSSH contains two vulnerabilities CVE-2016-0777 and CVE-2016-0778 affecting the SSH client roaming feature when connecting to a malicious server. Exploitation of this issue can leak portions of memory from the SSH client process. Ref 90508 The Palo Alto Networks firewall outbound SSH client...
CVE-2016-2219: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the management interface in Palo Alto Networks PAN-OS 7.x before 7.0.8 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
Palo Alto Networks PAN-OS 6.1.x < 6.1.11 Multiple Vulnerabilities
The version of Palo Alto Networks PAN-OS running on the remote host is 6.1.x 6.1.11. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists that allows an authenticated, remote attacker to access potentially sensitive information in the system logs. - A security...
Palo Alto Networks PAN-OS 7.0.x < 7.0.6 DHCP Packet Handling Dataplane DoS
The version of Palo Alto Networks PAN-OS running on the remote host is 7.0.x 7.0.6. It is, therefore, affected by a flaw in the firewall functionality that is triggered when the firewall is configured as a DHCP relay and it receives DHCP requests from a third-party client or server that exceed th...
Palo Alto Networks PAN-OS 7.0.x < 7.0.5 Multiple Vulnerabilities
The version of Palo Alto Networks PAN-OS running on the remote host is 7.0.x 7.0.5. It is, therefore, affected by multiple vulnerabilities : - A buffer overflow condition exists due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this to cause a deni...
The vulnerability of the Windows operating system, which allows a perpetrator to increase their privileges or execute arbitrary code
Vulnerability exists in the Message Queue Service MSMQ, the BthPan.sys and MQAC.sys drivers. This allows a malicious individual to elevate their privileges within the system and execute arbitrary code...
Pan micro-OA /ws/query database operation
No description provided by source...
Palo Alto Networks PAN-OS Management Interface API Remote DoS (PAN-SA-2016-0008)
The Palo Alto Networks PAN-OS running on the remote host is affected by a denial of service vulnerability in the API hosted on the management interface, specifically in the panUserLogin function within panmodule.so, due to improper validation of user-supplied input to the 'username' and 'password...
Palo Alto PAN-OS PAN-SA-2016-0009
A cross-site scripting vulnerability exists in the web interface whereby data provided by the user is echoed back to the user without sanitization. Ref 90635. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Update Server API Exposure
The Palo Alto Networks update server enables downloading of PAN-OS software releases and dynamic updates through a public API. Some functions of the API were inadvertently exposed to the public...
Cross-site scripting vulnerability
A cross-site scripting vulnerability exists in the web interface whereby data provided by the user is stored without sanitization. Ref 90635 CVE-2016-2219. This issue affects the management interface of the device, where an authenticated administrator may be tricked into injecting malicious...
Cross-site scripting vulnerability
A cross-site scripting vulnerability exists in the web interface whereby data provided by the user is stored without sanitization. Ref 90635 CVE-2016-2219. This issue affects the management interface of the device, where an authenticated administrator may be tricked into injecting malicious...
PAN-OS API denial of service
Palo Alto Networks firewalls offer an API to query and modify the configuration of the device. While access to this API is protected by the use of an API key, an issue was recently identified leading to a potential unauthenticated denial of service attack. Ref 91728 The API is hosted on a dedicat...
PT-2016-5071
Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 7.0.1 through 7.0.7 Description A cross-site scripting issue exists in the management interface of the device, allowing remote authenticated users to inject arbitrary web script or HTML. This occurs because...
Pan micro-Eoffice source_page. php, etc. 3 SQL injection vulnerability
No description provided by source...
Palo Alto Networks PAN-OS 7.1.1 Out-of-Sequence Packet Firewall Bypass
The version of Palo Alto Networks PAN-OS running on the remote host is 7.1.1. It is, therefore, affected by an unspecified flaw when handling out-of-sequence packets. An unauthenticated, remote attacker can exploit this to bypass the firewall. C Tenable Network Security, Inc. include"compat.inc";...
Palo Alto Networks PAN-OS 7.0.7 Multiple Vulnerabilities
The version of Palo Alto Networks PAN-OS running on the remote host is 7.0.7. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the passive firewall where a VM-series ESXi configuration processes and forwards traffic. No other details are available. - An unspecified...