2856 matches found
EUVD-2012-6448
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x before 4.0.10, and 4.1.x before 4.1.4 allows remote attackers to execute arbitrary code via unspecified vectors, aka Ref ID 36983...
CVE-2012-6590
The web-based management UI in Palo Alto Networks PAN-OS 4.0.x before 4.0.8 allows remote attackers to obtain verbose error information via crafted input, aka Ref ID 33139...
CVE-2012-6594
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11, 4.0.x before 4.0.8, and 4.1.x before 4.1.1 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID 34299...
CVE-2012-6595
The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.2 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID 34595...
CVE-2012-6600
The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.2 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 34502...
CVE-2012-6604
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11 and 4.0.x before 4.0.9 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka Ref ID 35249...
CVE-2012-6590
The CVE-2012-6590 entry affects Palo Alto Networks PAN-OS 4.0.x prior to 4.0.8. The vulnerability is an information-disclosure issue where the web-based management UI may leak verbose error information to remote attackers through specially crafted input. Affected component: the PAN-OS web managem...
CVE-2012-6599
The CVE-2012-6599 entry concerns Palo Alto Networks PAN-OS command injection in the device-management CLI. Affected products are PAN-OS 4.0.x before 4.0.8 and 4.1.x before 4.1.1, where an authenticated user can execute arbitrary shell commands via unspecified vectors. The vulnerability arises in ...
CVE-2012-6602
CVE-2012-6602 affects Palo Alto Networks PAN-OS before 3.1.10 and 4.x before 4.0.4. The device-management CLI allows remote authenticated users to inject arbitrary shell commands, enabling arbitrary command execution via the CLI. Root cause: command injection in the management interface. Impact a...
CVE-2012-6601
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x before 4.0.10, and 4.1.x before 4.1.4 allows remote attackers to execute arbitrary code via unspecified vectors, aka Ref ID 36983...
CVE-2012-6594
The CVE-2012-6594 issue affects Palo Alto Networks PAN-OS: PAN-OS versions prior to 3.1.11, 4.0.x prior to 4.0.8, and 4.1.x prior to 4.1.1 are vulnerable. The device-management CLI allows an authenticated, remote administrator to inject arbitrary shell commands via unspecified vectors. This can l...
CVE-2012-6595
CVE-2012-6595 affects Palo Alto Networks PAN-OS prior to 4.0.9 (4.0.x) and prior to 4.1.2 (4.1.x). The issue arises in the device-management command-line interface, allowing an authenticated user to execute arbitrary shell commands via the CLI (unspecified vectors). Impact described in connected ...
CVE-2012-6597
The CVE affects Palo Alto Networks PAN-OS pre-3.1.11 and pre-4.0.9 (specifically PAN-OS 3.1.x before 3.1.11 and 4.0.x before 4.0.9). The underlying issue is a denial-of-service via a crafted command sent to the CLI, exploitable by remote authenticated users to crash the management server. Remedia...
CVE-2012-6598
Affected product : Palo Alto Networks PAN-OS 4.0.x (prior to 4.0.8). Vulnerability : device-management CLI allows authenticated remote users to execute arbitrary shell commands via unspecified vectors. Root cause / impact : command injection via the management interface could lead to arbitrary co...
CVE-2012-6600
Consolidated details: CVE-2012-6600 affects Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.2. The device-management CLI allows remote authenticated users to execute arbitrary commands via unspecified vectors. Impact is arbitrary command execution potentially leading to device c...
CVE-2012-6601
PAN-OS < 3.1.12, < 4.0.10 (4.0.x) and
CVE-2013-5664
CVE-2013-5664 affects Palo Alto Networks PAN-OS web-based device-management API browser. The vulnerability is a cross-site scripting (XSS) flaw where user-supplied input is not properly sanitized, allowing remote attackers to inject arbitrary script/HTML via crafted data. Affected versions are PA...
CVE-2012-6605
CVE-2012-6605 affects Palo Alto Networks PAN-OS prior to 3.1.11 and 4.0.x prior to 4.0.9. The device-management CLI allows remote authenticated users to execute arbitrary code via unspecified vectors, potentially compromising the device (root). Affected versions require upgrading to PAN-OS 3.1.11...