CVE-2021-3050

An OS command injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator to execute arbitrary OS commands to escalate privileges. This issue impacts: PAN-OS 9.0 version 9.0.10 through PAN-OS 9.0.14; PAN-OS 9.1 version 9.1.4 through PAN-OS 9.1.10;...

Design/Logic Flaw

An OS command argument injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator to read any arbitrary file from the file system. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.19; PAN-OS 9.0 versions earlier than PAN-OS 9.0.14;...

CVE-2021-3050

The CVE-2021-3050 issue affects Palo Alto Networks PAN-OS web interface where an authenticated administrator can trigger OS command injection. Affects PAN-OS 9.0.10–9.0.14; 9.1.4–9.1.10; 10.0.7 and earlier; 10.1.0–10.1.1. Prisma Access/firewalls running PAN-OS 8.1 are not impacted. Exploitation r...

CVE-2021-3047

CVE-2021-3047 affects PAN-OS web interface authentication due to a cryptographically weak PRNG. Affected: PAN-OS 8.1.x < 8.1.19, 9.0.x < 9.0.14, 9.1.x < 9.1.10, 10.0.x

CVE-2021-3045

CVE-2021-3045 is an OS command argument injection vulnerability in Palo Alto Networks PAN-OS web interface. An authenticated administrator can read arbitrary files from the file system. Affected: PAN-OS 8.1.x before 8.1.19; PAN-OS 9.0.x before 9.0.14; PAN-OS 9.1.x before 9.1.10. PAN-OS 10.0 and l...

PAN-OS: Weak Cryptography Used in Web Interface Authentication

A cryptographically weak pseudo-random number generator PRNG is used during authentication to the Palo Alto Networks PAN-OS web interface. This enables an authenticated attacker, with the capability to observe their own authentication secrets over a long duration on the PAN-OS appliance, to...

CVE-2021-3050

An OS command injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator to execute arbitrary OS commands to escalate privileges. This issue impacts: PAN-OS 9.0 version 9.0.10 through PAN-OS 9.0.14; PAN-OS 9.1 version 9.1.4 through PAN-OS 9.1.10;...

PAN-OS: OS Command Injection Vulnerability in Web Interface

An OS command injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator to execute arbitrary OS commands to escalate privileges. This issue impacts: PAN-OS 9.0 version 9.0.10 through PAN-OS 9.0.14; PAN-OS 9.1 version 9.1.4 through PAN-OS 9.1.10;...

Palo Alto Networks PAN-OS 安全特征问题漏洞

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A security vulnerability exists in the Palo Alto Networks PAN-OS web interface that stems from the affected product's use of a cryptographically weak pseudo-random number generator...

Palo Alto Networks PAN-OS 操作系统命令注入漏洞

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. An operating system command injection vulnerability exists in the Palo Alto Networks PAN-OS web, which stems from an operating system command injection vulnerability in the Palo Alt...

Palo Alto Networks PAN-OS 参数注入漏洞

PAN-OS is an operating system designed specifically for the security and control of Palo Alto Networks firewalls, with a rich set of firewall, management and network features. An OS command parameter injection vulnerability exists in the web interface of PAN-OS. An attacker could exploit this...

The vulnerability of the web interface of the Microprogramming Software-based Arcadyan Routers allows a hacker to bypass the authentication process.

The vulnerability of the web interface of the Microprogramming Software-based Arcadyan Routers Buffalo relates to the possibility of bypassing the path to the catalog. Exploiting this vulnerability can allow a malicious actor to circumvent the authentication process...

The vulnerability of the web interface of D-Link router microprogramming software, including models D-Link DIR-825/R1, DIR-825/GF, D-Link DIR-825/A/D1, and D-Link DIR-825/AC/E1A, allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the web interface of D-Link router microprogramming software, such as D-Link DIR-825/R1, DIR-825/GF, D-Link DIR-825/A/D1, and D-Link DIR-825/AC/E1A, is related to the lack of a mechanism for checking the size of copied data. Exploiting this vulnerability allows an attacker to...

The vulnerability in the web interface for managing microprogrammed software on Cisco Small Business 220 Series Smart Switches allows attackers to execute cross-site scripting attacks.

The vulnerability of the web interface for managing microprogramming software on Cisco Small Business 220 Series Smart Switches is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

The vulnerability in the web interface for managing microprogrammed software on Cisco Small Business 220 Series Smart Switches allows a attacker to execute arbitrary commands.

The vulnerability in the web interface for managing microprogrammed software on Cisco Small Business 220 Series Smart Switches is related to authentication errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

Roxy-WI Command Injection Vulnerability

Roxy-WI, the web interface for managing Haproxy, Nginx, and Keepalived servers, is vulnerable to a command injection vulnerability in Roxy-WI 5.2.2.0 and earlier. An attacker can exploit this vulnerability to conduct command injection attacks via /app/funct.py and /api/apifunct.py...

Roxy-WI SQL Injection Vulnerability

Roxy-WI is a web interface for managing Haproxy, Nginx, and Keepalived servers. SQL injection vulnerabilities exist in Roxy-WI 5.2.2.0 and earlier versions, which can be exploited by attackers to conduct SQL injection attacks via selectservers...

A vulnerability in the web interface for managing Microprogramming Software on Cisco Small Business 220 Series Smart routers exists. This vulnerability is related to an incorrect session duration, which allows a perpetrator to bypass authentication procedures, gain unauthorized access to the device’s web interface, and perform arbitrary actions with administrator privileges.

The vulnerability of the web interface for managing Microprogramming Software on Cisco Small Business 220 Series Smart routers is related to an incorrect session duration. Exploiting this vulnerability could allow a malicious actor to bypass authentication procedures, gain unauthorized access to...

Roxy-WI SQL注入漏洞

Roxy-WI is a web interface for managing Haproxy, Nginx, and Keepalived servers. SQL injection vulnerabilities exist in Roxy-WI 5.2.2.0 and earlier versions, which can be exploited by attackers to conduct SQL injection attacks via selectservers...

Roxy-WI 命令注入漏洞

Roxy-WI, the web interface for managing Haproxy, Nginx, and Keepalived servers, is vulnerable to a command injection vulnerability in Roxy-WI 5.2.2.0 and earlier. An attacker can exploit this vulnerability to conduct command injection attacks via /app/funct.py and /api/apifunct.py...