Paloaltonetworks

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-10143 1Paloaltonetworks 1Expedition Nov 21, 2024 Dec 12, 2018 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 The Palo Alto Networks Expedition Migration tool 1.0.107 and earlier may allow an unauthenticated attacker with remote access to run system level commands on the device hosting this service/application.
CVE-2018-10142 1Paloaltonetworks 1Expedition Nov 21, 2024 Nov 27, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The Expedition Migration tool 1.0.106 and earlier may allow an unauthenticated attacker to enumerate files on the operating system.
CVE-2018-10141 1Paloaltonetworks 1Pan Os Nov 21, 2024 Oct 12, 2018 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 GlobalProtect Portal Login page in Palo Alto Networks PAN-OS before 8.1.4 allows an unauthenticated attacker to inject arbitrary JavaScript or HTML.
CVE-2018-18065 5Canonical DebianNet Snmp+2 more 10Cloud Backup Data OntapDebian Linux+7 more Nov 21, 2024 Oct 8, 2018 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 _set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resultin...Show more _set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.Show less
CVE-2018-14634 6Canonical F5Linux+3 more 28Big Ip Access Policy Manager Big Ip Advanced Firewall ManagerBig Ip Analytics+25 more Jan 27, 2026 Sep 25, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on t...Show more An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.Show less
CVE-2018-10140 1Paloaltonetworks 1Pan Os Nov 21, 2024 Aug 16, 2018 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 The PAN-OS Management Web Interface in Palo Alto Networks PAN-OS 8.1.2 and earlier may allow an authenticated user to shut down all management sessions, resulting in all logged in users to be redirected to the login page...Show more The PAN-OS Management Web Interface in Palo Alto Networks PAN-OS 8.1.2 and earlier may allow an authenticated user to shut down all management sessions, resulting in all logged in users to be redirected to the login page. PAN-OS 6.1, PAN-OS 7.1 and PAN-OS 8.0 are NOT affected.Show less
CVE-2018-10139 1Paloaltonetworks 1Pan Os Nov 21, 2024 Aug 16, 2018 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The PAN-OS response for GlobalProtect Gateway in Palo Alto Networks PAN-OS 6.1.21 and earlier, PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11 and earlier may allow an unauthenticated attacker to inject arbitrary JavaScript or...Show more The PAN-OS response for GlobalProtect Gateway in Palo Alto Networks PAN-OS 6.1.21 and earlier, PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11 and earlier may allow an unauthenticated attacker to inject arbitrary JavaScript or HTML. PAN-OS 8.1 is NOT affected.Show less
CVE-2018-9337 1Paloaltonetworks 1Pan Os Nov 21, 2024 Jul 3, 2018 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 The PAN-OS web interface administration page in PAN-OS 6.1.20 and earlier, PAN-OS 7.1.17 and earlier, PAN-OS 8.0.10 and earlier, and PAN-OS 8.1.1 and earlier may allow an attacker to inject arbitrary JavaScript or HTML.
CVE-2018-9335 1Paloaltonetworks 1Pan Os Nov 21, 2024 Jul 3, 2018 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 The PAN-OS session browser in PAN-OS 6.1.20 and earlier, PAN-OS 7.1.16 and earlier, PAN-OS 8.0.9 and earlier, and PAN-OS 8.1.1 and earlier may allow an attacker to inject arbitrary JavaScript or HTML.
CVE-2018-9334 1Paloaltonetworks 1Pan Os Nov 21, 2024 Jul 3, 2018 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 The PAN-OS management web interface page in PAN-OS 6.1.20 and earlier, PAN-OS 7.1.16 and earlier, PAN-OS 8.0.8 and earlier, and PAN-OS 8.1.0 may allow an attacker to access the GlobalProtect password hashes of local user...Show more The PAN-OS management web interface page in PAN-OS 6.1.20 and earlier, PAN-OS 7.1.16 and earlier, PAN-OS 8.0.8 and earlier, and PAN-OS 8.1.0 may allow an attacker to access the GlobalProtect password hashes of local users via manipulation of the HTML markup.Show less
CVE-2018-9242 1Paloaltonetworks 1Pan Os Nov 21, 2024 Jul 3, 2018 N/A· v4 5.5 MEDIUM· v3 6.6 MEDIUM· v2 The PAN-OS management web interface page in PAN-OS 6.1.20 and earlier, PAN-OS 7.1.16 and earlier, PAN-OS 8.0.9 and earlier may allow an attacker to delete files in the system via specific request parameters.
CVE-2018-7636 1Paloaltonetworks 1Pan Os Nov 21, 2024 Jul 3, 2018 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The URL filtering "continue page" hosted by PAN-OS 8.0.10 and earlier may allow an attacker to inject arbitrary JavaScript or HTML via specially crafted URLs.
CVE-2017-17841 1Paloaltonetworks 1Pan Os Nov 21, 2024 Jan 10, 2018 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 Palo Alto Networks PAN-OS 6.1, 7.1, and 8.0.x before 8.0.7, when an interface implements SSL decryption with RSA enabled or hosts a GlobalProtect portal or gateway, might allow remote attackers to decrypt TLS ciphertext...Show more Palo Alto Networks PAN-OS 6.1, 7.1, and 8.0.x before 8.0.7, when an interface implements SSL decryption with RSA enabled or hosts a GlobalProtect portal or gateway, might allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a ROBOT attack.Show less
CVE-2017-16878 1Paloaltonetworks 1Pan Os Nov 21, 2024 Jan 10, 2018 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the Captive Portal function in Palo Alto Networks PAN-OS before 8.0.7 allows remote attackers to inject arbitrary web script or HTML by leveraging an unspecified configuration.
CVE-2017-15941 1Paloaltonetworks 1Pan Os Nov 21, 2024 Jan 10, 2018 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.7, when the GlobalProtect gateway or portal is configured, allows remote...Show more Cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.7, when the GlobalProtect gateway or portal is configured, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.Show less
CVE-2017-15944 1Paloaltonetworks 1Pan Os Apr 22, 2026 Dec 11, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to execute arbitrary code via vectors involving the management interface.
CVE-2017-15943 1Paloaltonetworks 1Pan Os May 13, 2026 Dec 11, 2017 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 The configuration file import for applications, spyware and vulnerability objects functionality in the web interface in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, and 7.1.x before 7.1.14 allows remote...Show more The configuration file import for applications, spyware and vulnerability objects functionality in the web interface in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, and 7.1.x before 7.1.14 allows remote attackers to conduct server-side request forgery (SSRF) attacks and consequently obtain sensitive information via vectors related to parsing of external entities.Show less
CVE-2017-15942 1Paloaltonetworks 1Pan Os May 13, 2026 Dec 11, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.13, and 8.0.x before 8.0.6 allows remote attackers to cause a denial of service via vectors related to the management interface.
CVE-2017-15940 1Paloaltonetworks 1Pan Os May 13, 2026 Dec 11, 2017 N/A· v4 9.8 CRITICAL· v3 9.0 HIGH· v2 The web interface packet capture management component in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote authenticated users to execute arbitrary co...Show more The web interface packet capture management component in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote authenticated users to execute arbitrary code via unspecified vectors.Show less
CVE-2017-15870 1Paloaltonetworks 1Globalprotect May 13, 2026 Dec 11, 2017 N/A· v4 6.7 MEDIUM· v3 7.2 HIGH· v2 Palo Alto Networks GlobalProtect Agent before 4.0.3 allows attackers with administration rights on the local station to gain SYSTEM privileges via vectors involving "image path execution hijacking."

Previous 1...121314 15 16 Next