CVSS: 6.1EPSS: 0%CPEs: 17EXPL: 0CVE-2014-3764
https://notcve.org/view.php?id=CVE-2014-3764
06 Jan 2015 — Cross-site scripting (XSS) vulnerability in the web-based device management interface in Palo Alto Networks PAN-OS before 5.0.15, 5.1.x before 5.1.10, and 6.0.x before 6.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Ref ID 64563. Vulnerabilidad de XSS en la interfaz de gestión de dispositivos basados en web en Palo Alto Networks PAN-OS anterior a 5.0.15, 5.1.x anterior a 5.1.10, y 6.0.x anterior a 6.0.6 permite a atacantes remotos inyectar secuencias de coma... • http://secunia.com/advisories/61811 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 10.0EPSS: 2%CPEs: 5EXPL: 0CVE-2012-6593
https://notcve.org/view.php?id=CVE-2012-6593
31 Aug 2013 — Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.4 allows remote attackers to execute arbitrary commands via unspecified vectors, aka Ref ID 30088. Palo Alto Networks PAN-OS anterior a 3.1.10 y 4.0.x anterior a 4.0.5, permite a atacantes remotos ejecutar comandos arbitrarios a través de vectores sin especificar. Aka Ref ID 30088. • https://security.paloaltonetworks.com/CVE-2012-6593 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 6.5EPSS: 0%CPEs: 11EXPL: 0CVE-2012-6597
https://notcve.org/view.php?id=CVE-2012-6597
31 Aug 2013 — Palo Alto Networks PAN-OS before 3.1.11 and 4.0.x before 4.0.9 allows remote authenticated users to cause a denial of service (management-server crash) by using the command-line interface for a crafted command, aka Ref ID 35254. Palo Alto Networks PAN-OS anterior a 3.1.11 y 4.0.x anterior a 4.0.9, permite a usuarios autenticados remotamente provocar una denegación de servicio (caída del servidor de administración) utilizando un comando manipulado desde la interfaz. Aka Ref ID 35254. • https://security.paloaltonetworks.com/CVE-2012-6597 • CWE-20: Improper Input Validation •
CVSS: 9.0EPSS: 1%CPEs: 11EXPL: 0CVE-2012-6605
https://notcve.org/view.php?id=CVE-2012-6605
31 Aug 2013 — The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11 and 4.0.x before 4.0.9 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka Ref ID 34896. La administración del dispositivo mediante el interfaz de comandos en Palo Alto Networks PAN-OS anterior a 3.1.11 y 4.0.x anterior a 4.0.9, permite a usuarios autenticados remotamente ejecutar comandos arbitrarios a través de vectores sin especificar. Aka Ref ID 34896. • https://security.paloaltonetworks.com/CVE-2012-6605 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 4.3EPSS: 1%CPEs: 23EXPL: 1CVE-2013-5663
https://notcve.org/view.php?id=CVE-2013-5663
31 Aug 2013 — The App-ID cache feature in Palo Alto Networks PAN-OS before 4.0.14, 4.1.x before 4.1.11, and 5.0.x before 5.0.2 allows remote attackers to bypass intended security policies via crafted requests that trigger invalid caching, as demonstrated by incorrect identification of HTTP traffic as SIP traffic, aka Ref ID 47195. La característica App-ID cache en Palo Alto Networks PAN-OS anterior a 4.0.14, 4.1.x anterior a 4.1.11 y 5.0.x anterior a 5.0.2, permite a atacantes remotos evitar las políticas de seguridad es... • http://cansecwest.com/csw11/Network%20Application%20FW%20vs.%20Contemporary%20Threats%20%28Brad%20Woodberg%20-%20Final%29.pptx • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 10.0EPSS: 5%CPEs: 16EXPL: 0CVE-2012-6601
https://notcve.org/view.php?id=CVE-2012-6601
31 Aug 2013 — The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x before 4.0.10, and 4.1.x before 4.1.4 allows remote attackers to execute arbitrary code via unspecified vectors, aka Ref ID 36983. La gestión del dispositivo a través del interfaz de comandos en Palo Alto Networks PAN-OS anterior a 3.1.12,y 4.0.x anterior a 4.0.10, y 4.1.x anterior a 4.1.4, permite a usuarios autenticados remotamente ejecutar comandos arbitrarios a través de vectores no especificados. Aka Ref ID 3... • https://security.paloaltonetworks.com/CVE-2012-6601 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 9.0EPSS: 1%CPEs: 11EXPL: 0CVE-2012-6604
https://notcve.org/view.php?id=CVE-2012-6604
31 Aug 2013 — The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11 and 4.0.x before 4.0.9 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka Ref ID 35249. La gestión del dispositivo a través del interfaz de comandos en Palo Alto Networks PAN-OS anterior a 3.1.11 y 4.0x anterior a 4.0.9, permite a usuarios autenticados remotamente ejecutar comandos arbitrarios a través de vectores no especificados. Aka Ref ID 35249. • https://security.paloaltonetworks.com/CVE-2012-6604 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 10.0EPSS: 2%CPEs: 6EXPL: 0CVE-2012-6592
https://notcve.org/view.php?id=CVE-2012-6592
31 Aug 2013 — Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.5 allows remote attackers to execute arbitrary commands via unspecified vectors, aka Ref ID 31091. Palo Alto Networks PAN-OS anterior a 3.1.10 y 4.0.x anterior a 4.0.5, permite a atacantes remotos ejecutar comandos arbitrarios a través de vectores sin especificar. Aka Ref ID 31091. • https://security.paloaltonetworks.com/CVE-2012-6592 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 9.0EPSS: 0%CPEs: 6EXPL: 0CVE-2012-6591
https://notcve.org/view.php?id=CVE-2012-6591
31 Aug 2013 — The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.5 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID 31116. El interfaz de gestión de línea de comandos en Palo Alto Networks PAN-OS anterior a 3.1.10 y 4.0.x anterior a 4.0.5, permite a usuarios autenticados remotamente ejecutar comandos arbitrarios a través de vectores no especificados. Aka Ref ID 31116. • https://security.paloaltonetworks.com/CVE-2012-6591 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 9.0EPSS: 0%CPEs: 11EXPL: 0CVE-2012-6594
https://notcve.org/view.php?id=CVE-2012-6594
31 Aug 2013 — The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11, 4.0.x before 4.0.8, and 4.1.x before 4.1.1 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID 34299. La gestión del dispositivo a través del interfaz de comandos en Palo Alto Networks PAN-OS anterior a 3.1.11 y 4.0.x anterior a 4.0.8, y 4.1.x anterior a 4.1.1, permite a usuarios autenticados remotamente ejecutar comandos arbitrarios a través de vectores no especi... • https://security.paloaltonetworks.com/CVE-2012-6594 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •