Page 5 of 69 results (0.013 seconds)

CVSS: 5.4EPSS: 0%CPEs: 4EXPL: 0

CVE-2018-9337

https://notcve.org/view.php?id=CVE-2018-9337

03 Jul 2018 — The PAN-OS web interface administration page in PAN-OS 6.1.20 and earlier, PAN-OS 7.1.17 and earlier, PAN-OS 8.0.10 and earlier, and PAN-OS 8.1.1 and earlier may allow an attacker to inject arbitrary JavaScript or HTML. La página de interfaz web de administración de PAN-OS en PAN-OS 6.1.20 y anteriores, PAN-OS 7.1.17 y anteriores, PAN-OS 8.0.10 y anteriores y PAN-OS 8.1.1 y anteriores podría permitir que un atacante inyecte código HTML o JavaScript arbitrario. • http://www.securityfocus.com/bid/104657 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.5EPSS: 0%CPEs: 4EXPL: 0

CVE-2018-9334

https://notcve.org/view.php?id=CVE-2018-9334

03 Jul 2018 — The PAN-OS management web interface page in PAN-OS 6.1.20 and earlier, PAN-OS 7.1.16 and earlier, PAN-OS 8.0.8 and earlier, and PAN-OS 8.1.0 may allow an attacker to access the GlobalProtect password hashes of local users via manipulation of the HTML markup. La página de interfaz web de administración de PAN-OS en PAN-OS 6.1.20 y anteriores, PAN-OS 7.1.16 y anteriores, PAN-OS 8.0.8 y anteriores y PAN-OS 8.1.0 podría permitir que un atacante acceda a los hashes de la contraseña de GlobalProtect de los usuari... • http://www.securityfocus.com/bid/104677 • CWE-269: Improper Privilege Management •

CVSS: 5.4EPSS: 0%CPEs: 4EXPL: 0

CVE-2018-9335

https://notcve.org/view.php?id=CVE-2018-9335

03 Jul 2018 — The PAN-OS session browser in PAN-OS 6.1.20 and earlier, PAN-OS 7.1.16 and earlier, PAN-OS 8.0.9 and earlier, and PAN-OS 8.1.1 and earlier may allow an attacker to inject arbitrary JavaScript or HTML. El navegador web de PAN-OS en PAN-OS 6.1.20 y anteriores, PAN-OS 7.1.16 y anteriores, PAN-OS 8.0.9 y anteriores y PAN-OS 8.1.1 y anteriores podría permitir que un atacante inyecte código HTML o JavaScript arbitrario. • http://www.securityfocus.com/bid/104658 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.6EPSS: 0%CPEs: 3EXPL: 0

CVE-2018-9242

https://notcve.org/view.php?id=CVE-2018-9242

03 Jul 2018 — The PAN-OS management web interface page in PAN-OS 6.1.20 and earlier, PAN-OS 7.1.16 and earlier, PAN-OS 8.0.9 and earlier may allow an attacker to delete files in the system via specific request parameters. La página de interfaz web de administración de PAN-OS en PAN-OS 6.1.20 y anteriores, PAN-OS 7.1.16 y anteriores y PAN-OS 8.0.9 y anteriores podría permitir que un atacante elimine archivos en el sistema mediante parámetros de petición específicos. • http://www.securityfocus.com/bid/104676 • CWE-20: Improper Input Validation •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0

CVE-2017-16878

https://notcve.org/view.php?id=CVE-2017-16878

10 Jan 2018 — Cross-site scripting (XSS) vulnerability in the Captive Portal function in Palo Alto Networks PAN-OS before 8.0.7 allows remote attackers to inject arbitrary web script or HTML by leveraging an unspecified configuration. Múltiples vulnerabilidades Cross-Site Scripting (XSS) en la función Captive Portal en Palo Alto Networks PAN-OS en versiones anteriores a la 8.0.7 permiten que los atacantes remotos inyecten scripts web o HTML arbitrarios aprovechándose de una configuración no especificada. • http://www.securitytracker.com/id/1040148 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 4EXPL: 0

CVE-2017-15941

https://notcve.org/view.php?id=CVE-2017-15941

10 Jan 2018 — Cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.7, when the GlobalProtect gateway or portal is configured, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad Cross-Site Scripting (XSS) en Palo Alto Networks PAN-OS en versiones anteriores a 6.1.19, 7.0.x anteriores a 7.0.19, 7.1.x anteriores a 7.1.14 y 8.0.x anteriores a 8.0.7, cuando la puerta de enlace o po... • http://www.securityfocus.com/bid/102446 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.9EPSS: 0%CPEs: 24EXPL: 0

CVE-2017-17841

https://notcve.org/view.php?id=CVE-2017-17841

10 Jan 2018 — Palo Alto Networks PAN-OS 6.1, 7.1, and 8.0.x before 8.0.7, when an interface implements SSL decryption with RSA enabled or hosts a GlobalProtect portal or gateway, might allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a ROBOT attack. Palo Alto Networks PAN-OS 6.1, 7.1 y 8.0.x anteriores a 8.0.7, cuando una interfaz implementa un descifrado SSL con RSA o alberga una puerta de enlace o portal GlobalProtect, podría permitir que los atacantes remotos... • http://www.securityfocus.com/bid/102458 •

CVSS: 5.3EPSS: 0%CPEs: 3EXPL: 0

CVE-2017-15943

https://notcve.org/view.php?id=CVE-2017-15943

11 Dec 2017 — The configuration file import for applications, spyware and vulnerability objects functionality in the web interface in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, and 7.1.x before 7.1.14 allows remote attackers to conduct server-side request forgery (SSRF) attacks and consequently obtain sensitive information via vectors related to parsing of external entities. La importación de archivos de configuración para las funcionalidades de objetos de aplicaciones, spyware y vulnerabilidades en la... • http://www.securityfocus.com/bid/102074 • CWE-918: Server-Side Request Forgery (SSRF) •

CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 0

CVE-2017-15942

https://notcve.org/view.php?id=CVE-2017-15942

11 Dec 2017 — Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.13, and 8.0.x before 8.0.6 allows remote attackers to cause a denial of service via vectors related to the management interface. Palo Alto Networks PAN-OS en versiones anteriores a la 6.1.19; versiones 7.0.x anteriores a la 7.0.19; versiones 7.1.x anteriores a la 7.1.13 y versiones 8.0.x anteriores a la 8.0.6 permite que atacantes remotos provoquen una denegación de servicio (DoS) mediante vectores relacionados con la interfaz de... • http://www.securityfocus.com/bid/102075 •

CVSS: 9.8EPSS: 4%CPEs: 4EXPL: 0

CVE-2017-15940

https://notcve.org/view.php?id=CVE-2017-15940

11 Dec 2017 — The web interface packet capture management component in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote authenticated users to execute arbitrary code via unspecified vectors. El componente de gestión de captura de paquetes de la interfaz web en Palo Alto Networks PAN-OS en versiones anteriores a la 6.1.19; versiones 7.0.x anteriores a la 7.0.19; versiones 7.1.x anteriores a la 7.1.14 y versiones 8.0.x anteriores a la 8.0.6 permite que ... • http://www.securityfocus.com/bid/102076 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •