| CVE-2024-9472 |
A null pointer dereference in Palo Alto Networks PAN-OS software on PA-800 Series, PA-3200 Series, PA-5200 Series, and…
|
8.7
High
|
Nov 14, 2024 |
| CVE-2024-9471 |
A privilege escalation (PE) vulnerability in the XML API of Palo Alto Networks PAN-OS software enables an…
|
5.1
Medium
|
Oct 9, 2024 |
| CVE-2024-9468 |
A memory corruption vulnerability in Palo Alto Networks PAN-OS software allows an unauthenticated attacker to crash…
|
8.2
High
|
Oct 9, 2024 |
| CVE-2024-8691 |
A vulnerability in the GlobalProtect portal in Palo Alto Networks PAN-OS software enables a malicious authenticated…
|
5.3
Medium
|
Sep 11, 2024 |
| CVE-2024-8688 |
An improper neutralization of matching symbols vulnerability in the Palo Alto Networks PAN-OS command line interface…
|
6.7
Medium
|
Sep 11, 2024 |
| CVE-2024-8687 |
An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user…
|
6.9
Medium
|
Sep 11, 2024 |
| CVE-2024-8686 |
A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass…
|
8.6
High
|
Sep 11, 2024 |
| CVE-2024-5916 |
An information exposure vulnerability in Palo Alto Networks PAN-OS software enables a local system administrator to…
|
6.0
Medium
|
Aug 14, 2024 |
| CVE-2024-5913 |
An improper input validation vulnerability in Palo Alto Networks PAN-OS software enables an attacker with the ability to…
|
6.1
Medium
|
Jul 10, 2024 |
| CVE-2024-5911 |
An arbitrary file upload vulnerability in Palo Alto Networks Panorama software enables an authenticated read-write…
|
7.0
High
|
Jul 10, 2024 |
| CVE-2024-3400 |
Exploited
Palo Alto Networks PAN-OS Command Injection Vulnerability
|
10.0
Critical
|
Apr 12, 2024 |
| CVE-2024-3388 |
A vulnerability in the GlobalProtect Gateway in Palo Alto Networks PAN-OS software enables an authenticated attacker…
|
4.1
Medium
|
Apr 10, 2024 |
| CVE-2024-3387 |
A weak (low bit strength) device certificate in Palo Alto Networks Panorama software enables an attacker to perform a…
|
5.3
Medium
|
Apr 10, 2024 |
| CVE-2024-3386 |
An incorrect string comparison vulnerability in Palo Alto Networks PAN-OS software prevents Predefined Decryption…
|
5.3
Medium
|
Apr 10, 2024 |
| CVE-2024-3385 |
A packet processing mechanism in Palo Alto Networks PAN-OS software enables a remote attacker to reboot hardware-based…
|
7.5
High
|
Apr 10, 2024 |
| CVE-2024-3384 |
A vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to reboot PAN-OS firewalls when…
|
7.5
High
|
Apr 10, 2024 |
| CVE-2024-3383 |
A vulnerability in how Palo Alto Networks PAN-OS software processes data received from Cloud Identity Engine (CIE)…
|
7.4
High
|
Apr 10, 2024 |
| CVE-2024-3382 |
A memory leak exists in Palo Alto Networks PAN-OS software that enables an attacker to send a burst of crafted packets…
|
7.5
High
|
Apr 10, 2024 |
| CVE-2024-2433 |
An improper authorization vulnerability in Palo Alto Networks Panorama software enables an authenticated read-only…
|
4.3
Medium
|
Mar 13, 2024 |
| CVE-2024-0011 |
A reflected cross-site scripting (XSS) vulnerability in the Captive Portal feature of Palo Alto Networks PAN-OS software…
|
4.3
Medium
|
Feb 14, 2024 |
| CVE-2024-0010 |
A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect portal feature of Palo Alto Networks PAN-OS…
|
4.3
Medium
|
Feb 14, 2024 |
| CVE-2024-0009 |
An improper verification vulnerability in the GlobalProtect gateway feature of Palo Alto Networks PAN-OS software…
|
6.3
Medium
|
Feb 14, 2024 |
| CVE-2024-0008 |
Web sessions in the management interface in Palo Alto Networks PAN-OS software do not expire in certain situations,…
|
6.6
Medium
|
Feb 14, 2024 |
| CVE-2024-0007 |
A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables a malicious authenticated…
|
6.8
Medium
|
Feb 14, 2024 |
| CVE-2023-6793 |
An improper privilege management vulnerability in Palo Alto Networks PAN-OS software enables an authenticated…
|
2.7
Low
|
Dec 13, 2023 |