| CVE-2024-9472 |
A null pointer dereference in Palo Alto Networks PAN-OS software on PA-800 Series, PA-3200 Series, PA-5200 Series, and…
|
8.7
Élevée
|
14 nov. 2024 |
| CVE-2024-9471 |
A privilege escalation (PE) vulnerability in the XML API of Palo Alto Networks PAN-OS software enables an…
|
5.1
Moyenne
|
9 oct. 2024 |
| CVE-2024-9468 |
A memory corruption vulnerability in Palo Alto Networks PAN-OS software allows an unauthenticated attacker to crash…
|
8.2
Élevée
|
9 oct. 2024 |
| CVE-2024-8691 |
A vulnerability in the GlobalProtect portal in Palo Alto Networks PAN-OS software enables a malicious authenticated…
|
5.3
Moyenne
|
11 sept. 2024 |
| CVE-2024-8688 |
An improper neutralization of matching symbols vulnerability in the Palo Alto Networks PAN-OS command line interface…
|
6.7
Moyenne
|
11 sept. 2024 |
| CVE-2024-8687 |
An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user…
|
6.9
Moyenne
|
11 sept. 2024 |
| CVE-2024-8686 |
A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass…
|
8.6
Élevée
|
11 sept. 2024 |
| CVE-2024-5916 |
An information exposure vulnerability in Palo Alto Networks PAN-OS software enables a local system administrator to…
|
6.0
Moyenne
|
14 août 2024 |
| CVE-2024-5913 |
An improper input validation vulnerability in Palo Alto Networks PAN-OS software enables an attacker with the ability to…
|
6.1
Moyenne
|
10 juil. 2024 |
| CVE-2024-5911 |
An arbitrary file upload vulnerability in Palo Alto Networks Panorama software enables an authenticated read-write…
|
7.0
Élevée
|
10 juil. 2024 |
| CVE-2024-3400 |
Exploitée
Palo Alto Networks PAN-OS Command Injection Vulnerability
|
10.0
Critique
|
12 avr. 2024 |
| CVE-2024-3388 |
A vulnerability in the GlobalProtect Gateway in Palo Alto Networks PAN-OS software enables an authenticated attacker…
|
4.1
Moyenne
|
10 avr. 2024 |
| CVE-2024-3387 |
A weak (low bit strength) device certificate in Palo Alto Networks Panorama software enables an attacker to perform a…
|
5.3
Moyenne
|
10 avr. 2024 |
| CVE-2024-3386 |
An incorrect string comparison vulnerability in Palo Alto Networks PAN-OS software prevents Predefined Decryption…
|
5.3
Moyenne
|
10 avr. 2024 |
| CVE-2024-3385 |
A packet processing mechanism in Palo Alto Networks PAN-OS software enables a remote attacker to reboot hardware-based…
|
7.5
Élevée
|
10 avr. 2024 |
| CVE-2024-3384 |
A vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to reboot PAN-OS firewalls when…
|
7.5
Élevée
|
10 avr. 2024 |
| CVE-2024-3383 |
A vulnerability in how Palo Alto Networks PAN-OS software processes data received from Cloud Identity Engine (CIE)…
|
7.4
Élevée
|
10 avr. 2024 |
| CVE-2024-3382 |
A memory leak exists in Palo Alto Networks PAN-OS software that enables an attacker to send a burst of crafted packets…
|
7.5
Élevée
|
10 avr. 2024 |
| CVE-2024-2433 |
An improper authorization vulnerability in Palo Alto Networks Panorama software enables an authenticated read-only…
|
4.3
Moyenne
|
13 mars 2024 |
| CVE-2024-0011 |
A reflected cross-site scripting (XSS) vulnerability in the Captive Portal feature of Palo Alto Networks PAN-OS software…
|
4.3
Moyenne
|
14 févr. 2024 |
| CVE-2024-0010 |
A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect portal feature of Palo Alto Networks PAN-OS…
|
4.3
Moyenne
|
14 févr. 2024 |
| CVE-2024-0009 |
An improper verification vulnerability in the GlobalProtect gateway feature of Palo Alto Networks PAN-OS software…
|
6.3
Moyenne
|
14 févr. 2024 |
| CVE-2024-0008 |
Web sessions in the management interface in Palo Alto Networks PAN-OS software do not expire in certain situations,…
|
6.6
Moyenne
|
14 févr. 2024 |
| CVE-2024-0007 |
A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables a malicious authenticated…
|
6.8
Moyenne
|
14 févr. 2024 |
| CVE-2023-6793 |
An improper privilege management vulnerability in Palo Alto Networks PAN-OS software enables an authenticated…
|
2.7
Faible
|
13 déc. 2023 |