Palo Alto Networks paloaltonetworks pan-os any version

PAN-OS: OS injection vulnerability in PAN-OS management server

The device management command line interface (CLI) in Palo Alto Networks PAN-OS before 5.0.18, 5.1.x before 5.1.11, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5H2 allows remote authenticated administrators to execute arbitrary OS commands via an SSH command parameter.

PAN-OS: OS command injection vulnerability in the management interface

PAN-OS: Buffer overflow in the management web interface

PAN-OS: OS command injection in management server

PAN-OS: Authenticated user command injection vulnerability

PAN-OS: Buffer overflow in the management server

PAN-OS: Buffer overflow in authd authentication response

PAN-OS: Panorama SD WAN arbitrary file creation

PAN-OS: Buffer overflow in the management server

PAN-OS: Buffer overflow in management server payload parser

PAN-OS: OS command injection vulnerability in FIPS-CC mode certificate verification

PAN-OS: OS Command Injection Vulnerability in Web Interface

PAN-OS: OS command injection vulnerability in management interface certificate generator

PAN-OS: OS Command Injection Vulnerability in Web Interface XML API

PAN-OS: Improper Neutralization Vulnerability Leads to Unintended Program Execution During Configuration Commit

PAN-OS: OS Command Injection Vulnerability in the Command Line Interface (CLI)

GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource.

PAN-OS: Reflected Cross-Site Scripting (XSS) vulnerability in management web interface

Command injection in PAN-0S 9.0.2 and earlier may allow an authenticated attacker to gain access to a remote shell in PAN-OS, and potentially run with the escalated user’s permissions.

Information disclosure in PAN-OS 7.1.23 and earlier, PAN-OS 8.0.18 and earlier, PAN-OS 8.1.8-h4 and earlier, and PAN-OS 9.0.2 and earlier may allow for an authenticated user with read-only privileges to extract the API key of the device and/or the username/password from the XML API (in PAN-OS) and possibly escalate privileges granted to them.

PAN-OS: Memory Corruption Vulnerability in GlobalProtect Clientless VPN During SAML Authentication

Missing XML Validation in PAN-OS Web Interface

PAN-OS: Improper SAML SSO authorization of shared local users

PAN-OS: DOM-Based cross site scripting vulnerability in management web interface

PAN-OS: Improper Access Control Vulnerability Exposing AWS Instance Metadata Endpoint to GlobalProtect Users

PAN-OS: DOM-Based Cross-Site Scripting (XSS) Vulnerability in the Web Interface

PAN-OS: Panorama context switch session cookie disclosure

PAN-OS: Insufficient Session Expiration Vulnerability in the Web Interface

WildFire WF-500 and WF-500-B: Arbitrary File Read and Delete Vulnerability in WildFire Appliance (WF-500, WF-500-B)

PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet

PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway Using a Specially Crafted Packet

PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted Packet

PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering

PAN-OS: Command Injection Vulnerability

PAN-OS: Authenticated Admin Command Injection Vulnerability in the Management Web Interface

PAN-OS: Authenticated administrator can delete arbitrary system file

PAN-OS: Unsigned Code Execution During Plugin Installation Race Condition Vulnerability

PAN-OS: Temporary file race condition vulnerability in PAN-OS leads to local privilege escalation

PAN-OS: Authentication bypass vulnerability in GlobalProtect SSL VPN client certificate verification