palo alto networks vulnerabilities and exploits

(subscribe to this query)

7.2

CVSSv2

A local privilege escalation (PE) vulnerability exists in Palo Alto Networks Cortex XDR agent software on Windows that enables an authenticated local user with file creation privilege in the Windows root directory (such as C:\) to execute a program with elevated privileges. This ...

Paloaltonetworks Cortex Xdr Agent

7.2

CVSSv2

A local privilege escalation (PE) vulnerability exists in Palo Alto Networks Cortex XDR agent software on Windows that enables an authenticated local user with file creation privilege in the Windows root directory (such as C:\) to execute a program with elevated privileges. This ...

Paloaltonetworks Cortex Xdr Agent 6.1 Paloaltonetworks Cortex Xdr Agent 6.1.4 Paloaltonetworks Cortex Xdr Agent 6.1.5 Paloaltonetworks Cortex Xdr Agent 6.1.6 Paloaltonetworks Cortex Xdr Agent 6.1.7 Paloaltonetworks Cortex Xdr Agent 6.1.8 Paloaltonetworks Cortex Xdr Agent 6.1.9 Paloaltonetworks Cortex Xdr Agent 7.4.4 Paloaltonetworks Cortex Xdr Agent 7.4.3 Paloaltonetworks Cortex Xdr Agent 7.4.2 Paloaltonetworks Cortex Xdr Agent 7.4.1 Paloaltonetworks Cortex Xdr Agent 7.5.1 Paloaltonetworks Cortex Xdr Agent 7.5.2 Paloaltonetworks Cortex Xdr Agent 7.5.3 Paloaltonetworks Cortex Xdr Agent 7.6.1 Paloaltonetworks Cortex Xdr Agent 7.6.2 Paloaltonetworks Cortex Xdr Agent 7.7 Paloaltonetworks Cortex Xdr Agent 7.7.1 Paloaltonetworks Cortex Xdr Agent 7.5

4

CVSSv2

An improper authorization vulnerability in Palo Alto Network Cortex XSOAR software enables authenticated users in non-Read-Only groups to generate an email report that contains summary information about all incidents in the Cortex XSOAR instance, including incidents to which the ...

Paloaltonetworks Cortex Xsoar 6.2.0 Paloaltonetworks Cortex Xsoar 6.1.0 Paloaltonetworks Cortex Xsoar Paloaltonetworks Cortex Xsoar 6.5.0

NA

An improper link resolution vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local malicious user to read files on the system with elevated privileges when generating a tech support file.

Paloaltonetworks Cortex Xdr Agent

NA

An authentication bypass vulnerability in the Palo Alto Networks PAN-OS 8.1 web interface allows a network-based attacker with specific knowledge of the target firewall or Panorama appliance to impersonate an existing PAN-OS administrator and perform privileged actions.

Paloaltonetworks Pan-os

NA

A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system allows a local attacker with shell access to the engine to execute programs with elevated privileges.

Paloaltonetworks Cortex Xsoar 6.8.0 Paloaltonetworks Cortex Xsoar 6.6.0 Paloaltonetworks Cortex Xsoar 6.5.0

NA

The WireGuard client 0.5.3 on Windows insecurely configures the operating system and firewall such that traffic to a local network that uses non-RFC1918 IP addresses is blocked. This allows an adversary to trick the victim into blocking IP traffic to selected IP addresses and ser...

Wireguard Wireguard 0.5.3

1 Article

NA

An OS command injection vulnerability in the XML API of Palo Alto Networks PAN-OS software enables an authenticated API user to disrupt system processes and potentially execute arbitrary code with limited privileges on the firewall.

Paloaltonetworks Pan-os

NA

An arbitrary file upload vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write administrator with access to the web interface to disrupt system processes and potentially execute arbitrary code with limited privileges on the firewall.

Paloaltonetworks Pan-os

NA

An OS command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to disrupt system processes and potentially execute arbitrary code with limited privileges on the firewall.

Paloaltonetworks Pan-os

Get Started

« PREV 1 2 3 4 5 6 7 8 9 10 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook