paloaltonetworks kayıtları
paloaltonetworks üreticisine ait 383 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 17 · %4,4
- Silahlaştırılmış
- 19 · %5
- Pre-auth RCE
- 32
- Düzeltme kaydı olan
- %73,4
- Yayından KEV’e ortanca
- 16 gün
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')44
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')38
- CWE-20 Improper Input Validation22
- CWE-269 Improper Privilege Management13
- CWE-532 Insertion of Sensitive Information into Log File11
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor10
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
383 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
100Hemen | CVE-2024-3400Silahlaştırılmış | PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtectpaloaltonetworks · pan-os · CWE-20 | Kritik10,0 | KEV | %100,0 | 12 Nis 2024 |
99Hemen | CVE-2024-9463Silahlaştırılmış | Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosurepaloaltonetworks · expedition · CWE-78 | Kritik9,9 | KEV | %98,5 | 9 Eki 2024 |
98Hemen | CVE-2017-15944Silahlaştırılmış | Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to executepaloaltonetworks · pan-os · CWE-20 | Kritik9,8 | KEV | %98,3 | 11 Ara 2017 |
97Hemen | CVE-2024-0012Silahlaştırılmış | PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)paloaltonetworks · pan-os · CWE-306 | Kritik9,3 | KEV | %99,8 | 18 Kas 2024 |
96Hemen | CVE-2024-9465Silahlaştırılmış | Expedition: SQL Injection Leads to Firewall Admin Credential Disclosurepaloaltonetworks · expedition · CWE-89 | Kritik9,2 | KEV | %99,6 | 9 Eki 2024 |
95Hemen | CVE-2025-0108Silahlaştırılmış | PAN-OS: Authentication Bypass in the Management Web Interfacepaloaltonetworks · pan-os · CWE-306 | Yüksek8,8 | KEV | %98,5 | 12 Şub 2025 |
95Hemen | CVE-2024-5910Silahlaştırılmış | Expedition: Missing Authentication Leads to Admin Account Takeoverpaloaltonetworks · expedition · CWE-306 | Kritik9,3 | KEV | %91,8 | 10 Tem 2024 |
90Hemen | CVE-2026-0257Silahlaştırılmış | PAN-OS: GlobalProtect Authentication Bypass Vulnerabilitiespaloaltonetworks · pan-os · CWE-565 | Yüksek7,8 | KEV | %96,4 | 13 May 2026 |
85Hemen | CVE-2024-9474Silahlaştırılmış | PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interfacepaloaltonetworks · pan-os · CWE-78 | Orta6,9 | KEV | %94,7 | 18 Kas 2024 |
83Hemen | CVE-2016-5195Silahlaştırılmış | Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect halinux · linux kernel · CWE-362 | Yüksek7,0 | KEV | %83,5 | 10 Kas 2016 |
77Bu hafta | CVE-2026-0300Silahlaştırılmış | PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portalpaloaltonetworks · pan-os · CWE-787 | Kritik9,3 | KEV | %31,7 | 6 May 2026 |
76Bu hafta | CVE-2019-1579Silahlaştırılmış | Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or paloaltonetworks · pan-os · CWE-134 | Yüksek8,1 | KEV | %46,2 | 19 Tem 2019 |
73Bu hafta | CVE-2024-3393Silahlaştırılmış | PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packetpaloaltonetworks · pan-os · CWE-754 | Yüksek8,7 | KEV | %28,4 | 27 Ara 2024 |
71Bu hafta | CVE-2020-2021Silahlaştırılmış | PAN-OS: Authentication Bypass in SAML Authenticationpaloaltonetworks · pan-os · CWE-347 | Kritik10,0 | KEV | %4,4 | 29 Haz 2020 |
65Bu hafta | CVE-2018-14634Silahlaştırılmış | An integer overflow flaw was found in the Linux kernel's create_elf_tables() function.linux · linux kernel · CWE-190 | Yüksek7,8 | KEV | %14,7 | 25 Eyl 2018 |
65Bu hafta | CVE-2022-0028Silahlaştırılmış | PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filteringpaloaltonetworks · pan-os · CWE-406 | Yüksek8,6 | KEV | %2,4 | 10 Ağu 2022 |
62Bu hafta | CVE-2024-9464Kavram kanıtı | Expedition: Authenticated OS Command Injection Vulnerability Leads to Firewall Admin Credential Disclosurepaloaltonetworks · expedition · CWE-78 | Kritik9,3 | — | %82,6 | 9 Eki 2024 |
59Planlayın | CVE-2025-0111Silahlaştırılmış | PAN-OS: Authenticated File Read Vulnerability in the Management Web Interfacepaloaltonetworks · pan-os · CWE-73 | Yüksek7,1 | KEV | %2,0 | 12 Şub 2025 |
54Planlayın | CVE-2020-2038Silahlaştırılmış | PAN-OS: OS command injection vulnerability in the management web interfacepaloaltonetworks · pan-os · CWE-78 | Yüksek7,2 | — | %86,1 | 9 Eyl 2020 |
54Planlayın | CVE-2025-0107Kavram kanıtı | Expedition: OS Command Injection Vulnerabilitypaloaltonetworks · expedition · CWE-78 | Yüksek7,7 | — | %78,5 | 10 Oca 2025 |
49Planlayın | CVE-2016-4971Kavram kanıtı | GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource.gnu · wget | Yüksek8,8 | — | %46,1 | 30 Haz 2016 |
49Planlayın | CVE-2016-9150Kavram kanıtı | Buffer overflow in the management web interface in Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x paloaltonetworks · pan-os · CWE-119 | Kritik9,8 | — | %34,8 | 19 Kas 2016 |
46Planlayın | CVE-2018-10143İstismar yok | The Palo Alto Networks Expedition Migration tool 1.0.107 and earlier may allow an unauthenticated attacker with remote access to run system paloaltonetworks · expedition · CWE-269 | Kritik9,8 | — | %24,8 | 11 Ara 2018 |
45Planlayın | CVE-2021-3064Kavram kanıtı | PAN-OS: Memory Corruption Vulnerability in GlobalProtect Portal and Gateway Interfacespaloaltonetworks · pan-os · CWE-121 | Kritik9,8 | — | %20,1 | 10 Kas 2021 |
42Planlayın | CVE-2016-8610Kavram kanıtı | A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processiopenssl · openssl · CWE-400 | Yüksek7,5 | — | %39,7 | 13 Kas 2017 |
- CVE-2024-3400100Hemen
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
KritikCVSS 10,0KEVSilahlaştırılmışEPSS %100paloaltonetworks · pan-os12 Nis 2024
- CVE-2024-946399Hemen
Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure
KritikCVSS 9,9KEVSilahlaştırılmışEPSS %99paloaltonetworks · expedition9 Eki 2024
- CVE-2017-1594498Hemen
Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to execute
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %98paloaltonetworks · pan-os11 Ara 2017
- CVE-2024-001297Hemen
PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)
KritikCVSS 9,3KEVSilahlaştırılmışEPSS %100paloaltonetworks · pan-os18 Kas 2024
- CVE-2024-946596Hemen
Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure
KritikCVSS 9,2KEVSilahlaştırılmışEPSS %100paloaltonetworks · expedition9 Eki 2024
- CVE-2025-010895Hemen
PAN-OS: Authentication Bypass in the Management Web Interface
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %98paloaltonetworks · pan-os12 Şub 2025
- CVE-2024-591095Hemen
Expedition: Missing Authentication Leads to Admin Account Takeover
KritikCVSS 9,3KEVSilahlaştırılmışEPSS %92paloaltonetworks · expedition10 Tem 2024
- CVE-2026-025790Hemen
PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities
YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %96paloaltonetworks · pan-os13 May 2026
- CVE-2024-947485Hemen
PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface
OrtaCVSS 6,9KEVSilahlaştırılmışEPSS %95paloaltonetworks · pan-os18 Kas 2024
- CVE-2016-519583Hemen
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect ha
YüksekCVSS 7,0KEVSilahlaştırılmışEPSS %84linux · linux kernel10 Kas 2016
- CVE-2026-030077Bu hafta
PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal
KritikCVSS 9,3KEVSilahlaştırılmışEPSS %32paloaltonetworks · pan-os6 May 2026
- CVE-2019-157976Bu hafta
Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or
YüksekCVSS 8,1KEVSilahlaştırılmışEPSS %46paloaltonetworks · pan-os19 Tem 2019
- CVE-2024-339373Bu hafta
PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet
YüksekCVSS 8,7KEVSilahlaştırılmışEPSS %28paloaltonetworks · pan-os27 Ara 2024
- CVE-2020-202171Bu hafta
PAN-OS: Authentication Bypass in SAML Authentication
KritikCVSS 10,0KEVSilahlaştırılmışEPSS %4paloaltonetworks · pan-os29 Haz 2020
- CVE-2018-1463465Bu hafta
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function.
YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %15linux · linux kernel25 Eyl 2018
- CVE-2022-002865Bu hafta
PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering
YüksekCVSS 8,6KEVSilahlaştırılmışEPSS %2paloaltonetworks · pan-os10 Ağu 2022
- CVE-2024-946462Bu hafta
Expedition: Authenticated OS Command Injection Vulnerability Leads to Firewall Admin Credential Disclosure
KritikCVSS 9,3Kavram kanıtıEPSS %83paloaltonetworks · expedition9 Eki 2024
- CVE-2025-011159Planlayın
PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface
YüksekCVSS 7,1KEVSilahlaştırılmışEPSS %2paloaltonetworks · pan-os12 Şub 2025
- CVE-2020-203854Planlayın
PAN-OS: OS command injection vulnerability in the management web interface
YüksekCVSS 7,2SilahlaştırılmışEPSS %86paloaltonetworks · pan-os9 Eyl 2020
- CVE-2025-010754Planlayın
Expedition: OS Command Injection Vulnerability
YüksekCVSS 7,7Kavram kanıtıEPSS %79paloaltonetworks · expedition10 Oca 2025
- CVE-2016-497149Planlayın
GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource.
YüksekCVSS 8,8Kavram kanıtıEPSS %46gnu · wget30 Haz 2016
- CVE-2016-915049Planlayın
Buffer overflow in the management web interface in Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x
KritikCVSS 9,8Kavram kanıtıEPSS %35paloaltonetworks · pan-os19 Kas 2016
- CVE-2018-1014346Planlayın
The Palo Alto Networks Expedition Migration tool 1.0.107 and earlier may allow an unauthenticated attacker with remote access to run system
KritikCVSS 9,8İstismar yokEPSS %25paloaltonetworks · expedition11 Ara 2018
- CVE-2021-306445Planlayın
PAN-OS: Memory Corruption Vulnerability in GlobalProtect Portal and Gateway Interfaces
KritikCVSS 9,8Kavram kanıtıEPSS %20paloaltonetworks · pan-os10 Kas 2021
- CVE-2016-861042Planlayın
A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processi
YüksekCVSS 7,5Kavram kanıtıEPSS %40openssl · openssl13 Kas 2017