NA - CVE-2024-9464 - An OS command injection vulnerability in Palo...
An OS command injection vulnerability in Palo Alto Networks Expedition allows an authenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames,...
NA - CVE-2024-9465 - An SQL injection vulnerability in Palo Alto...
An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations,...
NA - CVE-2024-9466 - A cleartext storage of sensitive information...
A cleartext storage of sensitive information vulnerability in Palo Alto Networks Expedition allows an authenticated attacker to reveal firewall usernames, passwords, and API keys generated using...
NA - CVE-2024-9467 - A reflected XSS vulnerability in Palo Alto...
A reflected XSS vulnerability in Palo Alto Networks Expedition enables execution of malicious JavaScript in the context of an authenticated Expedition user's browser if that user clicks on a...
NA - CVE-2024-9468 - A memory corruption vulnerability in Palo Alto...
A memory corruption vulnerability in Palo Alto Networks PAN-OS software allows an unauthenticated attacker to crash PAN-OS due to a crafted packet through the data plane, resulting in a denial of...
NA - CVE-2024-9469 - A problem with a detection mechanism in the...
A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows non-administrative privileges to disable the agent. This issue may be...
NA - CVE-2024-9471 - A privilege escalation (PE) vulnerability in...
A privilege escalation (PE) vulnerability in the XML API of Palo Alto Networks PAN-OS software enables an authenticated PAN-OS administrator with restricted privileges to use a compromised XML API...
NA - CVE-2024-9473 - A privilege escalation vulnerability in the...
A privilege escalation vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a locally authenticated non-administrative Windows user to escalate their privileges to NT...
NA - CVE-2024-47763 - Wasmtime is an open source runtime for...
Wasmtime is an open source runtime for WebAssembly. Wasmtime's implementation of WebAssembly tail calls combined with stack traces can result in a runtime crash in certain WebAssembly modules....