|
224451
|
4.3 |
MEDIUM
Network
|
cisco
|
nx-os
|
A vulnerability in Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an authenticated, remote attacker to access sensitive information. The vulnerab…
|
CWE-20
Improper Input Validation
|
CVE-2019-1587
|
2024-11-21 13:36 |
2019-05-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224452
|
4.6 |
MEDIUM
Physics
|
cisco
|
application_policy_infrastructure_controller
|
A vulnerability in Cisco Application Policy Infrastructure Controller (APIC) Software could allow an unauthenticated, local attacker with physical access to obtain sensitive information from an affec…
|
CWE-459
Incomplete Cleanup
|
CVE-2019-1586
|
2024-11-21 13:36 |
2019-05-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224453
|
5.4 |
MEDIUM
Network
|
paloaltonetworks
|
expedition_migration_tool
|
Cross-site scripting (XSS) vulnerability in Palo Alto Networks Expedition Migration tool 1.1.12 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the Devices View.
|
CWE-79
Cross-site Scripting
|
CVE-2019-1574
|
2024-11-21 13:36 |
2019-04-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224454
|
2.5 |
LOW
Local
|
paloaltonetworks
|
globalprotect
|
GlobalProtect Agent 4.1.0 for Windows and GlobalProtect Agent 4.1.10 and earlier for macOS may allow a local authenticated attacker who has compromised the end-user account and gained the ability to …
|
CWE-311
Missing Encryption of Sensitive Data
|
CVE-2019-1573
|
2024-11-21 13:36 |
2019-04-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224455
|
5.4 |
MEDIUM
Network
|
paloaltonetworks
|
expedition_migration_tool
|
The Expedition Migration tool 1.1.6 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the User Mapping Settings.
|
CWE-79
Cross-site Scripting
|
CVE-2019-1567
|
2024-11-21 13:36 |
2019-04-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224456
|
4.8 |
MEDIUM
Network
|
paloaltonetworks
|
expedition
|
The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the RADIUS server settings.
|
CWE-79
Cross-site Scripting
|
CVE-2019-1571
|
2024-11-21 13:36 |
2019-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224457
|
7.5 |
HIGH
Network
|
paloaltonetworks
|
pan-os
|
PAN-OS 9.0.0 may allow an unauthenticated remote user to access php files.
|
NVD-CWE-noinfo
|
CVE-2019-1572
|
2024-11-21 13:36 |
2019-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224458
|
4.8 |
MEDIUM
Network
|
paloaltonetworks
|
expedition
|
The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the LDAP server settings.
|
CWE-79
Cross-site Scripting
|
CVE-2019-1570
|
2024-11-21 13:36 |
2019-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224459
|
4.8 |
MEDIUM
Network
|
paloaltonetworks
|
expedition
|
The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the User Mapping Settings for account name of admin user.
|
CWE-79
Cross-site Scripting
|
CVE-2019-1569
|
2024-11-21 13:36 |
2019-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224460
|
7.8 |
HIGH
Local
|
cisco
|
nx-os
|
A vulnerability in the Tetration Analytics agent for Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, local attacker to execute arbitrary code as root. The vuln…
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2019-1618
|
2024-11-21 13:36 |
2019-03-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|