|
5541
|
- |
|
-
|
-
|
Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending special…
|
CWE-754
Improper Check for Unusual or Exceptional Conditions
|
CVE-2026-0262
|
2026-05-15 01:21 |
2026-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
5542
|
- |
|
-
|
-
|
A denial of service (DoS) vulnerability in Palo Alto Networks Prisma SD-WAN ION devices enables an unauthenticated attacker in a network adjacent to a Prisma SD-WAN ION device to cause a system disru…
|
CWE-606
Unchecked Input for Loop Condition
|
CVE-2026-0243
|
2026-05-15 01:21 |
2026-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
5543
|
- |
|
-
|
-
|
The ftpcp() function in Lib/ftplib.py was not updated when
CVE-2021-4189 was fixed. While makepasv() was patched to replace
server-supplied PASV host addresses with the actual peer address
(getpee…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2026-8328
|
2026-05-15 01:21 |
2026-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
5544
|
4.3 |
MEDIUM
Network
|
-
|
-
|
Editors could delete any annotation, even those they do not have read access to. The editor user cannot create or read the annotations.
|
CWE-284
Improper Access Control
|
CVE-2026-28374
|
2026-05-15 01:21 |
2026-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
5545
|
6.5 |
MEDIUM
Network
|
-
|
-
|
A race condition in Grafana Live allows authenticated users with Viewer role to trigger a server crash by sending concurrent requests that cause a fatal map access error. This results in complete ser…
|
-
|
CVE-2026-28379
|
2026-05-15 01:21 |
2026-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
5546
|
6.5 |
MEDIUM
Network
|
-
|
-
|
Any Editor could delete any snapshot, even if they have no access to read or write them.
|
CWE-862
Missing Authorization
|
CVE-2026-28380
|
2026-05-15 01:21 |
2026-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
5547
|
6.5 |
MEDIUM
Network
|
-
|
-
|
A request to the Grafana plugin resources endpoint can cause unbounded memory allocation by reading the entire request body into memory. An authenticated user can exploit this to trigger an out-of-me…
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2026-28383
|
2026-05-15 01:21 |
2026-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
5548
|
7.4 |
HIGH
Network
|
-
|
-
|
When using an IPv6 allow-list for the Auth Proxy feature, it defaults to /32 addresses. Addresses specifying a mask explicitly are not affected; to mitigate easily, add the desired mask (usually /128…
|
CWE-1188
Insecure Default Initialization of Resource
|
CVE-2026-33376
|
2026-05-15 01:21 |
2026-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
5549
|
7.1 |
HIGH
Network
|
-
|
-
|
An Editor can overwrite a dashboard not owned by them to acquire admin on that specific dashboard. The user must have write access to the dashboard to escalate privilege.
|
-
|
CVE-2026-33377
|
2026-05-15 01:21 |
2026-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
5550
|
6.5 |
MEDIUM
Network
|
-
|
-
|
Using the $__timeGroup macro, one can achieve an OOM by overloading the server. This requires a SQL datasource. If the server is set up to auto-restart, the impact is minimal or non-existent, as the …
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2026-33378
|
2026-05-15 01:21 |
2026-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|