# CVEs published 2013-08-31 19 CVEs were published on August 31, 2013: 0 critical, 0 high. Days are UTC. - [CVE-2012-6590](https://cve.now/CVE-2012-6590.md): The web-based management UI in Palo Alto Networks PAN-OS 4.0.x before 4.0.8 allows remote attackers to obtain verbose error information via (no CVSS) - [CVE-2012-6591](https://cve.now/CVE-2012-6591.md): The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.5 allows remote authenticated a (no CVSS) - [CVE-2012-6592](https://cve.now/CVE-2012-6592.md): Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.5 allows remote attackers to execute arbitrary commands via unspecified vectors (no CVSS) - [CVE-2012-6593](https://cve.now/CVE-2012-6593.md): Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.4 allows remote attackers to execute arbitrary commands via unspecified vectors (no CVSS) - [CVE-2012-6594](https://cve.now/CVE-2012-6594.md): The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11, 4.0.x before 4.0.8, and 4.1.x before 4.1.1 allows r (no CVSS) - [CVE-2012-6595](https://cve.now/CVE-2012-6595.md): The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.2 allows remote authentica (no CVSS) - [CVE-2012-6596](https://cve.now/CVE-2012-6596.md): Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.3 stores cleartext LDAP bind passwords in authd.log, which allows context- (no CVSS) - [CVE-2012-6597](https://cve.now/CVE-2012-6597.md): Palo Alto Networks PAN-OS before 3.1.11 and 4.0.x before 4.0.9 allows remote authenticated users to cause a denial of service (management-se (no CVSS) - [CVE-2012-6598](https://cve.now/CVE-2012-6598.md): The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.8 allows remote authenticated users to execute ar (no CVSS) - [CVE-2012-6599](https://cve.now/CVE-2012-6599.md): The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.8 and 4.1.x before 4.1.1 allows remote authentica (no CVSS) - [CVE-2012-6600](https://cve.now/CVE-2012-6600.md): The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.2 allows remote authentica (no CVSS) - [CVE-2012-6601](https://cve.now/CVE-2012-6601.md): The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x before 4.0.10, and 4.1.x before 4.1.4 allows (no CVSS) - [CVE-2012-6602](https://cve.now/CVE-2012-6602.md): The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.4 allows remote authenticated u (no CVSS) - [CVE-2012-6603](https://cve.now/CVE-2012-6603.md): The web management UI in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x before 4.0.10, and 4.1.x before 4.1.4 allows remote attackers to byp (no CVSS) - [CVE-2012-6604](https://cve.now/CVE-2012-6604.md): The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11 and 4.0.x before 4.0.9 allows remote authenticated u (no CVSS) - [CVE-2012-6605](https://cve.now/CVE-2012-6605.md): The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11 and 4.0.x before 4.0.9 allows remote authenticated u (no CVSS) - [CVE-2012-6606](https://cve.now/CVE-2012-6606.md): Palo Alto Networks GlobalProtect before 1.1.7, and NetConnect, does not verify X.509 certificates from SSL servers, which allows man-in-the- (no CVSS) - [CVE-2013-5663](https://cve.now/CVE-2013-5663.md): The App-ID cache feature in Palo Alto Networks PAN-OS before 4.0.14, 4.1.x before 4.1.11, and 5.0.x before 5.0.2 allows remote attackers to (no CVSS) - [CVE-2013-5664](https://cve.now/CVE-2013-5664.md): Cross-site scripting (XSS) vulnerability in the web-based device-management API browser in Palo Alto Networks PAN-OS before 4.1.13 and 5.0.x (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2013-08-31 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.