Filters
Versions
19.1
18
18.4-r1
17
19.1-r1
17
19.1-r1-s1
17
19.1-r1-s2
17
19.1-r1-s3
17
19.2
17
19.2-r1
17
19.2-r1-s1
17
18.4
16
18.4-r1-s1
16
18.4-r1-s2
16
18.4-r1-s5
16
19.3
16
19.3-r1
16
18.4-r2
15
18.4-r2-s1
15
18.4-r2-s2
15
19.1-r1-s4
15
19.2-r1-s2
15
19.3-r1-s1
15
15.1
14
15.1-f2
14
15.1-r2
14
18.1
14
18.2
14
18.3
14
18.3-r1-s1
14
18.4-r1-s6
14
12.3
13
15.1-r1
13
15.1x49-d10
13
18.1-r2
13
18.2-r1-s3
13
18.3-r1
13
18.3-r1-s2
13
18.3-r1-s3
13
18.3-r1-s5
13
18.3-r1-s6
13
18.3-r2
13
18.3-r2-s1
13
18.3-r2-s2
13
18.4-r1-s3
13
18.4-r1-s4
13
18.4-r2-s3
13
19.2-r1-s3
13
12.3x48-d10
12
14.1x53
12
15.1-r3
12
15.1x49-d20
12
15.1x49-d30
12
17.3
12
17.4
12
18.1-r1
12
18.1-r2-s1
12
18.1-r2-s2
12
18.1-r2-s4
12
18.2-r1-s5
12
18.2-r2-s1
12
18.2-r2-s2
12
19.1-r2
12
19.3-r2
12
19.3-r2-s1
12
19.3-r2-s2
12
19.4-r1
12
19.4-r1-s1
12
20.1-r1
12
12.3x48-d15
11
15.1-f3
11
15.1-r4
11
15.1x49-d40
11
15.1x49-d45
11
17.4-r1
11
18.1-r3
11
18.1-r3-s1
11
18.1-r3-s2
11
18.1-r3-s3
11
18.1-r3-s4
11
18.1-r3-s6
11
18.1-r3-s7
11
18.1-r3-s8
11
18.2-r1
11
18.2-r2-s3
11
18.2-r2-s4
11
18.2-r2-s5
11
18.2-r2-s6
11
18.3-r3
11
19.1-r1-s5
11
19.1-r2-s1
11
19.2-r1-s4
11
19.4-r1-s2
11
20.1-r1-s1
11
14.1x53-d10
10
14.1x53-d15
10
14.1x53-d16
10
14.1x53-d25
10
14.1x53-d26
10
14.1x53-d27
10
15.1-f1
10
15.1-f5
10
15.1-f6
10
15.1x49-d35
10
15.1x49-d50
10
15.1x49-d55
10
17.3-r3
10
17.4-r2
10
18.2-r1-s4
10
18.2-r3
10
18.3-r2-s3
10
18.4-r1-s7
10
18.4-r2-s4
10
20.4-r1
10
20.4-r1-s1
10
12.3-r1
9
12.3x48-d30
9
15.1-f4
9
15.1-r5
9
15.1-r7
9
15.1x49
9
15.1x49-d60
9
15.1x49-d65
9
15.1x49-d70
9
15.1x49-d75
9
15.1x49-d80
9
16.1-r1
9
16.1-r2
9
16.1-r3
9
17.2
9
17.2-r1
9
17.3-r2
9
17.3-r2-s2
9
17.3-r3-s1
9
17.3-r3-s2
9
17.3-r3-s3
9
18.2-r2
9
18.2-r3-s1
9
18.2-r3-s2
9
19.3-r2-s3
9
19.3-r2-s4
9
19.4-r2
9
20.1-r1-s2
9
20.1-r1-s3
9
20.2-r1
9
20.2-r1-s1
9
20.2-r1-s2
9
20.3-r1
9
12.3x48-d20
8
12.3x48-d25
8
14.1
8
14.1x53-d30
8
14.1x53-d35
8
15.1-f2-s1
8
15.1-f2-s2
8
15.1-f2-s3
8
15.1-f2-s4
8
15.1-r6
8
15.1x49-d110
8
15.1x49-d90
8
15.1x53-d21
8
15.1x53-d30
8
15.1x53-d32
8
15.1x53-d33
8
17.2-r2
8
17.3-r1-s1
8
17.3-r2-s1
8
17.3-r2-s3
8
17.3-r2-s4
8
17.3-r3-s4
8
17.4-r1-s1
8
17.4-r1-s2
8
17.4-r1-s4
8
17.4-r1-s5
8
17.4-r1-s6
8
17.4-r1-s7
8
17.4-r2-s1
8
17.4-r2-s2
8
17.4-r2-s3
8
17.4-r2-s4
8
17.4-r2-s5
8
17.4-r2-s6
8
17.4-r2-s7
8
17.4-r2-s8
8
18.3-r1-s4
8
18.4-r3
8
19.1-r3
8
19.1-r3-s1
8
19.3-r2-s5
8
19.4-r2-s1
8
19.4-r2-s2
8
20.4-r2
8
12.1x46
7
12.3-r11
7
12.3-r2
7
12.3-r3
7
12.3-r4
7
12.3-r5
7
12.3-r6
7
12.3-r7
7
12.3-r8
7
12.3-r9
7
12.3x48
7
12.3x48-d35
7
14.1-r1
7
14.1-r2
7
14.1-r3
7
14.1-r4
7
14.2-r1
7
14.2-r2
7
15.1-a1
7
15.1-f7
7
15.1x49-d100
7
15.1x49-d120
7
15.1x53-d20
7
15.1x53-d34
7
15.1x53-d60
7
16.1
7
17.1
7
17.2-r1-s7
7
17.3-r1
7
18.3-r3-s1
7
18.4-r3-s1
7
18.4-r3-s2
7
19.1-r1-s6
7
19.4-r1-s3
7
19.4-r3-s3
7
20.1-r1-s4
7
20.1-r2
7
20.1-r2-s1
7
20.1-r3
7
20.2-r1-s3
7
20.3-r1-s1
7
20.4-r2-s1
7
21.2-r1
7
12.1x46-d10
6
12.1x46-d15
6
12.1x46-d20
6
12.1x46-d25
6
12.1x46-d30
6
12.1x46-d50
6
12.3-r10
6
12.3x48-d40
6
12.3x48-d45
6
12.3x48-d50
6
14.1x53-d40
6
14.2-r3
6
14.2-r4
6
15.1-f5-s7
6
15.1-f6-s3
6
15.1-f6-s7
6
15.1-r4-s8
6
15.1-r5-s5
6
15.1-r6-s1
6
15.1-r6-s6
6
15.1x49-d130
6
15.1x49-d140
6
15.1x49-d15
6
15.1x49-d150
6
15.1x53-d61
6
15.1x53-d62
6
15.1x53-d63
6
16.1-r4
6
16.1-r5
6
16.1-r7
6
16.2-r1
6
17.1-r1
6
17.3-r3-s7
6
17.4-r3
6
17.4-r3-s1
6
18.1-r3-s5
6
18.1-r3-s9
6
18.2-r1-s2
6
18.2-r2-s7
6
18.3-r3-s2
6
18.4-r2-s5
6
18.4-r3-s3
6
19.1-r2-s2
6
19.1-r3-s2
6
19.2-r1-s5
6
19.2-r1-s6
6
19.2-r3
6
19.3-r3
6
19.4-r2-s3
6
19.4-r2-s4
6
19.4-r3
6
19.4-r3-s1
6
19.4-r3-s2
6
19.4-r3-s4
6
20.1-r2-s2
6
20.2-r2
6
20.2-r2-s1
6
20.2-r2-s2
6
20.2-r3
6
20.3-r2
6
20.3-r3
6
21.1-r1
6
12.1x44
5
12.1x46-d35
5
12.1x46-d40
5
12.3x48-d55
5
13.3
5
Juniper JUNOSJunos OS: SRX Series and EX Series: Security Vulnerability in J-web allows a preAuth Remote Code Execution
9.8
EPSS
0.26%
First published (updated )
Juniper JUNOSJunos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
First published (updated )
Juniper JUNOSJunos OS: Unauthenticated access vulnerability in J-Web
9.8
First published (updated )
Juniper JUNOSJunos OS: Vulnerability in J-Web may allow deserialization without authentication
9.8
First published (updated )
Juniper JUNOSJunos OS: SRX Series: Traffic classification vulnerability when 'no-syn-check' is enabled
9.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Juniper JUNOSJunos OS: SRX Series: If no-syn-check is enabled, traffic classified as UNKNOWN gets permitted by pre-id-default-policy
9.8
First published (updated )
Juniper JUNOSJunos OS: SRX Series: Under a specific device configuration an attacker can access the devices J-Web management services from any interface, regardless of security settings protecting the service
10
First published (updated )
Juniper JUNOSJunos OS: J-Web allows a locally authenticated attacker to escalate their privileges to root.
First published (updated )
Juniper JUNOSJunos OS and Junos OS Evolved: Privilege escalation vulnerability in Juniper Extension Toolkit (JET)
First published (updated )
Juniper JUNOSJunos OS: PTX1000 System, PTX10002-60C System: After upgrading, configured firewall filters may be applied on incorrect interfaces
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Juniper JUNOSJunos OS: J-Web has an Improper Neutralization of CRLF Sequences in its HTTP Headers which allows an attacker to carry out multiple types of attacks.
9.3
First published (updated )
Juniper JUNOScSRX: Use of Hard-coded Cryptographic Keys allows an attacker to take control of the device through device management services.
9.8
First published (updated )
Juniper JUNOSJunos OS: Remote code execution vulnerability in overlayd service
9.8
First published (updated )
Juniper JUNOSJunos OS: SRX Series: A remote attacker may be able to cause a PFE buffer overflow to arbitrarily remotely execute code or commands on the target device with UTM enabled.
10
First published (updated )
Juniper JUNOSJunos OS: J-Web: Cross-site scripting attack allows an attacker to gain control of another users session.
9.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Juniper JUNOSNFX Series: Hard-coded credentials allow an attacker to take control of any instance through administrative interfaces.
10
First published (updated )
Juniper JUNOSJunos OS and Junos OS Evolved: Upon receipt of a specific BGP FlowSpec message network traffic may be disrupted.
10
First published (updated )
Juniper JUNOSJunos OS: MX Series: Receipt of specific packets can cause services card to restart when DNS filtering is configured.
9.9
First published (updated )
Juniper JUNOSJunos OS: SRX Series: processing a malformed HTTP message when ICAP redirect service is enabled may can lead to flowd process crash or remote code execution
9.8
First published (updated )
Juniper JUNOSJunos OS: SRX Series: Double free vulnerability can lead to DoS or remote code execution due to the processing of a specific HTTP message when ICAP redirect service is enabled
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Juniper JUNOSJuniper Junos OS Path Traversal Vulnerability
First published (updated )
Juniper JUNOSJunos OS: vMX: Default credentials supplied in vMX configuration
10
First published (updated )
Juniper JUNOSNFX250 Series: Hardcoded credentials in the vSRX VNF instance.
10
First published (updated )
Juniper JUNOSJunos OS: Firewall filter terms named "internal-1" and "internal-2" being ignored
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Juniper JUNOSQFX5000 Series, EX4300, EX4600: A stack buffer overflow vulnerability in Packet Forwarding Engine manager (FXPC) process
9.8
First published (updated )
Juniper JUNOSJunos OS: Specially crafted packets sent to port 111 on any interface triggers responses from the management interface
9.1
First published (updated )
Juniper JUNOSJunos OS: EX2300 and EX3400 series: Certain stateless firewall filter rules might not take effect
9.8
First published (updated )
Juniper JUNOSJunos OS: vMX series: Predictable IP ID sequence numbers vulnerability
10
First published (updated )
Juniper JUNOSJunos OS: EX, QFX and MX series: Packet Forwarding Engine manager (FXPC) process crashes due to a crafted HTTP packet in a Virtual Chassis configuration
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Juniper JUNOSJunos OS: authd allows assignment of IP address requested by DHCP subscriber logging in with Option 50 (Requested IP Address)
9.6
First published (updated )
Juniper JUNOSNFX Series: Insecure sshd configuration in Juniper Device Manager (JDM) and host OS
9.8
First published (updated )
Juniper JUNOSJunos OS: Unauthenticated remote root access possible when RSH service is enabled
9.3
First published (updated )
Juniper JUNOSJunos OS: RPD daemon crashes due to receipt of crafted BGP NOTIFICATION messages
9.8
First published (updated )
Juniper JUNOSJunos OS: QFX5200 and QFX10002: Unintended ONIE partition was shipped with certain Junos OS .bin and .iso images
10
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Juniper JUNOSJunos OS: Kernel crash upon receipt of crafted CLNP datagrams
9.8
First published (updated )
Juniper JUNOSBuffer Overflow, Command Injection, Code Injection
10
First published (updated )
Juniper JUNOSJunos: Unauthenticated Remote Code Execution through J-Web interface
9.8
First published (updated )
Juniper JUNOSA specific device configuration can result in a commit failure condition. When this occurs, a user i…
10
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Juniper JUNOSSRX Series: Hardcoded credentials in Integrated UserFW feature.
10
First published (updated )
Juniper JUNOSJunos: snmpd denial of service upon receipt of crafted SNMP packet
9.8
First published (updated )
Juniper JUNOSSRX Series: Command injection vulnerability in SRX IDP feature.
9.9
First published (updated )
Juniper JUNOSThe BFD daemon in Juniper Junos OS 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 b…
9.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Juniper JUNOSJuniper Junos 11.4 before 11.4R12, 12.1 before 12.1R11, 12.1X44 before 12.1X44-D35, 12.1X45 before 1…
First published (updated )