Filters
Juniper JUNOSJunos OS: Stored Cross-Site Scripting (XSS) vulnerability in captive portal
8
First published (updated )
Juniper JUNOSJunos OS: Denial of Service vulnerability in J-Web and web based (HTTP/HTTPS) services caused by a high number of specific requests
7.5
First published (updated )
Juniper JUNOSJunos OS: SRX Series: A remote attacker may be able to cause a PFE buffer overflow to arbitrarily remotely execute code or commands on the target device with UTM enabled.
10
First published (updated )
Juniper JUNOSJunos OS: A race condition in the storm control profile may allow an attacker to cause a Denial of Service condition
7.4
First published (updated )
Juniper JUNOSJunos OS: J-Web: Cross-site scripting attack allows an attacker to gain control of another users session.
9.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Juniper JUNOSJunos OS: EX Series, QFX Series, SRX Branch Series, MX Series: Memory leak in packet forwarding engine due to 802.1X authenticator port interface flaps
6.5
First published (updated )
Juniper JUNOSJunos OS and Junos OS Evolved: Upon receipt of a specific BGP FlowSpec message network traffic may be disrupted.
10
First published (updated )
Juniper JUNOSJunos OS and Junos OS Evolved: In bidirectional LSP configurations, on MPLS egress router RPD may core upon receipt of specific malformed RSVP packet.
8.8
First published (updated )
Juniper JUNOSJunos OS: SRX and NFX Series: Insufficient Web API private key protection
6.5
First published (updated )
Juniper JUNOSJunos OS: SRX1500, vSRX, SRX4K, NFX150, NFX250: Denial of service vulnerability executing local CLI command
5.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Juniper JUNOSJunos OS: When a DHCPv6 Relay-Agent is configured upon receipt of a specific DHCPv6 client message, Remote Code Execution may occur.
8.8
First published (updated )
Juniper JUNOSJunos OS: SRX Series: High CPU load due to processing for HTTP traffic when Application Identification is enabled.
7.5
First published (updated )
Juniper JUNOSJunos OS: jdhcpd process crash when forwarding a malformed DHCP packet.
5.3
First published (updated )
Juniper JUNOSJunos OS: EX Series: RPD crash when executing specific "show ospf interface" commands from the CLI with OSPF authentication configured
5.5
First published (updated )
Juniper JUNOSJunos OS: A race condition on receipt of crafted LLDP packets leads to a memory leak and an LLDP crash.
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Juniper JUNOSJuniper Junos OS Path Traversal Vulnerability
First published (updated )
Juniper JUNOSJunos OS: A crafted Ethernet OAM packet received by Junos may cause the Ethernet OAM connectivity fault management process (CFM) to core.
7.5
First published (updated )
Juniper JUNOSJunos OS: Privilege escalation vulnerability in dual REs, VC or HA cluster may allow unauthorized configuration change.
5.5
First published (updated )
Juniper JUNOSJunos OS: EX4300: Traffic from the network internal to the device (128.0.0.0) may be forwarded to egress interfaces
5.3
First published (updated )
Juniper JUNOSJunos OS: BGP session termination upon receipt of specific BGP FlowSpec advertisement.
8.6
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Juniper JUNOSJunos OS: SRX Series: Unified Access Control (UAC) bypass vulnerability
7.2
First published (updated )
Juniper JUNOSJunos OS: Cross-Site Scripting (XSS) in J-Web
7.5
First published (updated )
Juniper JUNOSJunos OS: A specific SNMP command can trigger a high CPU usage Denial of Service in the RPD daemon.
6.8
First published (updated )
Juniper JUNOSJunos OS: Upon receipt of certain types of malformed PCEP packets the pccd process may crash.
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Juniper JUNOSJunos OS: Path traversal vulnerability in J-Web
8.1
First published (updated )
Juniper JUNOSJunos OS: SRX Series: Denial of Service vulnerability in srxpfe related to PIM
7.5
First published (updated )
Juniper JUNOSJunos OS: PKI key pairs are exported with insecure file permissions
7.1
First published (updated )
Juniper JUNOSJunos OS: vSRX, SRX1500, SRX4K, ACX5K, EX4600, QFX5100, QFX5110, QFX5200, QFX10K and NFX Series: console management port device authentication credentials are logged in clear text
5.9
First published (updated )
Juniper JUNOSJunos OS: SRX Series: Denial of Service vulnerability in flowd due to multicast packets
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Juniper JUNOSJunos OS: SRX Series: An attacker may be able to perform Man-in-the-Middle (MitM) attacks during app-id signature updates.
7.4
First published (updated )
Juniper JUNOSJunos OS: Insecure management daemon (MGD) configuration may allow local privilege escalation
7.8
First published (updated )
Juniper JUNOSJunos OS: SRX Series: flowd process crash due to processing of specific transit IP packets
7.5
First published (updated )
Juniper JUNOSJunos OS: Persistent XSS vulnerability in J-Web
8.8
First published (updated )
Juniper JUNOSSRX5000 Series: Denial of Service vulnerability in SSL-Proxy feature.
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Juniper JUNOSJunos OS: Session fixation vulnerability in J-Web
8.8
First published (updated )
Juniper JUNOSJunos OS: A malformed IPv4 packet received by Junos in an NG-mVPN scenario may cause the routing protocol daemon (rpd) process to core
7.5
First published (updated )
Juniper JUNOSJunos OS: SRX Series: An attacker may cause flowd to crash by sending certain valid SIP traffic to a device with SIP ALG enabled.
7.5
First published (updated )
Juniper JUNOSJunos OS: Insufficient validation of environment variables in telnet client may lead to stack-based buffer overflow
7.8
First published (updated )
Juniper JUNOSSRX Series: srxpfe process crash while JSF/UTM module parses specific HTTP packets
7.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Juniper JUNOSSRX Series: Crafted packets destined to fxp0 management interface on SRX340/SRX345 devices can lead to DoS
6.5
First published (updated )
Juniper JUNOSJunos OS: RPD process crashes upon receipt of a specific SNMP packet
7.5
First published (updated )
Juniper JUNOSJunos OS: Firewall filter terms named "internal-1" and "internal-2" being ignored
9.8
First published (updated )
Juniper JUNOSJunos OS: SRX5000 series: Kernel crash (vmcore) upon receipt of a specific packet on fxp0 interface
7.5
First published (updated )
Juniper JUNOSJunos OS: 'set system ports console insecure' allows root password recovery on OAM volumes
7.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Juniper JUNOSJunos OS: SRX Series: Crafted HTTP traffic may cause UTM to consume all mbufs, leading to Denial of Service
7.5
First published (updated )
Juniper JUNOSJunos OS: rpd crash on VPLS PE upon receipt of specific BGP message
7.5
First published (updated )
Juniper JUNOSJunos OS: RPD crash upon receipt of malformed PIM packet
7.5
First published (updated )
Juniper JUNOSJunos OS: SRX Series: Deleted dynamic VPN users are allowed to establish VPN connections until reboot
5.5
First published (updated )
Juniper JUNOSJunos OS: A flowspec BGP update with a specific term-order causes routing protocol daemon (rpd) process to crash with a core.
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.