Filters

Juniper JUNOSJunos OS: MX Series: The bbe-smgd process crashes if an unsupported configuration exists and a PPPoE client sends a specific message

First published (updated )

Juniper JUNOSJunos Fusion: A Satellite Device can be controlled by rewiring it to a foreign AD causing a DoS

First published (updated )

Juniper JUNOSJunos OS: EX2300, EX3400 and EX4300 Series: An Aggregated Ethernet (AE) interface will go down due to a stream of specific layer 2 frames

First published (updated )

Juniper JUNOSJunos OS: MX Series, EX9200 Series, SRX4600: Ethernet interface vulnerable to specially crafted frames

First published (updated )

Juniper JUNOSJunos OS: Upon receipt of specific sequences of genuine packets destined to the device the kernel will crash and restart (vmcore)

7.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Juniper JUNOSJunos OS and Junos OS Evolved: Trio Chipset: Denial of Service due to packet destined to device's interfaces.

First published (updated )

Juniper JUNOSJunos OS: QFX10002-32Q, QFX10002-60C, QFX10002-72Q, QFX10008, QFX10016: In EVPN-VXLAN scenarios receipt of specific genuine packets by an adjacent attacker will cause a kernel memory leak in FPC.

First published (updated )

Juniper JUNOSJunos OS: Denial of Service vulnerability in J-Web and web based (HTTP/HTTPS) services caused by a high number of specific requests

7.5
First published (updated )

Juniper JUNOSJunos OS: Junos Fusion: Hard-coded credentials on satellite devices allows a locally authenticated attacker to elevate their privileges.

7.8
First published (updated )

Juniper JUNOSJunos OS: A race condition in the storm control profile may allow an attacker to cause a Denial of Service condition

7.4
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Juniper JUNOSJunos OS: Receipt of specific packets could lead to Denial of Service in MQTT Server

First published (updated )

Juniper JUNOSJunos OS: PTX Series, QFX Series: Due to a race condition input loopback firewall filters applied to interfaces may not operate even when listed in the running configuration.

First published (updated )

Juniper JUNOSJunos OS: J-Web: Cross-site scripting attack allows an attacker to gain control of another users session.

First published (updated )

Juniper JUNOSJunos OS: Upon receipt of certain protocol packets with invalid payloads a self-propagating Denial of Service may occur.

7.4
First published (updated )

Juniper JUNOSJunos OS: EX Series, QFX Series, SRX Branch Series, MX Series: Memory leak in packet forwarding engine due to 802.1X authenticator port interface flaps

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Juniper JUNOSJunos OS: EX and QFX5K Series: Storm Control does not work as expected when Redundant Trunk Group is configured

8.6
First published (updated )

Juniper JUNOSJunos OS: SRX and NFX Series: Insufficient Web API private key protection

First published (updated )

Juniper JUNOSJunos OS: MX Series: MS-MPC/MIC might crash when processing malformed IPv6 packet in NAT64 configuration.

First published (updated )

Juniper JUNOSJunos OS: When a DHCPv6 Relay-Agent is configured upon receipt of a specific DHCPv6 client message, Remote Code Execution may occur.

8.8
First published (updated )

Juniper JUNOSJunos OS: jdhcpd process crash when forwarding a malformed DHCP packet.

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Juniper JUNOSJunos OS: EX Series: RPD crash when executing specific "show ospf interface" commands from the CLI with OSPF authentication configured

First published (updated )

Juniper JUNOSJunos OS: A race condition on receipt of crafted LLDP packets leads to a memory leak and an LLDP crash.

First published (updated )

Juniper JUNOSJuniper Junos OS Path Traversal Vulnerability

First published (updated )

Juniper JUNOSJunos OS: Privilege escalation vulnerability in dual REs, VC or HA cluster may allow unauthorized configuration change.

First published (updated )

Juniper JUNOSJunos OS: EX4300: Traffic from the network internal to the device (128.0.0.0) may be forwarded to egress interfaces

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Juniper JUNOSJunos OS: A race condition vulnerability may cause RPD daemon to crash when processing a BGP NOTIFICATION message.

First published (updated )

Juniper JUNOSJunos OS: Kernel memory leak in virtual-memory due to interface flaps

First published (updated )

Juniper JUNOSJunos OS: QFX10K Series, EX9200 Series, MX Series, PTX Series: Privilege escalation vulnerability in NG-RE.

First published (updated )

Juniper JUNOSJunos OS: EX and QFX Series: Console port authentication bypass vulnerability

First published (updated )

Juniper JUNOSJunos OS and Junos OS Evolved: Invalid BGP UPDATE sent to peer device may cause BGP session to terminate.

8.6
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Juniper JUNOSJunos OS: BGP session termination upon receipt of specific BGP FlowSpec advertisement.

8.6
First published (updated )

Juniper JUNOSBuffer Overflow

First published (updated )

Juniper JUNOSJunos OS: Cross-Site Scripting (XSS) in J-Web

7.5
First published (updated )

Juniper JUNOSJunos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv6 packets and arbitrarily execute commands on the target device.

8.8
First published (updated )

Juniper JUNOSJunos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv4 packets and arbitrarily execute commands on the target device.

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Juniper JUNOSJunos OS: EX4300/EX4600/QFX3500/QFX5100 Series: Stateless IP firewall filter may fail to evaluate certain packets

First published (updated )

Juniper JUNOSJunos OS: Improper handling of specific IPv6 packets sent by clients eventually kernel crash (vmcore) the device.

8.6
First published (updated )

Juniper JUNOSJunos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv4 packets may take over the code execution of the JDHCPD process.

8.8
First published (updated )

Juniper JUNOSJunos OS: A specific SNMP command can trigger a high CPU usage Denial of Service in the RPD daemon.

First published (updated )

Juniper JUNOSJunos OS: Upon receipt of certain types of malformed PCEP packets the pccd process may crash.

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Juniper JUNOSJunos OS: Path traversal vulnerability in J-Web

8.1
First published (updated )

Juniper JUNOSJunos OS: vSRX, SRX1500, SRX4K, ACX5K, EX4600, QFX5100, QFX5110, QFX5200, QFX10K and NFX Series: console management port device authentication credentials are logged in clear text

First published (updated )

Juniper JUNOSJunos OS: MX Series: jdhcpd crash when receiving a specific crafted DHCP response message

7.5
First published (updated )

Juniper JUNOSJunos OS: Insecure management daemon (MGD) configuration may allow local privilege escalation

7.8
First published (updated )

Juniper JUNOSJunos OS: Kernel crash (vmcore) upon receipt of a specific link-local IPv6 packet on devices configured with Multi-Chassis Link Aggregation Group (MC-LAG)

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Juniper JUNOSJunos OS: Persistent XSS vulnerability in J-Web

8.8
First published (updated )

Juniper JUNOSJunos OS: MX Series: Denial of Service vulnerability in MS-PIC component on MS-MIC or MS-MPC

7.5
First published (updated )

Juniper JUNOSJunos OS: Session fixation vulnerability in J-Web

8.8
First published (updated )

Juniper JUNOSJunos OS: A malformed IPv4 packet received by Junos in an NG-mVPN scenario may cause the routing protocol daemon (rpd) process to core

7.5
First published (updated )

Juniper JUNOSJunos OS: RPD process crashes when BGP peer restarts

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203