Filters
Juniper JUNOSJunos OS: SRX Series: If DNS traceoptions are configured in a DGA or tunnel detection scenario specific DNS traffic leads to a PFE crash
8.7
First published (updated )
Juniper JUNOSJunos OS: SRX Series and EX Series: J-Web doesn't sufficiently sanitize input to prevent XSS
8.8
EPSS
0.05%
First published (updated )
Juniper JUNOSJunos OS: SRX Series and EX Series: J-Web - unauthenticated access to temporary files containing sensitive information
7.5
EPSS
0.09%
First published (updated )
Juniper JUNOSJunos OS: SRX Series: When "tcp-encap" is configured and specific packets are received flowd will crash
7.5
EPSS
0.05%
First published (updated )
Juniper JUNOSJunos OS: SRX Series and MX Series: SIP ALG doesn't drop specifically malformed retransmitted SIP packets
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Juniper JUNOSSRX Series and MX Series: An FPC core is observed when IDP is enabled on the device and a specific malformed SSL packet is received
7.5
First published (updated )
Juniper JUNOSAn Improper Check or Handling of Exceptional Conditions vulnerability in the UTM (Unified Threat Man…
7.5
First published (updated )
Juniper JUNOSJunos OS: SRX Series: The flow processing daemon (flowd) will crash when Unified Policies are used with IPv6 and certain dynamic applications are rejected by the device
7.5
First published (updated )
Juniper JUNOSJunos OS: SRX Series and MX Series: Memory leak due to receipt of specially crafted SIP calls
7.5
First published (updated )
Juniper JUNOSJunos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if SIP ALG is enabled and a malformed SIP packet is received
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Juniper JUNOSJunos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if the SIP ALG is enabled and specific SIP messages are processed
7.5
First published (updated )
Juniper JUNOSJunos OS: SRX Series: A memory leak might be observed in IPsec VPN scenario leading to an FPC crash
7.5
First published (updated )
Juniper JUNOSJunos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash when specific H.323 packets are received
7.5
First published (updated )
Juniper JUNOSJunos OS: SRX Series: A flowd core will be observed when malformed GPRS traffic is processed
7.5
First published (updated )
Juniper JUNOSSRX Series: If UTM Enhanced Content Filtering and AntiVirus are enabled, and specific traffic is processed the PFE will crash
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Juniper JUNOSJunos OS: SRX Series: Upon processing of a genuine packet the pkid process will crash during CMPv2 auto-re-enrollment
7.5
First published (updated )
Juniper JUNOSSRX Series: If Unified Threat Management (UTM) Enhanced Content Filtering (CF) is enabled and specific traffic is processed the PFE will crash
7.5
First published (updated )
Juniper JUNOSJunos OS: SRX Series and MX Series: When specific valid SIP packets are received the PFE will crash
7.5
First published (updated )
Juniper JUNOSJunos OS: SRX series: The PFE will crash when specific traffic is scanned by Enhanced Web Filtering safe-search
7.5
First published (updated )
Juniper JUNOSJunos OS: SRX Series: An FPC memory leak can occur in an APBR scenario
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Juniper JUNOSJunos OS: SRX and EX Series: Local privilege escalation flaw in "download" functionality
7.8
First published (updated )
Juniper JUNOSJunos OS: MX MS-MPC or MS-MIC, or SRX SPC crashes if it receives a SIP message with a specific contact header format
7.5
First published (updated )
Juniper JUNOSJunos OS: SRX Series: Denial of service vulnerability in flowd daemon upon receipt of a specific fragmented packet
7.5
First published (updated )
Juniper JUNOSJunos OS: MX Series and SRX Series: The flowd daemon will crash if the SIP ALG is enabled and specific SIP messages are processed
7.5
First published (updated )
Juniper JUNOSSRX Series and MX Series with SPC3: A high percentage of fragments might lead to high latency or packet drops
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Juniper JUNOSJunos OS: MX and SRX series: Flowd core observed if the SIP ALG is enabled and a specific Session Initiation Protocol (SIP) packet is received
7.5
First published (updated )
Juniper JUNOSJunos OS: SRX Series: Persistent XSS vulnerability in J-Web
8
First published (updated )
Juniper JUNOSJunos OS: Denial of Service vulnerability in J-Web and web based (HTTP/HTTPS) services caused by a high number of specific requests
7.5
First published (updated )
Juniper JUNOSJunos OS: SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3: In a multi-tenant environment, a tenant host administrator may be able to jailbreak out of their network impacting other tenant networks or gather information from other networks.
7.3
First published (updated )
Juniper JUNOSJunos OS: A race condition in the storm control profile may allow an attacker to cause a Denial of Service condition
7.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Juniper JUNOSJunos OS: SRX Series: Memory leak when querying Aggregated Ethernet (AE) interface statistics
7.5
First published (updated )
Juniper JUNOSJunos OS: SRX Series: Denial of Service in J-Web upon receipt of crafted HTTP packets
7.5
First published (updated )
Juniper JUNOSJunos OS: SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, vSRX Series: In a multi-tenant environment, a tenant host administrator may configure logical firewall isolation affecting other tenant networks
7.3
First published (updated )
Juniper JUNOSJunos OS and Junos OS Evolved: In bidirectional LSP configurations, on MPLS egress router RPD may core upon receipt of specific malformed RSVP packet.
8.8
First published (updated )
Juniper JUNOSJunos OS: NFX Series, SRX Series: PFE may crash upon receipt of specific packet when SSL Proxy is configured.
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Juniper JUNOSJunos OS: High-End SRX Series: Multicast traffic might cause all FPCs to reset.
7.5
First published (updated )
Juniper JUNOSJunos OS: BGP session termination upon receipt of specific BGP FlowSpec advertisement.
8.6
First published (updated )
Juniper JUNOSJunos OS: Cross-Site Scripting (XSS) in J-Web
7.5
First published (updated )
Juniper JUNOSJunos OS: Upon receipt of certain types of malformed PCEP packets the pccd process may crash.
7.5
First published (updated )
Juniper JUNOSJunos OS: Path traversal vulnerability in J-Web
8.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Juniper JUNOSJunos OS: SRX Series: Denial of Service vulnerability in srxpfe related to PIM
7.5
First published (updated )
Juniper JUNOSJunos OS: SRX Series: Denial of Service vulnerability in flowd due to multicast packets
7.5
First published (updated )
Juniper JUNOSJunos OS: SRX Series: An attacker may be able to perform Man-in-the-Middle (MitM) attacks during app-id signature updates.
7.4
First published (updated )
Juniper JUNOSJunos OS: SRX Series: flowd process crash due to processing of specific transit IP packets
7.5
First published (updated )
Juniper JUNOSJunos OS: SRX1500: Denial of service due to crash of srxpfe process under heavy traffic conditions.
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Juniper JUNOSJunos OS: Session fixation vulnerability in J-Web
8.8
First published (updated )
Juniper JUNOSJunos OS: A malformed IPv4 packet received by Junos in an NG-mVPN scenario may cause the routing protocol daemon (rpd) process to core
7.5
First published (updated )
Juniper JUNOSJunos OS: SRX Series: An attacker may cause flowd to crash by sending certain valid SIP traffic to a device with SIP ALG enabled.
7.5
First published (updated )
Juniper JUNOSJunos OS: SRX Series: A weakness in the Veriexec subsystem may allow privilege escalation.
7.8
First published (updated )
Juniper JUNOSSRX Series: srxpfe process crash while JSF/UTM module parses specific HTTP packets
7.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.