CVE-2017-2341

CVE-2017-2341 covers an insufficient authentication vulnerability in Junos OS when run in a virtualized environment, enabling a guest to escalate to the host. Affected Junos OS releases include 14.1X53 pre-D40 (QFX5110, QFX5200, QFX10002/10008/10016, EX4600, NFX250), 15.1 pre-R5 (EX4600), 15.1X49...

PT-2017-15369

Name of the Vulnerable Software and Affected Versions Junos OS versions 14.1X53 prior to 14.1X53-D40 Junos OS versions 15.1 prior to 15.1R5 Junos OS versions 15.1X49 prior to 15.1X49-D70 Junos OS versions 16.1 prior to 16.1R2 Description An insufficient authentication issue may allow unprivileged...

PayPal Marketing User Enumeration

Document Title: =============== PayPal Inc BB 149 - Gift Insufficient Authentication Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1973 ID EIBBP-34368 Release Date: ============= 2017-06-21 Vulnerability Laboratory ID VL-ID:...

PayPal Inc BB #149 - (Gift) Insufficient Authentication

Document Title: =============== PayPal Inc BB 149 - Gift Insufficient Authentication References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1973 ID EIBBP-34368 Release Date: ============= 2017-06-21 Vulnerability Laboratory ID VL-ID:...

PayPal Inc BB #149 - (Gift) Insufficient Authentication

Document Title: =============== PayPal Inc BB 149 - Gift Insufficient Authentication References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1973 ID EIBBP-34368 Release Date: ============= 2017-06-20 Vulnerability Laboratory ID VL-ID:...

Juniper Networks NorthStar Controller Insufficient Authentication Vulnerability

Juniper Networks NorthStar Controller is a powerful and flexible traffic engineering solution that enables granular visualization and control of IP/MPLS flows in carrier networks. A lack of authentication vulnerability exists in Juniper Networks NorthStar Controller, which can be exploited by...

CVE-2017-2329

An insufficient authentication vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, user to execute certain specific unprivileged system files capable of causing widespread denials of system services...

CVE-2017-2332

An insufficient authentication vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious, network based, unauthenticated attacker to perform privileged actions to gain complete control over the environment...

CVE-2017-2332

CVE-2017-2332 involves an insufficient authentication vulnerability in Juniper Networks NorthStar Controller Application, prior to version 2.1.0 Service Pack 1. An unauthenticated, network-based attacker could perform privileged actions to gain complete control of the environment. Affected produc...

PT-2017-15361

Name of the Vulnerable Software and Affected Versions Juniper Networks NorthStar Controller Application versions prior to 2.1.0 Service Pack 1 Description The issue is related to insufficient authentication, which may allow a malicious, network-based, unauthenticated attacker to perform privilege...

PT-2017-15358

Name of the Vulnerable Software and Affected Versions Juniper Networks NorthStar Controller Application versions prior to 2.1.0 Service Pack 1 Description The issue is related to insufficient authentication, which may allow an unprivileged, authenticated user to execute certain system files. This...

CVE-2016-4926

Insufficient authentication vulnerability in Junos Space before 15.2R2 allows remote network based users with access to Junos Space web interface to perform certain administrative tasks without authentication...

Authentication flaw

Insufficient authentication vulnerability in Junos Space before 15.2R2 allows remote network based users with access to Junos Space web interface to perform certain administrative tasks without authentication...

CVE-2016-4926

CVE-2016-4926 affects Juniper Networks’ Junos Space prior to version 15.2R2 . It is an authentication bypass in the web interface, enabling remote network‑based attackers with access to Junos Space to perform administrative actions without authentication. Public details in the provided documents ...

PT-2017-8610

Name of the Vulnerable Software and Affected Versions Junos Space versions prior to 15.2R2 Description The issue is related to insufficient authentication, allowing remote network-based users with access to the Junos Space web interface to perform certain administrative tasks without proper...

PT-2016-3443

Name of the Vulnerable Software and Affected Versions NETGEAR R6250 versions 1.0.4.6.Beta and earlier NETGEAR R6400 versions 1.0.1.18.Beta and earlier NETGEAR R6700 versions 1.0.1.14.Beta and earlier NETGEAR R6900 affected versions not specified NETGEAR R7000 versions 1.0.7.6.Beta and earlier...

Juniper Networks Junos Space Multiple Vulnerabilities (JSA10760)

Juniper Networks Junos Space is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Merit Lilin IP Cameras - Multiple Vulnerabilities

Exploit for cgi platform in category web applications Adivisory Information ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + Title: Merit Lilin IP Cameras Multiple Vulnerabilities + Vendor: Merit Lilin Enterprise Co., Ltd. + Research and Advisory: Orwelllabs + Adivisory URL:...

Merit Lilin IP Cameras - Multiple Vulnerabilities

Merit Lilin IP Cameras - Multiple Vulnerabilities / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ 0 | R | W | 3 | L | L | L | 4 | 8 | 5 / / / / / / / / / / www.orwelllabs.com securityadivisory @orwelllabs ;r By sitting in the alcove, and keeping well back, Winston was able to remain outside the...

Voo Branded Netgear CG3700b Firmware CSRF / Authentication

CVEs pending, screenshots and further examples available soon on my site. Cross-Site Request Forgery CSRF on all form POSTs --------------------------------------------------------------------------------- The Voo branded Netgear CG3700b custom firmware newest version, V2.02.03 allows a...