Lucene search
+L

391 matches found

CVE
CVE
added 2021/10/19 6:17 p.m.78 views

CVE-2021-31384

CVE-2021-31384 affects Juniper Networks Junos OS on SRX Series. The vulnerability stems from a Missing Authorization weakness and insufficient granularity of access control in a specific device configuration, allowing an attacker to reach J-Web administrative interfaces from any device interface,...

10CVSS8.2AI score0.01161EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2021/10/19 6:17 p.m.68 views

CVE-2021-31372

CVE-2021-31372 affects Juniper Networks Junos OS J-Web; vulnerability is due to Improper Input Validation, allowing a locally authenticated J-Web user to escalate to root. Affected Junos OS versions range across 18.3R3-S5 and later 21.2R2, with various prior branch versions; the provided document...

9CVSS8.7AI score0.01229EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/10/19 6:17 p.m.30 views

CVE-2021-31372 Junos OS: J-Web allows a locally authenticated attacker to escalate their privileges to root.

An Improper Input Validation vulnerability in J-Web of Juniper Networks Junos OS allows a locally authenticated J-Web attacker to escalate their privileges to root over the target device. This issue affects: Juniper Networks Junos OS All versions prior to 18.3R3-S5; 18.4 versions prior to...

8.8CVSS8.9AI score0.01229EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/10/16 12:00 a.m.30 views

Juniper Networks Junos OS Access Control Error Vulnerability

Juniper Networks Junos OS is a network operating system from Juniper Networks, Inc. for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS is vulnerable to an access control error, which results from a specific...

10CVSS2.2AI score0.01161EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/10/13 4:00 p.m.5 views

CVE-2021-31372

An Improper Input Validation vulnerability in J-Web of Juniper Networks Junos OS allows a locally authenticated J-Web attacker to escalate their privileges to root over the target device. This issue affects: Juniper Networks Junos OS All versions prior to 18.3R3-S5; 18.4 versions prior to...

9CVSS7AI score0.01229EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/10/13 4:00 p.m.5 views

CVE-2021-31384

Due to a Missing Authorization weakness and Insufficient Granularity of Access Control in a specific device configuration, a vulnerability exists in Juniper Networks Junos OS on SRX Series whereby an attacker who attempts to access J-Web administrative interfaces can successfully do so from any...

10CVSS7AI score0.01161EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/10/13 4:00 p.m.6 views

CVE-2021-31373

A persistent Cross-Site Scripting XSS vulnerability in Juniper Networks Junos OS on SRX Series, J-Web interface may allow a remote authenticated user to inject persistent and malicious scripts. An attacker can exploit this vulnerability to steal sensitive data and credentials from a web...

8CVSS6.2AI score0.00807EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2021/10/13 12:00 a.m.12 views

Juniper Networks Junos OS 路径遍历漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS suffers from a path traversal vulnerability that originates from an improperly restricted pathna...

8.8CVSS8AI score0.01504EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/10/13 12:00 a.m.10 views

Juniper Networks Junos OS 输入验证错误漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS that originates from an incorrect input...

9CVSS8AI score0.01229EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/10/13 12:00 a.m.9 views

Juniper Networks Junos OS 安全漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS, which arises from a protection mechanism failu...

5.9CVSS6.1AI score0.00713EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/10/13 12:00 a.m.12 views

Juniper Networks Junos OS 跨站脚本漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS suffers from a cross-site scripting vulnerability that originates from a persistent cross-site...

8CVSS5.6AI score0.00807EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/10/13 12:00 a.m.16 views

Juniper Networks Junos OS 安全漏洞

Juniper Networks Junos OS is a network operating system from Juniper Networks, Inc. for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS is vulnerable to an access control error, which results from a specific...

10CVSS5.7AI score0.01161EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2021/10/13 12:00 a.m.44 views

Juniper Junos OS Vulnerability (JSA11254)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11254 advisory. - A Protection Mechanism Failure vulnerability in the J-Web HTTP service of Juniper Networks Junos OS allows a remote unauthenticated attacker to perform Person-in-the-Middl...

5.9CVSS6.1AI score0.00713EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/08/06 12:00 a.m.17 views

The vulnerability in the J-Web web interface of the Junos operating system, which allows a hacker to elevate their privileges to the root level.

The vulnerability in the J-Web web interface of the Junos operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to elevate their privileges to the root level...

10CVSS7.2AI score0.00924EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2021/07/15 8:15 p.m.12 views

CVE-2021-0278

An Improper Input Validation vulnerability in J-Web of Juniper Networks Junos OS allows a locally authenticated attacker to escalate their privileges to root over the target device. junos:18.3R3-S5 junos:18.4R3-S9 junos:19.1R3-S6 junos:19.3R2-S6 junos:19.3R3-S3 junos:19.4R1-S4 junos:19.4R3-S4...

7.8CVSS7.1AI score0.00924EPSS
SaveExploits0References1
NVD
NVD
added 2021/07/15 8:15 p.m.21 views

CVE-2021-0278

An Improper Input Validation vulnerability in J-Web of Juniper Networks Junos OS allows a locally authenticated attacker to escalate their privileges to root over the target device. junos:18.3R3-S5 junos:18.4R3-S9 junos:19.1R3-S6 junos:19.3R2-S6 junos:19.3R3-S3 junos:19.4R1-S4 junos:19.4R3-S4...

8.8CVSS0.00924EPSS
SaveExploits0References1
Prion
Prion
added 2021/07/15 8:15 p.m.24 views

Input validation

An Improper Input Validation vulnerability in J-Web of Juniper Networks Junos OS allows a locally authenticated attacker to escalate their privileges to root over the target device. junos:18.3R3-S5 junos:18.4R3-S9 junos:19.1R3-S6 junos:19.3R2-S6 junos:19.3R3-S3 junos:19.4R1-S4 junos:19.4R3-S4...

7.2CVSS7.6AI score0.00924EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/07/15 8:00 p.m.40 views

CVE-2021-0278 Junos OS: J-Web allows a locally authenticated attacker to escalate their privileges to root.

An Improper Input Validation vulnerability in J-Web of Juniper Networks Junos OS allows a locally authenticated attacker to escalate their privileges to root over the target device. junos:18.3R3-S5 junos:18.4R3-S9 junos:19.1R3-S6 junos:19.3R2-S6 junos:19.3R3-S3 junos:19.4R1-S4 junos:19.4R3-S4...

8.8CVSS8.9AI score0.00924EPSS
SaveExploits0References1
CVE
CVE
added 2021/07/15 8:00 p.m.73 views

CVE-2021-0278

CVE-2021-0278 is an Improper Input Validation vulnerability in J-Web of Juniper Networks Junos OS that allows a locally authenticated attacker to escalate to root. Affected Junos OS versions include 19.3R1 and later (various 19.3/19.4/20.x/21.x releases listed in sources). The connected documents...

8.8CVSS8AI score0.00924EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/07/14 4:00 p.m.5 views

CVE-2021-0278

An Improper Input Validation vulnerability in J-Web of Juniper Networks Junos OS allows a locally authenticated attacker to escalate their privileges to root over the target device. junos:18.3R3-S5 junos:18.4R3-S9 junos:19.1R3-S6 junos:19.3R2-S6 junos:19.3R3-S3 junos:19.4R1-S4 junos:19.4R3-S4...

8.8CVSS7.2AI score0.00924EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder