Design/Logic Flaw

Unspecified vulnerability in Juniper Junos before 11.4R10-S1, before 11.4R11, 12.1X44 before 12.1X44-D26, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, and 12.1X46 before 12.1X46-D10, when Dynamic IPsec VPN is configured, allows remote attackers to cause a denial of service new Dynamic...

Input validation

Juniper Junos 13.2 before 13.2R3 and 13.3 before 13.3R1, when PIM is enabled, allows remote attackers to cause a denial of service kernel panic and crash via a large number of crafted IGMP packets...

Cross site scripting

Cross-site scripting XSS vulnerability in J-Web in Juniper Junos before 11.4R11, 11.4X27 before 11.4X27.62 BBE, 12.1 before 12.1R9, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, 12.2 before 12.2R7, 12.3 before 12.3R6, 13.1 before 13.1R4, 13.2 before 13.2R3, a...

Cross site scripting

Cross-site scripting XSS vulnerability in J-Web in Juniper Junos before 10.0S25, 10.4 before 10.4R10, 11.4 before 11.4R11, 12.1 before 12.1R9, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, 12.1X46 before 12.1X46-D10, and 12.2 before 12.2R1 allows remote attackers to inject arbitrary web...

CVE-2014-2711

CVE-2014-2711 is a documented persistent XSS vulnerability in Juniper Junos J-Web. The J-Web interface on Junos platforms (across multiple branches and releases listed in the CVE) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, with impact limited to partia...

CVE-2014-2713

Affected product: Juniper Junos OS on MX Series and T4000 routers. Vulnerable component: Packet Forwarding Engine (PFE) modules, specifically Trio-based and Cassis-based PFEs. Root cause/issue: remote attacker can send a crafted IP packet to trigger a PFE restart, causing a denial of service (pot...

CVE-2014-0614

CVE-2014-0614 affects Juniper Networks Junos OS. When PIM is enabled, sending a large number of crafted IGMP packets can cause a kernel panic and denial of service. Affected versions are Junos 13.2 before 13.2R3 and 13.3 before 13.3R1. The vulnerability is mitigated by applying the vendor fix in ...

CVE-2014-0614

Juniper Junos 13.2 before 13.2R3 and 13.3 before 13.3R1, when PIM is enabled, allows remote attackers to cause a denial of service kernel panic and crash via a large number of crafted IGMP packets...

CVE-2014-0612

CVE-2014-0612 affects Juniper Junos OS when Dynamic IPsec VPN is enabled. A DoS condition allows remote attackers to cause new Dynamic VPN connections to fail and to induce high CPU/disk usage. Affected Junos versions include 11.4R10-S1, 11.4R11, 12.1X44 pre-D26 and pre-D30, 12.1X45 pre-D20, and ...

CVE-2014-2713

Juniper Junos before 11.4R11, 12.1 before 12.1R9, 12.2 before 12.2R7, 12.3R4 before 12.3R4-S3, 13.1 before 13.1R4, 13.2 before 13.2R2, and 13.3 before 13.3R1, as used in MX Series and T4000 routers, allows remote attackers to cause a denial of service PFE restart via a crafted IP packet to certai...

CVE-2014-2714

The Enhanced Web Filtering EWF in Juniper Junos before 10.4R15, 11.4 before 11.4R9, 12.1 before 12.1R7, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D10, and 12.1X46 before 12.1X46-D10, as used in the SRX Series services gateways, allows remote attackers to cause a denial of service flow...

CVE-2014-2711

Cross-site scripting XSS vulnerability in J-Web in Juniper Junos before 11.4R11, 11.4X27 before 11.4X27.62 BBE, 12.1 before 12.1R9, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, 12.2 before 12.2R7, 12.3 before 12.3R6, 13.1 before 13.1R4, 13.2 before 13.2R3, a...

CVE-2014-0612

Unspecified vulnerability in Juniper Junos before 11.4R10-S1, before 11.4R11, 12.1X44 before 12.1X44-D26, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, and 12.1X46 before 12.1X46-D10, when Dynamic IPsec VPN is configured, allows remote attackers to cause a denial of service new Dynamic...

CVE-2014-2712

Cross-site scripting XSS vulnerability in J-Web in Juniper Junos before 10.0S25, 10.4 before 10.4R10, 11.4 before 11.4R11, 12.1 before 12.1R9, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, 12.1X46 before 12.1X46-D10, and 12.2 before 12.2R1 allows remote attackers to inject arbitrary web...

CVE-2014-2714

The CVE-2014-2714 issue affects Juniper Networks Junos OS when Enhanced Web Filtering (EWF) is enabled on SRX Series services gateways. The vulnerability stems from the EWF component processing crafted URLs, leading to a denial of service by crashing the flow daemon (flowd) and triggering a resta...

CVE-2014-2712

The CVE-2014-2712 entry describes a cross-site scripting (XSS) in Juniper Junos J-Web that affects multiple Junos releases (e.g., before 10.0S25, 10.4 before 10.4R10, 11.4 before 11.4R11, 12.1 before 12.1R9, 12.2 before 12.2R1 and related 12.1X4x/12.1X46 lines) where J-Web’s index.php accepts uns...

PT-2014-4879

Name of the Vulnerable Software and Affected Versions Junos versions prior to 10.4R15 Junos versions 11.4 prior to 11.4R9 Junos versions 12.1 prior to 12.1R7 Junos versions 12.1X44 prior to 12.1X44-D20 Junos versions 12.1X45 prior to 12.1X45-D10 Junos versions 12.1X46 prior to 12.1X46-D10...

Juniper Junos SRX Series Dynamic IPsec VPN DoS (JSA10620)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability related to the Dynamic IPsec VPN service. A remote, unauthenticated attacker can exploit this vulnerability to cause new Dynamic VPN connections to fail for other users ...

Juniper Junos Kernel IGMP Flood DoS (JSA10618)

According to its self-reported version number, the remote Juniper Junos device is affected by denial of service vulnerability in the Junos kernel. A remote attacker can exploit this issue by sending specially crafted IGMP packets at a very high rate approximately 1000 packets per second. Note tha...

PT-2014-3710

Name of the Vulnerable Software and Affected Versions Juniper Junos versions 13.2 before 13.2R3 Juniper Junos versions 13.3 before 13.3R1 Description The issue allows remote attackers to cause a denial of service, resulting in a kernel panic and crash, by sending a large number of crafted IGMP...