Juniper Networks Junos OS Local Security Bypass Vulnerability

Junos OS is prone to a local security bypass which may lead to complete administrative access. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Juniper Networks Junos OS Bind Denial of Service Vulnerability

Denial of Service vulnerability in Junos ISC Bind version. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if...

Junos Space Network Management Platform Event Viewer Syslog Communication Log Messages Cross-Site Scripting Vulnerability

Junos Space Network Management Platform is a network management platform solution. A cross-site scripting vulnerability in the Junos Space Network Management Platform's handling of special syslog communication log messages could be exploited by remote attackers to inject malicious script or HTML...

Junos Space Network Management Platform Network Monitoring Tool Cross-Site Scripting Vulnerability

Junos Space Network Management Platform is a network management platform solution. The Junos Space Network Management Platform network monitoring tool fails to properly handle SNMP TRAP, allowing remote attackers to exploit vulnerabilities to inject malicious scripts or HTML code that can be used...

Junos Space Network Management Platform SNMP Answer Forgery Cross-Site Scripting Vulnerability

Junos Space Network Management Platform is a network management platform solution. Junos Space Network Management Platform fails to properly process inputs, allows SNMP answer spoofing, and allows remote attackers to exploit vulnerabilities to inject malicious script or HTML code that can be used...

Junos Space Network Management Platform SSL Certificate Handling Cross-Site Scripting Vulnerability

Junos Space Network Management Platform is a network management platform solution. A cross-site scripting vulnerability exists in Junos Space Network Management Platform SSL certificate processing, which can be exploited by remote attackers to inject malicious script or HTML code that can be used...

Juniper Junos Multiple OpenSSL Vulnerabilities (JSA10679) (FREAK)

According to its self-reported version number, the remote Juniper Junos device is affected by the following vulnerabilities related to OpenSSL : - A NULL pointer dereference flaw exists when the SSLv3 option isn't enabled and an SSLv3 ClientHello is received. This allows a remote attacker, using ...

Juniper Junos SRX Series Dynamic VPN XSS (JSA10677)

According to its self-reported version number, the remote Juniper Junos SRX series device is affected by a cross-site scripting vulnerability due to a flaw in Dynamic VPN. A remote attacker can exploit this to view sensitive information or session credentials. Note that this issue only affects...

Juniper Junos SRX Series 'log-out-on-disconnect' Persistent Admin Access (JSA10672)

According to its self-reported version number, the remote Juniper Junos SRX series device is affected by an administrative access vulnerability due to a flaw in the 'log-out-on-disconnect' feature after a reboot. This can allow an attacker with physical access to the device to gain administrative...

Juniper Junos Multiple Privilege Escalation Vulnerabilities (JSA10674)

According to its self-reported version number, the remote Juniper Junos device is affected by privilege escalation vulnerabilities due to flaws in various combination of CLI commands and arguments. A local attacker can use these to gain root access to the operating system and thus completely...

Juniper Junos X-Frame-Options Clickjacking (JSA10675)

According to its self-reported version number, the remote Juniper Junos device is affected by a clickjacking vulnerability due to J-Web missing the 'X-Frame-Options' HTTP header. A remote attacker can exploit this to trick a user into executing administrative tasks. TRUSTED...

Juniper Junos QFX Low Entropy Vulnerability (JSA10678)

According to its self-reported version number, the remote Juniper Junos device is affected by a low entropy vulnerability due to an insufficient number of bytes being collected from the RANDOMINTERRUPT entropy source when the device is first booted, thus resulting in the generation of weak SSH ke...

Unspecified Vulnerability in Juniper Networks Junos on SRX Series

Juniper Networks Junos on SRX Series devices is a Juniper Networks network operating system that runs on SRX Series Services Gateway devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos in the SRX Series...

Juniper Junos Dynamic VPN Cross-Site Scripting Vulnerability

Juniper Networks JUNOS is an operating system that runs on Juniper Networks' line of border routers and more. A security vulnerability in Juniper Networks JUNOS Dynamic VPN on SRX devices allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be us...

Juniper Junos Local Elevation of Privilege Vulnerability

Juniper Networks JUNOS is an operating system that runs on Juniper Networks' line of border routers and more. A local elevation of privilege vulnerability exists in Juniper Junos that allows local users to elevate privileges via special CLI commands and parameters...

Juniper Junos J-Web Clickjacking Vulnerability

Juniper Networks JUNOS is an operating system that runs on Juniper Networks' line of border routers and more. A security vulnerability exists in Juniper Networks JUNOS that allows remote attackers to exploit the vulnerability to conduct clickjacking attacks via X-Frame-Options...

CVE-2015-3005

Cross-site scripting XSS vulnerability in the Dynamic VPN in Juniper Junos 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D20, and 12.3X48 before 12.3X48-D10 on SRX series devices allows remote attackers to inject arbitrary web script or HTML via unspecified vector...

CVE-2015-3004

J-Web in Juniper Junos 11.4 before 11.4R12, 12.1X44 before 12.1X44-D35, 12.1X46 before 12.1X46-D25, 12.1X47 before 12.1X47-D10, 12.3X48 before 12.3X48-D10, 12.2 before 12.2R9, 12.3 before 12.3R7, 13.2 before 13.2R6, 13.2X51 before 13.2X51-D20, 13.3 before 13.3R5, 14.1 before 14.1R3, 14.1X53 befor...

CVE-2015-3002

Juniper Junos 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D15, and 12.3X48 before 12.3X48-D10 on SRX series devices does not properly enforce the log-out-on-disconnect feature when configured in the system port console stanza, which allows physically proximate...

CVE-2015-3003

Juniper Junos 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D20, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D10, 13.2 before 13.2R6, 13.3 before 13.3R5, 14.1 before 14.1R3, and 14.2 before 14.2R1 allows local users to gain privileges via crafted combinations of CL...