8063 matches found
CVE-2014-3821
The CVE-2014-3821 entry describes a Cross-site scripting (XSS) vulnerability in Juniper Junos SRX Web Authentication (webauth) across multiple releases (11.4 before 11.4R11; 12.1X44 before 12.1X44-D34; 12.1X45 before 12.1X45-D25; 12.1X46 before 12.1X46-D20; 12.1X47 before 12.1X47-D10). The issue ...
CVE-2014-3819
Juniper Junos 11.4 before 11.4R12, 12.1 before 12.1R10, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, 12.1X47 before 12.1X47-D10, 12.2 before 12.2R8, 12.3 before 12.3R7, 13.1 before 13.1R4, 13.2 before 13.2R4, 13.3 before 13.3R2, and 14.1 before 14.1R1, when...
Juniper Networks JUNOS <= 7.1.1 Malformed TCP Packet Denial of Service and Unspecified Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/37670/info JUNOS is prone to a remote denial-of-service vulnerability that arises when the application handles specially crafted TCP packets. JUNOS is also prone to six other unspecified security vulnerabilities. These...
Juniper Junos J-Web - Privilege Escalation Vulnerability
No description provided by source...
Juniper Junos 8.5/9.0 J-Web Interface Multiple Script m[] Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/36537/info Juniper Networks JUNOS is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data to J-Web Juniper Web Management. Attacker-supplie...
Junos Pulse Secure Access IVE / UAC OS Weak Cipher Information Disclosure (JSA10628)
According to its self-reported version, the version of IVE / UAC OS running on the remote host is affected by an information disclosure vulnerability due to an issue where cipher suites with weak encryption algorithms are used even when cipher suites with strong encryption algorithms are enabled....
Juniper Networks Junos OS Exclusive Edit Mode Privilege Escalation Vulnerability
Privilege Escalation in exclusive edit mode SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if description...
Junos Pulse Secure Access IVE / UAC OS Multiple OpenSSL Vulnerabilities (JSA10629)
According to its self-reported version, the version of IVE / UAC OS running on the remote host is affected by multiple vulnerabilities : - An error exists in the function 'ssl3readbytes' that could allow data to be injected into other sessions or allow denial of service attacks. Note this issue i...
Juniper Networks Junos OS J-Web Sajax Remote Code Execution Vulnerability
Remote Code Execution on J-Web SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if description...
Juniper Networks Junos OS RDP Crash Vulnerability
RDP crash when receiving BGP UPDATE with malformed inetflow prefix. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos...
CVE-2014-3812
The Juniper Junos Pulse Secure Access Service SSL VPN devices with IVE OS before 7.4r5 and 8.x before 8.0r1 and Junos Pulse Access Control Service UAC before 4.4r5 and 5.x before 5.0r1 enable cipher suites with weak encryption algorithms, which make it easier for remote attackers to obtain...
CVE-2014-3812
The CVE-2014-3812 issue affects Juniper Junos Pulse Secure Access Service (SSL VPN) IVE OS (<7.4r5) and 8.x (<8.0r1) and Junos Pulse Access Control Service (UAC) (<4.4r5) / 5.x (
CVE-2014-3812
The Juniper Junos Pulse Secure Access Service SSL VPN devices with IVE OS before 7.4r5 and 8.x before 8.0r1 and Junos Pulse Access Control Service UAC before 4.4r5 and 5.x before 5.0r1 enable cipher suites with weak encryption algorithms, which make it easier for remote attackers to obtain...
CVE-2014-3412
Unspecified vulnerability in Juniper Junos Space before 13.3R1.8, when the firewall in disabled, allows remote attackers to execute arbitrary commands via unspecified vectors...
Design/Logic Flaw
Unspecified vulnerability in Juniper Junos Space before 13.3R1.8, when the firewall in disabled, allows remote attackers to execute arbitrary commands via unspecified vectors...
CVE-2014-3412
Unspecified vulnerability in Juniper Junos Space before 13.3R1.8, when the firewall in disabled, allows remote attackers to execute arbitrary commands via unspecified vectors...
CVE-2014-3412
Juniper Junos Space up to version 13.3R1.8 is affected when the firewall is disabled. A remote attacker could execute arbitrary commands, potentially with root privileges, on affected installations. The Nessus entry confirms the condition (firewall disabled) and the affected range (before 13.3R1....
Description of the security update for Juniper Networks Windows In-Box Junos Pulse client for systems that do not have update 2919355 installed: May 5, 2014
None None...
MS KB2962393: Update for Vulnerability in Juniper Networks Windows In-Box Junos Pulse Client (Heartbleed)
The remote host is missing KB2962393, which resolves an OpenSSL information disclosure vulnerability Heartbleed in the Juniper VPN client software shipped with Windows 8.1. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid73865; scriptversion"1.17";...