CVE-2014-2711: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in J-Web in Juniper Junos before 11.4R11, 11.4X27 before 11.4X27.62 BBE, 12.1 before 12.1R9, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, 12.2 before 12.2R7, 12.3 before 12.3R6, 13.1 before 13.1R4, 13.2 before 13.2R3, a...

CVE-2014-2714: Improper Input Validation

The Enhanced Web Filtering EWF in Juniper Junos before 10.4R15, 11.4 before 11.4R9, 12.1 before 12.1R7, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D10, and 12.1X46 before 12.1X46-D10, as used in the SRX Series services gateways, allows remote attackers to cause a denial of service flow...

CVE-2014-2713: Undefined Security Weakness

Juniper Junos before 11.4R11, 12.1 before 12.1R9, 12.2 before 12.2R7, 12.3R4 before 12.3R4-S3, 13.1 before 13.1R4, 13.2 before 13.2R2, and 13.3 before 13.3R1, as used in MX Series and T4000 routers, allows remote attackers to cause a denial of service PFE restart via a crafted IP packet to certai...

CVE-2014-2712: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in J-Web in Juniper Junos before 10.0S25, 10.4 before 10.4R10, 11.4 before 11.4R11, 12.1 before 12.1R9, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, 12.1X46 before 12.1X46-D10, and 12.2 before 12.2R1 allows remote attackers to inject arbitrary web...

CVE-2014-0612: Undefined Security Weakness

Unspecified vulnerability in Juniper Junos before 11.4R10-S1, before 11.4R11, 12.1X44 before 12.1X44-D26, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, and 12.1X46 before 12.1X46-D10, when Dynamic IPsec VPN is configured, allows remote attackers to cause a denial of service new Dynamic...

CVE-2014-0614: Undefined Security Weakness

Juniper Junos 13.2 before 13.2R3 and 13.3 before 13.3R1, when PIM is enabled, allows remote attackers to cause a denial of service kernel panic and crash via a large number of crafted IGMP packets...

PT-2014-3710

Name of the Vulnerable Software and Affected Versions Juniper Junos versions 13.2 before 13.2R3 Juniper Junos versions 13.3 before 13.3R1 Description The issue allows remote attackers to cause a denial of service, resulting in a kernel panic and crash, by sending a large number of crafted IGMP...

PT-2014-4879

Name of the Vulnerable Software and Affected Versions Junos versions prior to 10.4R15 Junos versions 11.4 prior to 11.4R9 Junos versions 12.1 prior to 12.1R7 Junos versions 12.1X44 prior to 12.1X44-D20 Junos versions 12.1X45 prior to 12.1X45-D10 Junos versions 12.1X46 prior to 12.1X46-D10...

PT-2014-1956

Name of the Vulnerable Software and Affected Versions Junos versions prior to 10.0S25 Junos versions 10.4 prior to 10.4R10 Junos versions 11.4 prior to 11.4R11 Junos versions 12.1 prior to 12.1R9 Junos versions 12.1X44 prior to 12.1X44-D30 Junos versions 12.1X45 prior to 12.1X45-D20 Junos version...

PT-2014-4878

Name of the Vulnerable Software and Affected Versions Juniper Junos versions before 11.4R11 Juniper Junos versions before 12.1R9 Juniper Junos versions before 12.2R7 Juniper Junos versions 12.3R4 before 12.3R4-S3 Juniper Junos versions before 13.1R4 Juniper Junos versions before 13.2R2 Juniper...

PT-2014-3708

Name of the Vulnerable Software and Affected Versions Junos versions prior to 11.4R10-S1 Junos versions prior to 11.4R11 Junos 12.1X44 versions prior to 12.1X44-D26 Junos 12.1X44 versions prior to 12.1X44-D30 Junos 12.1X45 versions prior to 12.1X45-D20 Junos 12.1X46 versions prior to 12.1X46-D10...

PT-2014-4877

Name of the Vulnerable Software and Affected Versions Junos versions prior to 11.4R11 Junos versions 11.4X27 prior to 11.4X27.62 BBE Junos versions 12.1 prior to 12.1R9 Junos versions 12.1X44 prior to 12.1X44-D35 Junos versions 12.1X45 prior to 12.1X45-D25 Junos versions 12.1X46 prior to...

Juniper Junos SRX Series flowd DoS (JSA10622)

According to its self-reported version number, the remote Junos device is affected by a denial of service vulnerability due to improper processing by the Enhanced Web Filtering EWF. An attacker can exploit this vulnerability by sending a crafted URL to crash the flow daemon flowd process. Repeate...

Juniper Junos Kernel IGMP Flood DoS (JSA10618)

According to its self-reported version number, the remote Juniper Junos device is affected by denial of service vulnerability in the Junos kernel. A remote attacker can exploit this issue by sending specially crafted IGMP packets at a very high rate approximately 1000 packets per second. Note tha...

Juniper Junos SRX Series Dynamic IPsec VPN DoS (JSA10620)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability related to the Dynamic IPsec VPN service. A remote, unauthenticated attacker can exploit this vulnerability to cause new Dynamic VPN connections to fail for other users ...

Juniper Junos J-Web Persistent XSS (JSA10619)

According to its self-reported version number, the remote Junos device is affected by a stored cross-site scripting vulnerability due to a failure to sanitize user-supplied input to the J-Web interface. An attacker can exploit this vulnerability to execute arbitrary JavaScript in the context of t...

Juniper Junos MX and T4000 Series MPC Reboot DoS (JSA10621)

According to its self-reported version number, the remote Junos device is affected by a denial of service vulnerability. The issue exists in MX and T4000 series routers that use either Trio-based or Cassis-based PFE modules. An attacker can exploit this vulnerability by sending a crafted IP packe...

CVE-2014-2291

Cross-site scripting XSS vulnerability in the Pulse Collaboration Secure Meeting user pages in Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS before 7.1r18, 7.3 before 7.3r10, 7.4 before 7.4r8, and 8.0 before 8.0r1 allows remote authenticated users to inject arbitrary web scrip...

CVE-2014-2292

Unspecified vulnerability in the Linux Network Connect client in Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS before 7.1r18, 7.3 before 7.3r10, 7.4 before 7.4r8, and 8.0 before 8.0r1 allows local users to gain privileges via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Pulse Collaboration Secure Meeting user pages in Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS before 7.1r18, 7.3 before 7.3r10, 7.4 before 7.4r8, and 8.0 before 8.0r1 allows remote authenticated users to inject arbitrary web scrip...