Design/Logic Flaw

Unspecified vulnerability in the Linux Network Connect client in Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS before 7.1r18, 7.3 before 7.3r10, 7.4 before 7.4r8, and 8.0 before 8.0r1 allows local users to gain privileges via unspecified vectors...

CVE-2014-2292

Unspecified vulnerability in the Linux Network Connect client in Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS before 7.1r18, 7.3 before 7.3r10, 7.4 before 7.4r8, and 8.0 before 8.0r1 allows local users to gain privileges via unspecified vectors...

CVE-2014-2291

Pulse Secure Access Service (IVE OS) is affected by CVE-2014-2291 due to inadequate input validation on the Pulse Collaboration (Secure Meeting) user pages, allowing remote authenticated users to inject arbitrary HTML/Script. Impact per sources is that this affects Juniper Junos Pulse Secure Acce...

CVE-2014-2292

CVE-2014-2292 concerns a local privilege escalation in the Linux Network Connect client used by Juniper Junos Pulse Secure Access Service (IVE OS). Affected desktop/server versions include IVE OS before 7.1r18, 7.3 before 7.3r10, 7.4 before 7.4r8, and 8.0 before 8.0r1. The underlying issue is a l...

CVE-2014-2291: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Pulse Collaboration Secure Meeting user pages in Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS before 7.1r18, 7.3 before 7.3r10, 7.4 before 7.4r8, and 8.0 before 8.0r1 allows remote authenticated users to inject arbitrary web scrip...

CVE-2014-2292: Undefined Security Weakness

Unspecified vulnerability in the Linux Network Connect client in Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS before 7.1r18, 7.3 before 7.3r10, 7.4 before 7.4r8, and 8.0 before 8.0r1 allows local users to gain privileges via unspecified vectors...

PT-2014-4609

Name of the Vulnerable Software and Affected Versions Juniper Junos Pulse Secure Access Service aka SSL VPN versions prior to 7.1r18 Juniper Junos Pulse Secure Access Service aka SSL VPN versions 7.3 before 7.3r10 Juniper Junos Pulse Secure Access Service aka SSL VPN versions 7.4 before 7.4r8...

PT-2014-4610

Name of the Vulnerable Software and Affected Versions Junos Pulse Secure Access Service aka SSL VPN versions prior to 7.1r18 Junos Pulse Secure Access Service aka SSL VPN versions 7.3 before 7.3r10 Junos Pulse Secure Access Service aka SSL VPN versions 7.4 before 7.4r8 Junos Pulse Secure Access...

Juniper Junos Pulse Secure Access Service IVE OS (SSL VPN) XSS (JSA10617)

According to its self-reported version, the version of Juniper Junos Pulse Secure Access Service IVE OS running on the remote host is affected by an unspecified cross-site scripting vulnerability that is present within the Pulse Collaboration Secure Meeting user pages. An attacker could exploit...

CVE-2013-7313

The OSPF implementation in Juniper Junos through 13.x, JunosE, and ScreenOS through 6.3.x does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial o...

Design/Logic Flaw

The OSPF implementation in Juniper Junos through 13.x, JunosE, and ScreenOS through 6.3.x does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial o...

CVE-2013-7313

The OSPF implementation in Juniper Junos through 13.x, JunosE, and ScreenOS through 6.3.x does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial o...

CVE-2013-7313

CVE-2013-7313 affects the OSPF implementation in Juniper Junos (through 13.x, JunosE) and ScreenOS (through 6.3.x). The issue arises from not considering duplicate Link State ID values in Link State Advertisements (LSAs) when updating the LSA database, enabling remote attackers to cause routing d...

PT-2014-3355

Name of the Vulnerable Software and Affected Versions Junos versions through 13.x JunosE affected versions not specified ScreenOS versions through 6.3.x Description The issue concerns the OSPF implementation, which does not account for duplicate Link State ID values in Link State Advertisement LS...

CVE-2013-7313: Undefined Security Weakness

The OSPF implementation in Juniper Junos through 13.x, JunosE, and ScreenOS through 6.3.x does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial o...

Juniper Networks Junos OS Multiple Privilege Escalation Vulnerabilities in Junos CLI

Privilege escalation vulnerability through certain CLI commands. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; ...

Juniper Networks Junos OS DoS Vulnerability in XNM Command Processor

Denial of Service vulnerability in XNM command processor. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if...

Juniper Networks Junos OS Oversized BGP UPDATE DoS Vulnerability

Denial of Service vulnerability in routing daemon from oversized BGP UPDATE message. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Juniper Junos Oversized BGP UPDATE Remote DoS (JSA10609)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability. This issue exists in the routing protocol daemon rpd when handling oversized BGP UPDATE messages. Note that this issue only affects devices with BGP enabled. TRUSTED...

Juniper Junos CLI libc recomp() rpd DoS (JSA10612)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability in the regcomp implementation of the GNU C Library used in the command-line interpreter CLI. A attacker can exploit this vulnerability to crash the RE by using a crafted...