Juniper Junos SRX Series Unauthenticated Access (JSA10593)

According to its self-reported version number, the remote Juniper Junos SRX series device may be affected by an unauthenticated access vulnerability. A configuration validation error may exist when upgrading that leaves the device with a partial configuration when the 'no-validate' option is used...

Juniper Junos PIM Remote Denial of Service (JSA10548)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. A flaw in the way in which the Next-Generation Multicast VPN NGEN MVPN environment process large numbers of specifically crafted PIM join messages can cause the RPD routing daemon to cras...

PT-2013-5956

Name of the Vulnerable Software and Affected Versions Juniper Junos versions 10.0 before 10.0S28 Juniper Junos versions 10.4 before 10.4R7 Juniper Junos versions 11.1 before 11.1R5 Juniper Junos versions 11.2 before 11.2R2 Juniper Junos versions 11.4 before 11.4R1 Description The issue allows...

Juniper Junos Unnumbered Interface Cache Poisoning Remote DoS and Information Disclosure (JSA10595)

According to its self-reported version number, the remote Juniper Junos device is affected by denial of service and information disclosure vulnerabilities. An adjacent attacker can poison the ARP cache and create a bogus forwarding table entry for an IP address, effectively creating a denial of...

Juniper Junos J-Web CSRF Protection Bypass (JSA10597)

According to its self-reported version number, the remote Juniper Junos device has a cross-site request forgery XSRF vulnerability in J-Web. Successful exploitation of this issue could allow an attacker to take complete control of the device. TRUSTED...

Juniper Networks Junos OS DNSSEC validation Denial of Service

Heavy DNSSEC validation load can cause assertion failure in Bind of Junos OS. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Juniper Networks Junos OS Detection (SNMP)

SNMP based detection of Juniper Networks Junos OS. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

PT-2013-1296

Name of the Vulnerable Software and Affected Versions Junos versions prior to 10.4R13 Junos versions 11.4 before 11.4R7 Junos versions 12.1 before 12.1R6 Junos versions 12.1X44 before 12.1X44-D15 Junos versions 12.1X45 before 12.1X45-D10 Junos versions 12.2 before 12.2R3 Junos versions 12.3 befor...

Juniper Junos Pulse Secure Access Service IVE OS (SSL VPN) Multiple XSS (JSA10589)

According to its self-reported version, the version of Juniper Junos Pulse Secure Access Service IVE OS running on the remote host is affected by multiple unspecified cross-site scripting vulnerabilities that are present on the login and support pages hosted on the device's web server. An attacke...

Junos Pulse Secure IVE / UAC OS DoS (JSA10590)

According to its self-reported version, the version of IVE / UAC OS running on the remote host may be affected by an unspecified denial of service vulnerability that can be triggered by sending a specially crafted packet to the device. A system restart is required to bring the device back into...

CVE-2013-5650

Junos Pulse Secure Access Service IVE 7.1 before 7.1r5, 7.2 before 7.2r10, 7.3 before 7.3r6, and 7.4 before 7.4r3 and Junos Pulse Access Control Service UAC 4.1 before 4.1r8.1, 4.2 before 4.2r5, 4.3 before 4.3r6 and 4.4 before 4.4r3, when a hardware SSL acceleration card is enabled, allows remote...

Design/Logic Flaw

Junos Pulse Secure Access Service IVE 7.1 before 7.1r5, 7.2 before 7.2r10, 7.3 before 7.3r6, and 7.4 before 7.4r3 and Junos Pulse Access Control Service UAC 4.1 before 4.1r8.1, 4.2 before 4.2r5, 4.3 before 4.3r6 and 4.4 before 4.4r3, when a hardware SSL acceleration card is enabled, allows remote...

CVE-2013-5650

Junos Pulse Secure Access Service IVE 7.1 before 7.1r5, 7.2 before 7.2r10, 7.3 before 7.3r6, and 7.4 before 7.4r3 and Junos Pulse Access Control Service UAC 4.1 before 4.1r8.1, 4.2 before 4.2r5, 4.3 before 4.3r6 and 4.4 before 4.4r3, when a hardware SSL acceleration card is enabled, allows remote...

CVE-2013-5650

CVE-2013-5650 details (connected docs): The vulnerability affects Junos Pulse Secure Access Service (IVE) and Pulse Access Control Service (UAC) when a hardware SSL acceleration card is enabled. A crafted packet can trigger a denial of service resulting in a device hang. Public materials confirm ...

PT-2013-5712

Name of the Vulnerable Software and Affected Versions Junos Pulse Secure Access Service IVE versions 7.1 through 7.1r4 Junos Pulse Secure Access Service IVE versions 7.2 through 7.2r9 Junos Pulse Secure Access Service IVE versions 7.3 through 7.3r5 Junos Pulse Secure Access Service IVE versions 7...

CVE-2013-5650: Improper Input Validation

Junos Pulse Secure Access Service IVE 7.1 before 7.1r5, 7.2 before 7.2r10, 7.3 before 7.3r6, and 7.4 before 7.4r3 and Junos Pulse Access Control Service UAC 4.1 before 4.1r8.1, 4.2 before 4.2r5, 4.3 before 4.3r6 and 4.4 before 4.4r3, when a hardware SSL acceleration card is enabled, allows remote...

CVE-2013-5649

Multiple cross-site scripting XSS vulnerabilities in Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS 7.1 before 7.1r15, 7.2 before 7.2r11, 7.3 before 7.3r6, and 7.4 before 7.4r3 allow 1 remote attackers to inject arbitrary web script or HTML via vectors involving login pages, an...

CVE-2013-5649

Multiple cross-site scripting XSS vulnerabilities in Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS 7.1 before 7.1r15, 7.2 before 7.2r11, 7.3 before 7.3r6, and 7.4 before 7.4r3 allow 1 remote attackers to inject arbitrary web script or HTML via vectors involving login pages, an...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS 7.1 before 7.1r15, 7.2 before 7.2r11, 7.3 before 7.3r6, and 7.4 before 7.4r3 allow 1 remote attackers to inject arbitrary web script or HTML via vectors involving login pages, an...

CVE-2013-5649

Multiple cross-site scripting XSS vulnerabilities in Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS 7.1 before 7.1r15, 7.2 before 7.2r11, 7.3 before 7.3r6, and 7.4 before 7.4r3 allow 1 remote attackers to inject arbitrary web script or HTML via vectors involving login pages, an...