CVE-2018-0059: Improper Neutralization of Input During Web Page Generation

A persistent cross-site scripting vulnerability in the graphical user interface of ScreenOS may allow a remote authenticated user to inject web script or HTML and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform...

CVE-2018-0014: Exposure of Sensitive Information to an Unauthorized Actor

Juniper Networks ScreenOS devices do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is often detected as CVE-2003-0001. The issue affects all versions of Juniper Networks ScreenOS prior to 6.3.0r25...

Cross site scripting

A persistent cross site scripting vulnerability in NetScreen WebUI of Juniper Networks Juniper NetScreen Firewall+VPN running ScreenOS allows a user with the 'security' role to inject HTML/JavaScript content into the management session of other users including the administrator. This enables the...

Juniper Networks ScreenOS Denial of Service Vulnerability

Juniper Networks ScreenOS is a Juniper Networks operating system that runs in the NetScreen family of firewalls. A denial of service vulnerability exists in Juniper Networks ScreenOS. An attacker could exploit this vulnerability to cause an application to crash, denying service to legitimate user...

Juniper Networks ScreenOS Authentication Bypass (CVE-2015-7755)

An authentication bypass vulnerability exists in Juniper Networks ScreenOS. The vulnerability is due to the presence of a default administrative account with a hard-coded password. A remote, unauthenticated attacker could exploit this vulnerability to gain administrative access to the target...

Juniper Networks ScreenOS 拒绝服务漏洞

BUGTRAQ ID: 64260 CVECAN ID: CVE-2013-6958 ScreenOS是Netscreen防火墙安全解决方案所使用的操作系统。 ScreenOS 5.4, 6.2.0, 6.3.0版本中禁用了"Ping of Death"屏幕后，处理特制报文的实现上存在安全漏洞，成功利用后可导致拒绝服务。 0 Juniper Networks ScreenOS 6.3 Juniper Networks ScreenOS 6.2 厂商补丁： Juniper Networks ---------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...