Juniper Junos XML Sensitive Information Disclosure Vulnerability

Juniper Junos is a network operating system dedicated to the company's hardware systems. An XML external entity injection exists in the Juniper Junos Space WEB management interface, allowing remote attackers to exploit the vulnerability by submitting a special request to obtain sensitive file...

Information Disclosure Vulnerability in Multiple Juniper Products

Juniper Networks QFX3500 and others are JuniperNetworks switches. An information disclosure vulnerability exists in several Juniper products, which could be exploited by attackers to obtain sensitive information...

Juniper Junos Code Execution Vulnerability

Juniper Junos is a network operating system dedicated to the company's hardware systems. Insufficient authorization checks in the Juniper Junos Space WEB management interface allow remote attackers to exploit this vulnerability by submitting a special request to execute arbitrary code...

Juniper Junos Denial of Service Vulnerability (CNVD-2017-00603)

Juniper Junos is a Juniper Networks network operating system designed for the company's hardware systems. The operating system provides a secure programming interface and the JunosSDK. A denial of service vulnerability exists in Juniper Junos. An attacker could exploit this vulnerability to cause...

Juniper Networks Junos OS QFX and EX Series Information Disclosure Vulnerability (JSA10773, Etherleak)

Junos OS on QFX and EX series is prone to an information disclosure vulnerability also known as SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Juniper Networks Junos OS jdhcpd DoS Vulnerability

Junos OS is prone to a denial of service vulnerability in jdhcpd due to crafted DHCPv6 packets. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Juniper Networks Junos OS RPD DoS Vulnerability

Junos OS is prone to a denial of service vulnerability in RPD while processing RIP advertisements. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Juniper Networks Junos Space Multiple Vulnerabilities (JSA10770)

Juniper Networks Junos Space is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Juniper Networks Junos OS SRX Series: DoS Vulnerability in flowd

Junos OS on SRX series is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Juniper Networks Junos OS RPD DoS Vulnerability

Junos OS is prone to a denial of service vulnerability in RPD. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if...

Juniper Junos Multiple OpenSSL Vulnerabilities (JSA10759) (SWEET32)

According to its self-reported version number, the remote Juniper Junos device is affected by the following vulnerabilities related to OpenSSL : - A flaw exists in the ssl3getkeyexchange function in file s3clnt.c when handling a ServerKeyExchange message for an anonymous DH ciphersuite with the...

Juniper JUNOSe IPv6 Packet Handling Line Card Reset Remote DoS (JSA10767) (deprecated)

According to its version, the remote Juniper E-eries device is affected by a denial of service vulnerability in the IPv6 support component due to improper handling IPv6 packets. An unauthenticated, remote attacker can exploit this, via a specially crafted IPv6 packet, to cause the line card to...

Juniper ScreenOS 6.3.x < 6.3.0r23 Multiple Vulnerabilities in OpenSSL (JSA10759) (DROWN)

The version of Juniper ScreenOS running on the remote host is 6.3.x prior to 6.3.0r23. It is, therefore, affected by multiple vulnerabilities in its bundled version of OpenSSL : - A flaw exists in the SSLv2 implementation, specifically in the getclientmasterkey function within file s2srvr.c, due ...

Juniper Junos vMX 14.1 < 14.1R8 / 15.1 < 15.1F5 Local Information Disclosure (JSA10766)

According to its self-reported version number and architecture, the remote Juniper Junos vMX Virtual MX Series router is 14.1 prior to 14.1R8 or 15.1 prior to 15.1F5. It is, therefore, affected by a local information disclosure vulnerability due to the use of incorrect permissions. A local attack...

Juniper Junos Denial of Service Vulnerability (CNVD-2016-10603)

Juniper Junos OS is a Juniper Networks network operating system designed for the company's hardware systems. The OS provides a secure programming interface and the Junos SDK. A denial of service vulnerability exists in the 'udp6ctlinput' function in Juniper Junos version 9.3, which can be exploit...

Juniper Junos Multiple CLI Command Handling Local Privilege Escalations (JSA10763)

According to its self-reported version number, the remote Juniper Junos device is affected by multiple privilege escalation vulnerabilities in the Junos CLI. A local attacker can exploit these, via specially crafted CLI commands and arguments, to gain elevated privileges. C Tenable Network...

Juniper Junos IPv6 Packet Handling Remote DoS (JSA10762)

According to its self-reported version number and configuration, the remote Juniper Junos device is affected by a denial of service vulnerability in the IPV6 implementation. An unauthenticated, remote attacker can exploit this, via a flood of specially crafted IPv6 traffic, to exhaust available...

Juniper Junos J-Web Reflected XSS (JSA10764)

According to its self-reported version number and configuration, the remote Juniper Junos device is affected by a cross-site scripting vulnerability in the J-web component due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this, via a specially...

Juniper Networks Junos Space Multiple Vulnerabilities (JSA10759)

Juniper Networks Junos Space is prone to multiple vulnerabilities in OpenSSL. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

juniper-federal.com XSS vulnerability

Vulnerable URL: http://juniper-federal.com/techpubs/enUS/junos14.1/information-products/topic-collections/syslog-messages/index.html?javascript:alert'OPENBUGBOUNTY'.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability...