6641 matches found
CVE-2016-1256
Juniper Junos OS before 12.1X44-D55, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R8, 13.2X51 before 13.2X51-D40, 13.3 before 13.3R7, 14.1 before 14.1R5, 14.1X53 before 14.1X53-D18 or 14.1X53-D30, 14.1X55 before...
CVE-2016-1262
Juniper Junos OS before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.1X48 before 12.3X48-D20, and 15.1X49 before 15.1X49-D30 on SRX series devices, when the Real Time Streaming Protocol Application Layer Gateway RTSP ALG is enabled, allow remote attackers to cause a denial of service flowd crash v...
CVE-2016-1257
The CVE-2016-1257 entry describes a denial-of-service vulnerability in Juniper Junos OS Routing Engine (RPD) when LDP is enabled. A remote attacker can send crafted LDP packets to cause the RPD routing process to crash and restart. Affected software ranges include Junos OS releases such as 13.2R5...
CVE-2016-1260
Juniper Junos OS before 13.2X51-D36, 14.1X53 before 14.1X53-D25, and 15.2 before 15.2R1 on EX4300 series switches allow remote attackers to cause a denial of service network loop and bandwidth consumption via unspecified vectors related to Spanning Tree Protocol STP traffic...
CVE-2016-1262
CVE-2016-1262 affects Juniper Junos OS on SRX series devices when the Real Time Streaming Protocol Application Layer Gateway (RTSP ALG) is enabled. Affected versions include Junos OS before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.1X48 before 12.3X48-D20, and 15.1X49 before 15.1X49-D30. The is...
CVE-2016-1260
CVE-2016-1260 affects Juniper JUNOS OS on EX4300 series switches. A flaw in the Spanning Tree Protocol implementation allows remote attackers to trigger a denial of service (network loop and bandwidth consumption) via unspecified STP-related traffic. Affected software includes JUNOS OS versions p...
CVE-2016-1257
The Routing Engine in Juniper Junos OS 13.2R5 through 13.2R8, 13.3R1 before 13.3R8, 13.3R7 before 13.3R7-S3, 14.1R1 before 14.1R6, 14.1R3 before 14.1R3-S9, 14.1R4 before 14.1R4-S7, 14.1X51 before 14.1X51-D65, 14.1X53 before 14.1X53-D12, 14.1X53 before 14.1X53-D28, 14.1X53 before 4.1X53-D35, 14.2R...
CVE-2016-1256
CVE-2016-1256 affects Juniper Junos OS across many releases (e.g., before 12.1X44-D55, 12.3R10, 14.2R4, 15.1X49-D10, etc.). The vulnerability arises in IGMPv3 handling, allowing a remote, unauthenticated attacker to cause a denial of service by sending a malformed IGMPv3 packet, impacting multica...
CVE-2016-1258
The CVE-2016-1258 entry concerns Juniper Junos OS J-Web, which uses Embedthis AppWeb. Affected versions include Junos OS prior to specific builds listed in the description (e.g., before 12.1X44-D60, 12.1X46 before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R10, 12.3X48 before 12.3X4...
Juniper Removes Dual_EC, ANSI X9.31 Algorithms
Juniper Networks announced late Friday it was removing the suspicious DualECDRBG random number generator from its ScreenOS operating system. And while that’s heralded as a positive move considering DualEC’s dubious origins, there remain important and unanswered questions about Juniper’s decision ...
Exploit for Improper Authentication in Juniper Screenos
CVE-2015-7755-POC CVE-2015-7755 vuln...
CVE-2015-7754
Juniper ScreenOS before 6.3.0r21, when ssh-pka is configured and enabled, allows remote attackers to cause a denial of service system crash or execute arbitrary code via crafted SSH negotiation...
Design/Logic Flaw
Juniper ScreenOS before 6.3.0r21, when ssh-pka is configured and enabled, allows remote attackers to cause a denial of service system crash or execute arbitrary code via crafted SSH negotiation...
CVE-2015-7754
CVE-2015-7754 affects Juniper ScreenOS before version 6.3.0r21 where ssh-pka is configured; an unauthenticated, remote attacker can cause a denial of service (system crash) or execute arbitrary code via crafted SSH negotiations. CVSS metrics indicate high impact (v3 base 8.1, High; v2 base 9.3, H...
CVE-2015-7754
Juniper ScreenOS before 6.3.0r21, when ssh-pka is configured and enabled, allows remote attackers to cause a denial of service system crash or execute arbitrary code via crafted SSH negotiation...
pathfinder.juniper.net XSS vulnerability
Vulnerable URL: http://pathfinder.juniper.net/feature-explorer/feature-family-info.html?familyName=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 12:10 GMT Vulnerability type:| XSS Vulnerability...
kb.juniper.net Open Redirect vulnerability
Vulnerable URL: http://kb.juniper.net/InfoCenter/index?page=answerlink=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 11:53 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...
Safety warning: the domestic more than 3 0 0 Station juniper network equipment by back door influence-vulnerability warning-the black bar safety net
In 2 0 1 5 year 1 2 on 1 8 November,Juniper's official website released a security Bulletin,noted that in their Netscrren firewall ScreenOS software found unauthorized code,which relates to the 2 security questions,one is in the VPN authentication code is placed in the back door,allowing an...
Mike Mimoso and Chris Brook Discuss the Threats of 2015
With 2015 more or less in the rear view mirror Mike Mimoso and Chris Brook discuss the year in security: Wassenaar, ransomware, Carbanak and Equation Group,how big of a deal Stagefright was, that Juniper backdoor, and more. Download: tp2015inreview.mp3 Music by Chris Gonsalves...
