Juniper Networks Junos OS QFX and EX Series Information Disclosure Vulnerability (JSA10773, Etherleak)

Junos OS on QFX and EX series is prone to an information disclosure vulnerability also known as SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Juniper Networks Junos OS jdhcpd DoS Vulnerability

Junos OS is prone to a denial of service vulnerability in jdhcpd due to crafted DHCPv6 packets. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Juniper Junos Multiple OpenSSL Vulnerabilities (JSA10759) (SWEET32)

According to its self-reported version number, the remote Juniper Junos device is affected by the following vulnerabilities related to OpenSSL : - A flaw exists in the ssl3getkeyexchange function in file s3clnt.c when handling a ServerKeyExchange message for an anonymous DH ciphersuite with the...

Juniper ScreenOS 6.3.x < 6.3.0r23 Multiple Vulnerabilities in OpenSSL (JSA10759) (DROWN)

The version of Juniper ScreenOS running on the remote host is 6.3.x prior to 6.3.0r23. It is, therefore, affected by multiple vulnerabilities in its bundled version of OpenSSL : - A flaw exists in the SSLv2 implementation, specifically in the getclientmasterkey function within file s2srvr.c, due ...

Juniper JUNOSe IPv6 Packet Handling Line Card Reset Remote DoS (JSA10767) (deprecated)

According to its version, the remote Juniper E-eries device is affected by a denial of service vulnerability in the IPv6 support component due to improper handling IPv6 packets. An unauthenticated, remote attacker can exploit this, via a specially crafted IPv6 packet, to cause the line card to...

Juniper Junos vMX 14.1 < 14.1R8 / 15.1 < 15.1F5 Local Information Disclosure (JSA10766)

According to its self-reported version number and architecture, the remote Juniper Junos vMX Virtual MX Series router is 14.1 prior to 14.1R8 or 15.1 prior to 15.1F5. It is, therefore, affected by a local information disclosure vulnerability due to the use of incorrect permissions. A local attack...

Juniper Junos Denial of Service Vulnerability (CNVD-2016-10603)

Juniper Junos OS is a Juniper Networks network operating system designed for the company's hardware systems. The OS provides a secure programming interface and the Junos SDK. A denial of service vulnerability exists in the 'udp6ctlinput' function in Juniper Junos version 9.3, which can be exploit...

Juniper Junos Multiple CLI Command Handling Local Privilege Escalations (JSA10763)

According to its self-reported version number, the remote Juniper Junos device is affected by multiple privilege escalation vulnerabilities in the Junos CLI. A local attacker can exploit these, via specially crafted CLI commands and arguments, to gain elevated privileges. C Tenable Network...

Juniper Junos J-Web Reflected XSS (JSA10764)

According to its self-reported version number and configuration, the remote Juniper Junos device is affected by a cross-site scripting vulnerability in the J-web component due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this, via a specially...

Juniper Junos IPv6 Packet Handling Remote DoS (JSA10762)

According to its self-reported version number and configuration, the remote Juniper Junos device is affected by a denial of service vulnerability in the IPV6 implementation. An unauthenticated, remote attacker can exploit this, via a flood of specially crafted IPv6 traffic, to exhaust available...

Juniper Networks Junos Space Multiple Vulnerabilities (JSA10759)

Juniper Networks Junos Space is prone to multiple vulnerabilities in OpenSSL. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

juniper-federal.com XSS vulnerability

Vulnerable URL: http://juniper-federal.com/techpubs/enUS/junos14.1/information-products/topic-collections/syslog-messages/index.html?javascript:alert'OPENBUGBOUNTY'.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability...

junipernetworks.co.za XSS vulnerability

Open Bug Bounty ID: OBB-187517 Description| Value ---|--- Affected Website:| junipernetworks.co.za Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Juniper Junos Space XML External Entity Injection Vulnerability

Juniper Junos Space is a network management solution from Juniper Networks. The solution supports automated configuration, monitoring and troubleshooting of devices and services throughout their lifecycle. An XML external entity injection vulnerability exists in Juniper Junos Space versions prior...

Juniper Junos Space Cross-Site Scripting Vulnerability

Juniper Junos Space is a network management solution from Juniper Networks. The solution supports automated configuration, monitoring and troubleshooting of devices and services throughout their lifecycle. A cross-site scripting vulnerability exists in Juniper Junos Space versions prior to 15.2R2...

Juniper Junos Space Command Injection Vulnerability

Juniper Junos Space is a network management solution from Juniper Networks. The solution supports automated configuration, monitoring and troubleshooting of devices and services throughout their lifecycle. A command injection vulnerability exists in Juniper Junos Space versions prior to 15.2R2. A...

Juniper Junos Space Cross-Site Request Forgery Vulnerability

Juniper Junos Space is a network management solution from Juniper Networks. The solution supports automated configuration, monitoring and troubleshooting of devices and services throughout their lifecycle. A cross-site request forgery vulnerability exists in Juniper Junos Space versions prior to...

Juniper Junos J-Web Cross-Site Scripting Attack Vulnerability

Juniper Junos is a Juniper Networks network operating system designed for the company's hardware systems. The operating system provides a secure programming interface and the Junos SDK. A cross-site scripting attack vulnerability exists in Juniper Junos J-Web, which could be exploited by an...

Multiple Local Elevation of Privilege Vulnerabilities in Juniper Junos

Juniper Junos is a Juniper Networks network operating system designed for the company's hardware systems. The operating system provides a secure programming interface and the Junos SDK. Juniper Junos has multiple local elevation of privilege vulnerabilities that could be exploited by a local...

Juniper Networks Junos OS Multiple OpenSSL Vulnerabilities

Junos OS is prone to multiple vulnerabilities in OpenSSL. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if...