9649 matches found
Input validation
Insufficient validation of SSH keys in Junos Space before 15.2R2 allows man-in-the-middle MITM type of attacks while a Space device is communicating with managed devices...
CVE-2016-4929
Command injection vulnerability in Junos Space before 15.2R2 allows attackers to execute arbitrary code as a root user...
CVE-2016-4927
Insufficient validation of SSH keys in Junos Space before 15.2R2 allows man-in-the-middle MITM type of attacks while a Space device is communicating with managed devices...
Cross site request forgery (csrf)
Cross site request forgery vulnerability in Junos Space before 15.2R2 allows remote attackers to perform certain administrative actions on Junos Space...
Cross site scripting
Cross-site scripting XSS vulnerability in Junos Space before 15.2R2 allows remote attackers to steal sensitive information or perform certain administrative actions...
CVE-2016-4931
XML entity injection in Junos Space before 15.2R2 allows attackers to cause a denial of service...
Design/Logic Flaw
XML entity injection in Junos Space before 15.2R2 allows attackers to cause a denial of service...
CVE-2016-4926
Insufficient authentication vulnerability in Junos Space before 15.2R2 allows remote network based users with access to Junos Space web interface to perform certain administrative tasks without authentication...
CVE-2016-4927
Insufficient validation of SSH keys in Junos Space before 15.2R2 allows man-in-the-middle MITM type of attacks while a Space device is communicating with managed devices...
CVE-2016-4928
Cross site request forgery vulnerability in Junos Space before 15.2R2 allows remote attackers to perform certain administrative actions on Junos Space...
CVE-2016-4929
Command injection vulnerability in Junos Space before 15.2R2 allows attackers to execute arbitrary code as a root user...
CVE-2016-4930
Cross-site scripting XSS vulnerability in Junos Space before 15.2R2 allows remote attackers to steal sensitive information or perform certain administrative actions...
CVE-2016-4931
XML entity injection in Junos Space before 15.2R2 allows attackers to cause a denial of service...
CVE-2016-4929
Command injection vulnerability in Junos Space before 15.2R2 allows attackers to execute arbitrary code as a root user...
CVE-2016-4931
XML entity injection in Junos Space before 15.2R2 allows attackers to cause a denial of service...
CVE-2016-4926
Insufficient authentication vulnerability in Junos Space before 15.2R2 allows remote network based users with access to Junos Space web interface to perform certain administrative tasks without authentication...
CVE-2016-4930
CVE-2016-4930 is a cross-site scripting (XSS) vulnerability in Junos Space prior to 15.2R2. The affected product is Junos Space (network management software). The vulnerability allows remote attackers to steal sensitive information or perform certain administrative actions via the vulnerable web ...
CVE-2016-4928
The provided connected documents confirm CVE-2016-4928 as a Cross-Site Request Forgery vulnerability in Junos Space prior to version 15.2R2. The root cause is CSRF that allows remote attackers to perform certain administrative actions on Junos Space. Affected software is Junos Space (version
CVE-2016-4927
CVE-2016-4927 affects Junos Space (pre-15.2R2). The root cause is insufficient validation of SSH keys during Space-to-managed-device communications, enabling MITM-style attacks. Impact is partial confidentiality/integrity/availability according to CVSS, with network access and no authentication r...