CVE-2001-0933

CVE-2001-0933 Cooolsoft PowerFTP Server 2.03 allows remote attackers to list the contents of arbitrary drives via a ls LIST command that includes the drive letter as an argument, e.g. "ls C:". Securiteam publication at http://www.securiteam.com/exploits/6D00L2A35K.html External info at...

CVE-2026-102044

A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP-LS peer to cause a denial of service via a BGP-LS update...

CVE-2026-102022

A Reachable Assertion vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP-LS peer to cause an rpd crash via a crafted BGP-LS Link NLRI advertisements...

CVE-2026-102020

A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated network-based attacker to cause a denial of service via BGP-LS routing updates...

CVE-2026-101991

An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP-LS peer to cause heap data disclosure via a malformed UPDATE sent over a session with the traffic-engineering address...

EUVD-2026-101368

A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP-LS peer to cause a denial of service via a BGP-LS update...

CVE-2026-102044 Junos OS and Junos OS Evolved: An attacker causes a routing control-plane denial of service when BGP-LS traffic engineering is enabled

A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP-LS peer to cause a denial of service via a BGP-LS update...

CVE-2026-102044

A Reachable Assertion vulnerability exists in the rpd process of Juniper Networks Junos OS and Junos OS Evolved . This flaw allows a configured BGP-LS peer to trigger a denial of service by sending a BGP-LS update , specifically when BGP-LS traffic engineering is enabled. No specific exploit deta...

CVE-2026-102022

A Reachable Assertion vulnerability (CWE-617) exists in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved . An attacker with access to a configured BGP-LS peer can trigger a crash of the rpd process by sending crafted BGP-LS Link NLRI advertisements . This vulner...

CVE-2026-102022 Junos OS and Junos OS Evolved: An attacker causes a routing-process crash when BGP-LS traffic-engineering is enabled

A Reachable Assertion vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP-LS peer to cause an rpd crash via a crafted BGP-LS Link NLRI advertisements...

EUVD-2026-101347

A Reachable Assertion vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP-LS peer to cause an rpd crash via a crafted BGP-LS Link NLRI advertisements...

CVE-2026-102020 Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when BGP-LS TED export is enabled

A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated network-based attacker to cause a denial of service via BGP-LS routing updates...

CVE-2026-102020

A Reachable Assertion vulnerability exists in the rpd process of Juniper Networks Junos OS and Junos OS Evolved . An authenticated network-based attacker can trigger a denial of service (DoS) by sending specific BGP-LS routing updates when BGP-LS TED export is enabled. No specific exploit details...

EUVD-2026-101345

A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated network-based attacker to cause a denial of service via BGP-LS routing updates...

CVE-2026-102087

An Incomplete List of Disallowed Inputs vulnerability exists in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved . An unauthenticated, adjacent attacker can trigger a Denial-of-Service (DoS) by sending a specific valid, optional, non-transitive BGP update over a...

CVE-2026-102087 Junos OS and Junos OS Evolved: If in a traffic engineering scenario a specific valid BGP-LS attribute is received rpd crashes

An Incomplete List of Disallowed Inputs vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial-of-Service DoS. When in a BGP traffic engineering scenario a specific, valid, optional,...

CVE-2026-101991

A vulnerability exists in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved . An Improper Handling of Length Parameter Inconsistency allows a configured BGP-LS peer to trigger heap data disclosure . This occurs when a malformed UPDATE message is sent over a sessi...

EUVD-2026-101451

An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP-LS peer to cause heap data disclosure via a malformed UPDATE sent over a session with the traffic-engineering address...

CVE-2026-101991 Junos OS and Junos OS Evolved: A BGP-LS peer causes heap data disclosure when traffic-engineering routing is enabled

An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP-LS peer to cause heap data disclosure via a malformed UPDATE sent over a session with the traffic-engineering address...

CVE-2026-101991: Improper Handling of Length Parameter Inconsistency

An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP-LS peer to cause heap data disclosure via a malformed UPDATE sent over a session with the traffic-engineering address...