Lucene search
+L

916 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/14 12:00 a.m.•15 views

CVE-2026-102085: Improper Restriction of Communication Channel to Intended Endpoints

An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device. Due to a wrong initialization, a process whi...

6.9CVSS5.6AI score0.00287EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/14 12:00 a.m.•23 views

Juniper Junos OS Vulnerability (JSA112182)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA112182 advisory. - An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on MX Series with SPC3 allows an...

8.7CVSS6AI score0.00339EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/14 12:00 a.m.•20 views

Juniper Junos OS Multiple Vulnerabilities (JSA112171)

The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA112171 advisory. - An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-base...

6.9CVSS6.1AI score0.00353EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/14 12:00 a.m.•14 views

CVE-2026-102086: NULL Pointer Dereference

A NULL Pointer Dereference vulnerability in the DNS plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a complete Denial-of-Service DoS. When multiple DNS queries are received in a single flow session, where one query matches a Security...

8.2CVSS5.8AI score0.00367EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•21 views

PT-2026-113914

A Use After Free vulnerability in the packet forwarding engine pfe of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. When web filtering for TCP traffic is configured, a high volume of DNS requests increases the likelihoo...

8.2CVSS5.5AI score0.00329EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•21 views

PT-2026-114196

A Numeric Truncation Error vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of service via a BGP Prefix-SID route advertisement that is subsequently re-advertised. This issue does not affect...

8.7CVSS5.8AI score0.00374EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•18 views

PT-2026-113798

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS affected versions not specified Juniper Networks Junos OS Evolved affected versions not specified Description An improper input validation issue exists in the routing protocol daemon rpd. This allows an unauthenticate...

8.7CVSS5.8AI score0.00461EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/14 12:00 a.m.•12 views

CVE-2026-101943: Improper Input Validation

An Improper Input Validation vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of service via a crafted BGP EVPN update message...

8.7CVSS5.9AI score0.00461EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•18 views

PT-2026-113861

A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated network-based attacker to cause a denial of service via BGP-LS routing updates...

8.7CVSS5.9AI score0.00461EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/08 7:16 a.m.•22 views

CVE-2026-87426

An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions before 3.5.0 to enumerate the configuration details and state of managed Brocade Fabric OS FOS switches. This results in the unauthorized disclosure of the customer's SAN fabric...

5.3CVSS0.00148EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/08 6:54 a.m.•39 views

EUVD-2026-94797

An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions before 3.5.0 to enumerate the configuration details and state of managed Brocade Fabric OS FOS switches. This results in the unauthorized disclosure of the customer's SAN fabric...

5.3CVSS7.8AI score0.00148EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/08 6:54 a.m.•52 views

CVE-2026-87426

An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions before 3.5.0 to enumerate the configuration details and state of managed Brocade Fabric OS FOS switches. This results in the unauthorized disclosure of the customer's SAN fabric...

5.3CVSS0.00148EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/08 6:54 a.m.•34 views

CVE-2026-87426

Brocade ASCG versions prior to 3.5.0 are vulnerable to an unauthenticated network-based attack. An attacker can query specific internal management endpoints, specifically the showSwitchHandler , to enumerate configuration details and the state of managed Brocade Fabric OS (FOS) switches. This vul...

5.3CVSS7.8AI score0.00148EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/10/08 6:54 a.m.•9 views

CVE-2026-87426

An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions before 3.5.0 to enumerate the configuration details and state of managed Brocade Fabric OS FOS switches. This results in the unauthorized disclosure of the customer's SAN fabric...

5.3CVSS7.8AI score0.00148EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•15 views

CVE-2026-87426: Exposure of Sensitive Information to an Unauthorized Actor

An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions before 3.5.0 to enumerate the configuration details and state of managed Brocade Fabric OS FOS switches. This results in the unauthorized disclosure of the customer's SAN fabric...

5.3CVSS7.8AI score0.00148EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•16 views

PT-2026-107862

An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions before 3.5.0 to enumerate the configuration details and state of managed Brocade Fabric OS FOS switches. This results in the unauthorized disclosure of the customer's SAN fabric...

5.3CVSS7.8AI score0.00148EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/06 12:32 a.m.•36 views

EUVD-2026-92873

There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows a remote, unauthenticated attacker to inject arbitrary input into service endpoints via network-based HTTP requests to unauthenticated endpoints...

6AI score0.00666EPSS
SaveExploits0References3
CVE
CVE
•added 2026/10/05 11:14 p.m.•121 views

CVE-2026-82989

ViewSonic ViewBoard smartboards, which run on an Android-based system, are vulnerable to an input injection flaw in the vCast software suite. The vulnerability exists in exposed network services, allowing a remote, unauthenticated attacker to inject arbitrary input into service endpoints via HTTP...

9.8CVSS6AI score0.00666EPSS
SaveExploits0References2
Broadcom
Broadcom
•added 2026/10/02 12:00 a.m.•19 views

Unauthenticated switch topology dump in Brocade ASCG before 3.5.0 (CVE-2026-87426)

An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions before 3.5.0 to enumerate the configuration details and state of managed Brocade Fabric OS FOS switches. This results in the unauthorized disclosure of the customer's SAN fabric...

5.3CVSS7.8AI score0.00148EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•18 views

PT-2026-96965

Name of the Vulnerable Software and Affected Versions UniFi gateway devices affected versions not specified Description A network-based actor can exploit an Out-of-bounds Write—a condition where data is written outside the boundaries of a pre-allocated memory buffer—to trigger a Denial of Service...

7.5CVSS5.8AI score0.0046EPSS
SaveExploits0References3
Rows per page
Query Builder