The vulnerability of Juniper Networks JunOS Evolved router models from the PTX10001, PTX10004, PTX10008, and PTX10016 series lies in the data source verification mechanism’s deficiencies. This allows attackers to trigger a system reboot.

The vulnerability of Juniper Networks JunOS Evolved router models series PTX10001, PTX10004, PTX10008, and PTX10016 lies in defects in the mechanism for verifying data sources during MAC address processing. Exploiting this vulnerability allows a malicious actor to trigger a system reboot...

The vulnerability of the Packet Forwarding Engine (PFE) module in Juniper Networks’ Junos OS-based routers of the QFX5000 Series allows a attacker to induce a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS-based QFX5000 Series routers is related to memory release errors. Exploiting this vulnerability can allow a malicious actor to trigger service interruptions...

The vulnerability of the Packet Forwarding Engine (PFE) module in Juniper Networks’ Junos OS Evolved routers of the PTX10003 series allows a attacker to compromise data integrity.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS Evolved PTX10003 series routers stems from insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to compromise data integrity from a remote locati...

The vulnerability of the application-level SIP ALG operating system Juniper Networks Junos routers of the MX and SRX series allows attackers to compromise the integrity of protected information.

The vulnerability of SIP application-level ALG operating systems running on Juniper Networks Junos routers of the MX and SRX series lies in insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of protected...

The vulnerability of Juniper Networks’ Junos OS, related to incorrect default permissions, allows attackers to increase their privileges within the system.

The vulnerability of Juniper Networks’ Junos OS is related to incorrect default permissions. Exploiting this vulnerability can allow attackers to enhance their privileges within the system...

Juniper Junos OS Vulnerability (JSA73145)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA73145 advisory. - An Improperly Implemented Security Check for Standard vulnerability in storm control of Juniper Networks Junos OS QFX5k devices allows packets to be punted to ARP queue...

The vulnerability of Juniper Networks Junos OS routers of the QFX5000 and EX4000 series, related to memory resource exhaustion, allows a hacker to trigger a service failure.

The vulnerability of Juniper Networks Junos OS routers of the QFX5000 and EX4000 series is related to the exhaustion of memory resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of Juniper Networks’ Junos OS Evolved operating system, related to the lack of protection for service data, allows attackers to disclose protected information.

The vulnerability of Juniper Networks’ Junos OS Evolved operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information using the “file copy” command...

Juniper Junos OS Vulnerability (JSA73150)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA73150 advisory. - An Improper Handling of Exceptional Conditions vulnerability in AS PATH processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a BGP updat...

GHSA-M5JC-R4GF-C6P8 Arduino Create Agent path traversal - arbitrary file deletion vulnerability

Impact The vulnerability affects the endpoint /v2/pkgs/tools/installed and the way it handles plugin names supplied as user input. A user who has the ability to perform HTTP requests to the localhost interface, or is able to bypass the CORS configuration, can delete arbitrary files or folders...

GHSA-75J7-W798-CWWX Arduino Create Agent path traversal - local privilege escalation vulnerability

Impact The vulnerability affects the endpoint /upload which handles request with the filename parameter. A user who has the ability to perform HTTP requests to the localhost interface, or is able to bypass the CORS configuration, can escalate his privileges to those of the user running the Arduin...

Arduino Create Agent path traversal - local privilege escalation vulnerability

Impact The vulnerability affects the endpoint /upload which handles request with the filename parameter. A user who has the ability to perform HTTP requests to the localhost interface, or is able to bypass the CORS configuration, can escalate his privileges to those of the user running the Arduin...

GHSA-MJQ6-PV9C-QPPQ Arduino Create Agent path traversal - arbitrary file deletion vulnerability

Impact The vulnerability affects the endpoint /v2/pkgs/tools/installed and the way it handles plugin names supplied as user input. A user who has the ability to perform HTTP requests to the localhost interface, or is able to bypass the CORS configuration, can delete arbitrary files or folders...

Arduino Create Agent path traversal - arbitrary file deletion vulnerability

Impact The vulnerability affects the endpoint /v2/pkgs/tools/installed and the way it handles plugin names supplied as user input. A user who has the ability to perform HTTP requests to the localhost interface, or is able to bypass the CORS configuration, can delete arbitrary files or folders...

Arduino Create Agent Insufficient Verification of Data Authenticity vulnerability

Impact The vulnerability affects the endpoint /v2/pkgs/tools/installed. A user who has the ability to perform HTTP requests to the localhost interface, or is able to bypass the CORS configuration, can escalate his privileges to those of the user running the Arduino Create Agent service via a...

TetrisPhantom: Cyber Espionage via Secure USBs Targets APAC Governments

Government entities in the Asia-Pacific APAC region are the target of a long-running cyber espionage campaign dubbed TetrisPhantom. "The attacker covertly spied on and harvested sensitive data from APAC government entities by exploiting a particular type of secure USB drive, protected by hardware...

Extreme ExtremeXOS (EXOS) Detection Consolidation

Consolidation of Extreme ExtremeXOS EXOS detections. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; ifdescription...

CVE-2023-45003

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Arrow Plugins Social Feed | Custom Feed for Social Media Networks plugin = 2.2.0 versions...

CVE-2023-45003

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Arrow Plugins Social Feed | Custom Feed for Social Media Networks plugin = 2.2.0 versions...

CVE-2023-45003 WordPress Social Feed Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Arrow Plugins Social Feed | Custom Feed for Social Media Networks plugin = 2.2.0 versions...