CVE-2021-0224 Junos OS: ANCPD core when hitting maximum-discovery-table-entries limit

A vulnerability in the handling of internal resources necessary to bring up a large number of Layer 2 broadband remote access subscriber BRAS nodes in Juniper Networks Junos OS can cause the Access Node Control Protocol daemon ANCPD to crash and restart, leading to a Denial of Service DoS...

CVE-2021-0224

CVE-2021-0224 affects Juniper Networks Junos OS and Junos OS Evolved, specifically the ANCPD (Access Node Control Protocol daemon) when handling a high volume of BRAS subscriber connections and the maximum-discovery-table-entries limit. The issue can cause ANCPD to crash and restart, leading to a...

CVE-2021-0216

CVE-2021-0216 affects Juniper Networks Junos OS on ACX5448 and ACX710. The issue is that a high rate of transit ARP packets can cause BFD sessions to flap, leading to potential routing instability and a DoS condition. Affected versions include Junos OS on ACX5448/ACX710 prior to specific fixed re...

CVE-2021-0216 Junos OS: ACX5448, ACX710: BFD sessions might flap due to high rate of transit ARP packets

A vulnerability in Juniper Networks Junos OS running on the ACX5448 and ACX710 platforms may cause BFD sessions to flap when a high rate of transit ARP packets are received. This, in turn, may impact routing protocols and network stability, leading to a Denial of Service DoS condition. When a hig...

CVE-2021-0214

The CVE-2021-0214 entry describes a Denial of Service in Juniper Networks Junos OS via the PPMD (periodic packet management daemon) when handling crafted malformed packets. The impact is a crash/restart of PPMD leading to network destabilization and service interruption; continued malformed packe...

CVE-2021-0214 Junos OS: Denial of Service in ppmd upon receipt of malformed packet

A vulnerability in the distributed or centralized periodic packet management daemon PPMD of Juniper Networks Junos OS may cause receipt of a malformed packet to crash and restart the PPMD process, leading to network destabilization, service interruption, and a Denial of Service DoS condition...

PT-2021-12969 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 17.2R1 through 17.4R2-S11 Juniper Networks Junos OS versions 17.3 through 17.3R3-S8 Juniper Networks Junos OS versions 17.4R2-S12 through 17.4R3-S4 Juniper Networks Junos OS versions 18.1 through 18.1R3-S12...

Extreme CMS suffers from SQL injection vulnerability

Extreme CMS is developed by Langfang Extreme Networks Technology Co., Ltd. using php an open source web content management system. Extreme CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2021-32382)

Extreme CMS is developed by Langfang Extreme Networks Technology Co., Ltd. using php an open source web content management system. Extreme CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

Command Execution Vulnerability in RG-RAC200b Wireless Controller

Ruijie Networks Co., Ltd. is a professional network manufacturer with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products and storage. A command execution vulnerability exists in the RG-RAC200b wireless...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2021-32383)

Extreme CMS is developed by Langfang Extreme Networks Technology Co., Ltd. using php an open source web content management system. Extreme CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2021-32381)

Extreme CMS is developed by Langfang Extreme Networks Technology Co., Ltd. using php an open source web content management system. Extreme CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

PT-2021-12945 · Juniper Networks · Paragon Active Assurance Control Center

Name of the Vulnerable Software and Affected Versions: Juniper Networks Paragon Active Assurance Control Center versions prior to 2.35.6 Juniper Networks Paragon Active Assurance Control Center version 2.36 versions prior to 2.36.2 Description: An authentication bypass issue may allow an attacker...

Logic Flaw Vulnerability in Next Generation Firewall of Ruijie Networks Co.

Ltd. is a service provider that specializes in the research and development, production, sales and service of network communication equipment, and provides network security, routers, switches, firewalls, wireless AP coverage and other network products and business solutions for users. A logic fla...

Juniper Networks AppFormix Overview 操作系统命令注入漏洞

Juniper Networks AppFormix Overview is an application from Juniper Networks, Inc. Operators of software-defined data centers can use one toolset to view operational performance and infrastructure resources. Juniper Networks AppFormix Overview has a security vulnerability that could be exploited b...

PT-2021-12943 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on SRX Series versions 17.1R3 through 17.3R3-S10 Juniper Networks Junos OS on SRX Series versions 17.4 through 17.4R3-S4 Juniper Networks Junos OS on SRX Series versions 18.2 through 18.2R3-S6 Juniper Networks Junos ...

Logic Flaw Vulnerability in Riptide Networks Next-Generation Firewalls

Ruijie Networks is a specialized network vendor with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products and storage. A logic flaw vulnerability exists in the next-generation firewall of Ruijie Networks...

Oracle MySQL Server 8.0 <= 8.0.22 Security Update (cpuapr2021) - Windows

Oracle MySQL Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2021-3036

An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where secrets in PAN-OS XML API requests are logged in cleartext to the web server logs when the API is used incorrectly. This vulnerability applies only to PAN-OS appliances that are configured to...

CVE-2021-3037

An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where the connection details for a scheduled configuration export are logged in system logs. Logged information includes the cleartext username, password, and IP address used to export the PAN-OS...