Lucene search
+L

7873 matches found

Positive Technologies
Positive Technologies
•added 2025/10/09 12:00 a.m.•26 views

PT-2025-41408

Name of the Vulnerable Software and Affected Versions Juniper Security Director versions prior to 24.1R4 Description An Improper Neutralization of Input During Web Page Generation issue exists in Juniper Security Director, allowing an attacker to inject malicious scripts into the application. The...

9.3CVSS5.8AI score0.00379EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/10/09 12:00 a.m.•19 views

PT-2025-41407

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos Space Security Director versions prior to 24.1R3 Patch V4 Description A missing authorization issue exists in Juniper Networks Junos Space Security Director. An unauthenticated network-based attacker can read or modify...

8.6CVSS6.5AI score0.00304EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/10/09 12:00 a.m.•15 views

PT-2025-41417

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos Space versions prior to 24.1R4 Description An issue exists in Juniper Networks Junos Space that allows an attacker to inject script tags into the Device Template Definition page. When another user visits this page, the...

6.1CVSS6.3AI score0.00275EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/10/09 12:00 a.m.•9 views

Juniper Networks Junos Space Security Director 跨站脚本漏洞

Juniper Networks Junos Space Security Director is an application for managing Junos Space solutions from Juniper Networks, Inc. A cross-site scripting vulnerability exists in Juniper Networks Junos Space Security Director prior to version 24.1R4, which stems from improper input neutralization...

9.3CVSS5.9AI score0.00379EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/09 12:00 a.m.•14 views

Juniper Networks Junos Space 跨站脚本漏洞

Juniper Networks Junos Space is a suite of network management solutions from Juniper Networks, Inc. The solution supports automated configuration, monitoring, and troubleshooting of devices and services throughout their lifecycle. A cross-site scripting vulnerability exists in Juniper Networks...

6.1CVSS5.8AI score0.00222EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/09 12:00 a.m.•12 views

Juniper Networks Junos Space 跨站脚本漏洞

Juniper Networks Junos Space is a suite of network management solutions from Juniper Networks, Inc. The solution supports automated configuration, monitoring, and troubleshooting of devices and services throughout their lifecycle. A cross-site scripting vulnerability exists in Juniper Networks...

6.1CVSS5.9AI score0.00222EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/09 12:00 a.m.•12 views

Juniper Networks Junos Space 跨站脚本漏洞

Juniper Networks Junos Space is a suite of network management solutions from Juniper Networks, Inc. The solution supports automated configuration, monitoring, and troubleshooting of devices and services throughout their lifecycle. A cross-site scripting vulnerability exists in Juniper Networks...

6.1CVSS5.9AI score0.00222EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/09 12:00 a.m.•13 views

PT-2025-41429

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos Space versions prior to 24.1R4 Description An issue exists in Juniper Networks Junos Space that allows an attacker to inject script tags into the Space Node Setting fields. When another user visits the affected page, the...

6.1CVSS6.6AI score0.00222EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/10/09 12:00 a.m.•18 views

Juniper Networks Junos Space Security Director 安全漏洞

Juniper Networks Junos Space Security Director is an application for managing Junos Space solutions from Juniper Networks, Inc. A security vulnerability exists in Juniper Networks Junos Space Security Director prior to version 24.1R3 Patch V4, which stems from a lack of authorization and could...

8.6CVSS6.5AI score0.00304EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/09 12:00 a.m.•1 views

CVE-2025-59974: Improper Neutralization of Input During Web Page Generation

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Junos Space Security Director allows an attacker to inject malicious scripts into the application, which are then stored and executed in the context of other users' browsers when they access...

9.3CVSS5.8AI score0.00379EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/09 12:00 a.m.•33 views

PT-2025-41422

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos Space versions prior to 24.1R4 Description An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' issue exists in Juniper Networks Junos Space. This allows an attacker to inject script tags...

6.1CVSS6.8AI score0.00222EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/09 12:00 a.m.•2 views

CVE-2025-59998: Improper Neutralization of Input During Web Page Generation

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Archive Log screen that, when visited by another user, enables the attacker to execute commands with the target's...

6.1CVSS6.1AI score0.00222EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/09 12:00 a.m.•21 views

PT-2025-41435

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos Space versions prior to 24.1R4 Description An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' issue exists in Juniper Networks Junos Space. This allows an attacker to inject script tags...

6.1CVSS6.9AI score0.00235EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/09 12:00 a.m.•2 views

CVE-2025-59976: Files or Directories Accessible to External Parties

An arbitrary file download vulnerability in the web interface of Juniper Networks Junos Space allows a network-based authenticated attacker using a crafted GET method to access any file on the file system. Using specially crafted GET methods, an attacker can gain access to files beyond the file...

7.1CVSS5.9AI score0.00285EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/09 12:00 a.m.•1 views

CVE-2025-59978: Improper Neutralization of Input During Web Page Generation

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to store script tags directly in web pages that, when viewed by another user, enable the attacker to execute commands with the target's...

9.4CVSS6.1AI score0.00531EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/09 12:00 a.m.•1 views

CVE-2025-59984: Improper Neutralization of Input During Web Page Generation

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in Global Search that, when visited by another user, enables the attacker to execute commands with the target's permissions,...

6.1CVSS6.1AI score0.00222EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/09 12:00 a.m.•2 views

CVE-2025-59992: Improper Neutralization of Input During Web Page Generation

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Secure Console page that, when visited by another user, enables the attacker to execute commands with the target's...

6.1CVSS6.1AI score0.00222EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/10/09 12:00 a.m.•9 views

AlmaLinux 10 : thunderbird (ALSA-2025:10195)

The remote AlmaLinux 10 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2025:10195 advisory. thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links CVE-2025-5986 Tenable has extracted the preceding...

6.5CVSS7.1AI score0.0058EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/10/09 12:00 a.m.•13 views

Juniper Networks Junos Space 跨站脚本漏洞

Juniper Networks Junos Space is a suite of network management solutions from Juniper Networks, Inc. The solution supports automated configuration, monitoring, and troubleshooting of devices and services throughout their lifecycle. A cross-site scripting vulnerability exists in Juniper Networks...

6.1CVSS5.9AI score0.00222EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/09 12:00 a.m.•2 views

CVE-2025-59982: Improper Neutralization of Input During Web Page Generation

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the dashboard search field that, when visited by another user, enables the attacker to execute commands with the target's...

6.1CVSS6.1AI score0.00275EPSS
SaveExploits0References1
Rows per page
Query Builder