Lucene search
+L

13675 matches found

Positive Technologies
Positive Technologies
added 2026/01/15 12:0 a.m.19 views

PT-2026-3110

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 22.4R3-S8 Juniper Networks Junos OS versions 23.2 through 23.2R2-S5 Juniper Networks Junos OS versions 23.4 through 23.4R2-S6 Juniper Networks Junos OS versions 24.2 through 24.2R2-S2 Juniper Network...

8.7CVSS6.8AI score0.00381EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/01/15 12:0 a.m.14 views

PT-2026-3123

A Missing Release of Memory after Effective Lifetime vulnerability in the routing protocol daemon rpd Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated attacker controlling an adjacent IS-IS neighbor to send a specific update packet causing a memory leak. Continued receipt...

7.1CVSS7AI score0.00247EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/01/15 12:0 a.m.12 views

Juniper Junos OS Evolved security vulnerabilities

Juniper Junos OS Evolved is a network operating system developed by the Juniper company. Vulnerabilities exist in versions of Juniper Junos OS Evolved prior to 21.4R3-S7-EVO, 22.2R3-S4-EVO, 22.3R3-S3-EVO, 22.4R3-S2-EVO, 23.2R2-S1-EVO, 23.4R1-S2-EVO, and 23.4R2-EVO. These vulnerabilities stem from...

7.1CVSS5.8AI score0.00236EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/01/15 12:0 a.m.12 views

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved code-related issues and vulnerabilities

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved are both products of Juniper Networks, a US-based company. Juniper Networks Junos OS is a network operating system specifically designed for the company’s hardware devices. This operating system provides secure programming interfaces...

6.9CVSS5.8AI score0.00432EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/01/15 12:0 a.m.31 views

PT-2026-3104

An Untrusted Pointer Dereference vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a local, authenticated attacker with low privileges to cause a Denial-of-Service DoS. When the command 'show route detail' is executed, and at least one of th...

6.8CVSS6.8AI score0.00134EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/01/15 12:0 a.m.25 views

PT-2026-3132

A Use After Free vulnerability in the chassis daemon chassisd of Juniper Networks Junos OS and Junos OS Evolved allows a network-based attacker authenticated with low privileges to cause a Denial-of-Service DoS. When telemetry collectors are frequently subscribing and unsubscribing to sensors...

7.1CVSS6.7AI score0.00348EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.6 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003056)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003056 advisory. The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a...

7.8CVSS6.7AI score0.08665EPSS
SaveExploits0References16
Positive Technologies
Positive Technologies
added 2026/01/15 12:0 a.m.29 views

PT-2026-3109

An Incorrect Permission Assignment for Critical Resource vulnerability in the Juniper DHCP daemon jdhcpd of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged user to write to the Unix socket used to manage the jdhcpd process, resulting in complete control over the...

6.8CVSS6.9AI score0.00122EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.7 views

EulerOS 2.0 SP12 : avahi (EulerOS-SA-2026-1081)

According to the versions of the avahi package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS...

5.3CVSS6.6AI score0.00681EPSS
SaveExploits0References3
OSV
OSV
added 2026/01/14 5:31 p.m.6 views

MGASA-2026-0008 Updated net-snmp packages fix security vulnerability

Net-SNMP snmptrapd crash. CVE-2025-68615...

9.8CVSS6.9AI score0.43981EPSS
SaveExploits2References3
CVE
CVE
added 2026/01/14 3:23 p.m.137 views

CVE-2025-14242

CVE-2025-14242 affects the FTP daemon vsftpd . The vulnerability is a Denial of Service caused by an integer overflow in the parsing of the ls command parameter, exploitable by a remote, authenticated attacker sending a crafted STAT command with a specific byte sequence. The provided documents co...

6.5CVSS6.3AI score0.0075EPSS
SaveExploits0References14
NVD
NVD
added 2026/01/14 12:16 p.m.8 views

CVE-2025-67859

A Improper Authentication vulnerability in TLP allows local users to arbitrarily control the power profile in use as well as the daemon’s log settings.This issue affects TLP: from 1.9 before 1.9.1...

5.1CVSS0.00193EPSS
SaveExploits0References2
CVE
CVE
added 2026/01/14 11:34 a.m.48 views

CVE-2025-67859

The CVE-2025-67859 entry relates to an improper authentication vulnerability in the TLP power daemon (Polkit-related) that allows a local user to arbitrarily change the active power profile and the daemon’s log settings. Affected software is TLP (versions 1.9 before 1.9.1). The issue is categoriz...

5.1CVSS6.3AI score0.00193EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2026/01/14 11:34 a.m.7 views

CVE-2025-67859

A Improper Authentication vulnerability in TLP allows local users to arbitrarily control the power profile in use as well as the daemon’s log settings.This issue affects TLP: from 1.9 before 1.9.1...

5.1CVSS6.7AI score0.00193EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/01/14 11:34 a.m.4 views

CVE-2025-67859

A Improper Authentication vulnerability in TLP allows local users to arbitrarily control the power profile in use as well as the daemon’s log settings.This issue affects TLP: from 1.9 before 1.9.1...

5.1CVSS5.5AI score0.00193EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
added 2026/01/14 11:34 a.m.11 views

CVE-2025-67859

A Improper Authentication vulnerability in TLP allows local users to arbitrarily control the power profile in use as well as the daemon’s log settings.This issue affects TLP: from 1.9 before 1.9.1...

5.1CVSS5.6AI score0.00193EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2026/01/14 12:29 a.m.6 views

kernel: NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL

In the Linux kernel, the following vulnerability has been resolved: NFSD: Avoid calling OPDESC with ops-opnum == OPILLEGAL OPDESC simply indexes into nfsd4ops by the op's operation number, without range checking that value. It assumes callers are careful to avoid calling it with an out-of-bounds...

7.8CVSS5.7AI score0.00278EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/01/14 12:13 a.m.4 views

kernel: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()

A vulnerability has been identified in the Linux kernel's Network File System NFS daemon that could allow for a Denial of Service and in worst case scenario Arbitrary Code Execution. This Use-After-Free flaw arises from a race condition when the kernel handles the confirmation of an NFS client...

9.8CVSS5.8AI score0.00378EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/01/14 12:13 a.m.7 views

kernel: NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL

In the Linux kernel, the following vulnerability has been resolved: NFSD: Avoid calling OPDESC with ops-opnum == OPILLEGAL OPDESC simply indexes into nfsd4ops by the op's operation number, without range checking that value. It assumes callers are careful to avoid calling it with an out-of-bounds...

7.8CVSS5.7AI score0.00278EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/01/14 12:10 a.m.3 views

kernel: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()

A vulnerability has been identified in the Linux kernel's Network File System NFS daemon that could allow for a Denial of Service and in worst case scenario Arbitrary Code Execution. This Use-After-Free flaw arises from a race condition when the kernel handles the confirmation of an NFS client...

9.8CVSS5.8AI score0.00378EPSS
SaveExploits0References5
Rows per page
Query Builder