786958 matches found
CVE-2026-106079
The AccessManager component in Juniper Networks Session Smart Router and Session Smart Conductor is susceptible to an OS Command Injection vulnerability (CWE-78). This issue stems from an improper neutralization of special elements used in an OS command during the YANG configuration update proces...
CVE-2026-106079 Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configuration
An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in AccessManager in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with config-write privileges to achieve arbitrary command execution as root in the YAN...
EUVD-2026-112167
An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in AccessManager in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with config-write privileges to achieve arbitrary command execution as root in the YAN...
CVE-2026-103408 Session Smart Router: An attacker-controlled input causes remote code execution when parsing DHCP options
A Stack Buffer Overflow vulnerability in the DHCP client in Juniper Networks Session Smart Router allows an unauthenticated attacker on the local network to achieve remote code execution via a malicious DHCP reply...
CVE-2026-103408
A Stack Buffer Overflow vulnerability exists in the DHCP client of the Juniper Networks Session Smart Router . An unauthenticated attacker on the local network can achieve remote code execution by sending a malicious DHCP reply, specifically by providing attacker-controlled input during the parsi...
EUVD-2026-112213
A Stack Buffer Overflow vulnerability in the DHCP client in Juniper Networks Session Smart Router allows an unauthenticated attacker on the local network to achieve remote code execution via a malicious DHCP reply...
CVE-2026-103406 Session Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management.
An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in Juniper Networks Session Smart Conductor allows a remote attacker to execute arbitrary commands as root via a specially crafted salt minion ID...
CVE-2026-103406
The AutomatedProvisioner component in Juniper Networks Session Smart Conductor is vulnerable to an OS Command Injection flaw (CWE-78). A remote, unauthenticated attacker can execute arbitrary commands with root privileges by providing a specially crafted salt minion ID . This vulnerability occurs...
CVE-2026-103403
A vulnerability in AccessManager within Juniper Networks Session Smart Router and Session Smart Conductor allows for OS Command Injection (CWE-78). An attacker can perform arbitrary file deletion and arbitrary command execution by deleting an audit rule. The vulnerability stems from the improper ...
EUVD-2026-112218
An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in AccessManager in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to perform arbitrary file deletion and arbitrary command execution via the deletion of...
CVE-2026-103403 Session Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rules
An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in AccessManager in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to perform arbitrary file deletion and arbitrary command execution via the deletion of...
EUVD-2026-112219
An Insufficient Verification of Data Authenticity vulnerability in PCLI in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with write access to the model cache directory to execute arbitrary code and escalate privileges via the processing of unverified cache...
CVE-2026-103402
The Juniper Networks Session Smart Router and Session Smart Conductor are affected by an Insufficient Verification of Data Authenticity vulnerability in the PCLI component. The root cause is the processing of unverified cache files, which allows an attacker with write access to the model cache di...
CVE-2026-103402 Session Smart Router and Session Smart Conductor: Lack of integrity verification in cache files causes arbitrary code execution and privilege escalation
An Insufficient Verification of Data Authenticity vulnerability in PCLI in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with write access to the model cache directory to execute arbitrary code and escalate privileges via the processing of unverified cache...
CVE-2026-93536 X.Org Server GestureBuildSprite Use-After-Free
A use after free caused by missing lifecycle management of gesture sprites in GestureBuildSprite in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash the X server or potentially execute code...
EUVD-2026-112225
A use after free caused by missing lifecycle management of gesture sprites in GestureBuildSprite in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash the X server or potentially execute code...
CVE-2026-93536
A use-after-free vulnerability exists in X.Org X Server (before 21.1.25) and XWayland (before 24.1.14) due to missing lifecycle management of gesture sprites in GestureBuildSprite(). An authenticated X client can trigger this by providing inputs that cause WindowGone() to fail in repairing touch ...
CVE-2026-93536
A use after free caused by missing lifecycle management of gesture sprites in GestureBuildSprite in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash the X server or potentially execute code...
CVE-2022-30190---Follina---Poc-Exploit
Follina - CVE-2022-30190 Follina is a zero day allowing code execution in Office products. Installation git clone https://github.com/WesyHub/CVE-2022-30190---Follina---Poc-Exploit.git Usage Example : python3 FollinaSploit.py -c calc -o poc.docx -p 80 Please make sure to send the doc or rtf file t...
AZL-112297 CVE-2026-93522 affecting package xorg-x11-server-Xwayland for versions less than 24.1.14-1
A heap buffer overflow caused by mismatched size usage in CopyArea CPU-to-FBO path in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in the X server context...