EUVD-2020-12531

Malware in sbrugna...

CVE-2020-1669

The Juniper Device Manager JDM container, used by the disaggregated Junos OS architecture on Juniper Networks NFX350 Series devices, stores password hashes in the world-readable file /etc/passwd. This is not a security best current practice as it can allow an attacker with access to the local...

NFX Series: Insecure sshd configuration in Juniper Device Manager (JDM) and host OS (JSA10878)

According to its self-reported version number, the remote Juniper Junos device is affected by a vulnerability. With an insecure SSHD configuration in Juniper Device Manager, a remote, unauthenticated attacker can gain access if any of the passwords on the system are empty. The affected SSHD...

Juniper Networks SRX5000 Junos OS Input Validation Error Vulnerability

The Juniper Networks SRX5000 is a 5000 Series security services gateway appliance from Juniper Networks, Inc.Junos OS is a network operating system dedicated to the company's hardware devices. An input validation error vulnerability exists in Juniper Networks SRX5000 in Junos OS versions 12.1X46,...

CVE-2019-0018

A persistent cross-site scripting XSS vulnerability in the file upload menu of Juniper ATP may allow an authenticated user to inject arbitrary scripts and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform...

The vulnerability of the Juniper Device Manager (JDM) operating system, allowing a hacker to gain full access to the device

The vulnerability of the Juniper Device Manager JDM operating system is related to the use of a default password for SSHD. Exploiting this vulnerability can allow an attacker to gain full access to the device...

CVE-2018-0044

An insecure SSHD configuration in Juniper Device Manager JDM and host OS on Juniper NFX Series devices may allow remote unauthenticated access if any of the passwords on the system are empty. The affected SSHD configuration has the PermitEmptyPasswords option set to "yes". Affected releases are...

CVE-2018-0044 NFX Series: Insecure sshd configuration in Juniper Device Manager (JDM) and host OS

An insecure SSHD configuration in Juniper Device Manager JDM and host OS on Juniper NFX Series devices may allow remote unauthenticated access if any of the passwords on the system are empty. The affected SSHD configuration has the PermitEmptyPasswords option set to "yes". Affected releases are...

Juniper Junos IPv6 sendd DoS (JSA10688)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability in sendd due to improper handling of IPv6 Secure Neighbor Discovery SEND Protocol packets when the Secure Neighbor Discovery feature is configured. A remote attacker,...