Lucene search
K

24 matches found

Vulnrichment
Vulnrichment
added 2026/04/09 9:36 p.m.1 views

CVE-2026-33784 JSI Virtual Lightweight Collector: Default password is not required to be changed which allows unauthorized high-privileged access

A Use of Default Password vulnerability in the Juniper Networks Support Insights JSI Virtual Lightweight Collector vLWC allows an unauthenticated, network-based attacker to take full control of the device. vLWC software images ship with an initial password for a high privileged account. A change ...

9.8CVSS5.8AI score0.00059EPSS
Exploits0References1
Circl
Circl
added 2026/04/09 6:0 p.m.0 views

CVE-2026-33780

creationtimestamp| type| source ---|---|--- 2026-04-09 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/juniper-junos-os-multiple-vulnerabilities20260410 2026-04-09 22:32:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3ufqogbt2i...

7.1CVSS5.7AI score0.00021EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/04/09 12:0 a.m.3 views

Juniper Networks Junos OS SRX 代码问题漏洞

Juniper Networks Junos OS SRX is a network operating system specifically designed for hardware devices used by Juniper Networks. This operating system provides secure programming interfaces and the Junos SDK. There are code vulnerabilities in versions of Juniper Networks Junos OS on SRX1500,...

6.8CVSS5.9AI score0.00017EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/16 9:33 p.m.2 views

CVE-2026-21914

An Improper Locking vulnerability in the GTP plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service Dos. If an SRX Series device receives a specifically malformed GPRS Tunnelling Protocol GTP Modify Bearer Request message, ...

8.7CVSS6.8AI score0.00016EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/15 8:20 p.m.2 views

CVE-2026-21906 Junos OS: SRX Series: With GRE performance acceleration enabled, receipt of a specific ICMP packet causes the PFE to crash

An Improper Handling of Exceptional Conditions vulnerability in the packet forwarding engine PFE of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker sending a specific ICMP packet through a GRE tunnel to cause the PFE to crash and restart. When PowerMode...

8.7CVSS6.7AI score0.00022EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2014-2742

Malware in sbrugna...

7.1CVSS6.4AI score0.00721EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2013-7090

Malware in sbrugna...

5.4CVSS6.4AI score0.00162EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-0876

Malware in sbrugna...

5.9CVSS5.6AI score0.0002EPSS
Exploits0References2
OSV
OSV
added 2025/01/09 5:15 p.m.1 views

CVE-2025-21596

An Improper Handling of Exceptional Conditions vulnerability in the command-line processing of Juniper Networks Junos OS on SRX1500, SRX4100, and SRX4200 devices allows a local, low-privileged authenticated attacker executing the 'show chassis environment pem' command to cause the chassis daemon...

6.8CVSS5.9AI score
Exploits0References1
CNNVD
CNNVD
added 2021/10/13 12:0 a.m.2 views

Juniper Networks Junos OS 代码问题漏洞

Junos OS is a FreeBSD-based operating system used in Juniper Networks hardware routers. It is the operating system used in Juniper Networks routing, switching, and security appliances. A denial of service vulnerability exists in the flow daemon flowd on the Juniper Networks Junos OS SRX300 Series...

5.9CVSS5.8AI score0.00328EPSS
Exploits0References4
OSV
OSV
added 2021/04/22 8:15 p.m.1 views

CVE-2021-0240

On Juniper Networks Junos OS platforms configured as DHCPv6 local server or DHCPv6 Relay Agent, the Juniper Networks Dynamic Host Configuration Protocol Daemon JDHCPD process might crash if a malformed DHCPv6 packet is received, resulting in a restart of the daemon. The daemon automatically...

6.5CVSS6.6AI score
Exploits0References1
CNVD
CNVD
added 2020/10/19 12:0 a.m.3 views

Junos OS SRX/NFX Elevation of Privilege Vulnerability

The Junos OS SRX/NFX is a switch from Juniper Networks. A security vulnerability exists in the Junos OS SRX/NFX's handling of Web API private keys, which can be exploited by a remote attacker to submit a special request that can elevate privileges...

6.5CVSS7AI score0.00054EPSS
Exploits0References1
OSV
OSV
added 2020/10/16 9:15 p.m.1 views

CVE-2020-1688

On Juniper Networks SRX Series and NFX Series, a local authenticated user with access to the shell may obtain the Web API service private key that is used to provide encrypted communication between the Juniper device and the authenticator services. Exploitation of this vulnerability may allow an...

6.5CVSS6.6AI score
Exploits0References5
OSV
OSV
added 2020/10/16 9:15 p.m.0 views

CVE-2020-1687

On Juniper Networks EX4300-MP Series, EX4600 Series and QFX5K Series deployed in Ethernet VPN EVPN-Virtual Extensible LAN VXLAN configuration, receipt of a stream of specific VXLAN encapsulated layer 2 frames can cause high CPU load, which could lead to network protocol operation issue and traffi...

6.5CVSS6.6AI score
Exploits0References1
OSV
OSV
added 2020/10/16 9:15 p.m.1 views

CVE-2020-1685

When configuring stateless firewall filters in Juniper Networks EX4600 and QFX 5000 Series devices using Virtual Extensible LAN protocol VXLAN, the discard action will fail to discard traffic under certain conditions. Given a firewall filter configuration similar to: family ethernet-switching...

5.8CVSS6.2AI score
Exploits0References1
OSV
OSV
added 2019/10/09 8:15 p.m.0 views

CVE-2019-0075

A vulnerability in the srxpfe process on Protocol Independent Multicast PIM enabled SRX series devices may lead to crash of the srxpfe process and an FPC reboot while processing PIM messages. Sustained receipt of these packets may lead to an extended denial of service condition. Affected releases...

7.5CVSS5.8AI score
Exploits0References1
OSV
OSV
added 2019/10/09 8:15 p.m.1 views

CVE-2019-0068

The SRX flowd process, responsible for packet forwarding, may crash and restart when processing specific multicast packets. By continuously sending the specific multicast packets, an attacker can repeatedly crash the flowd process causing a sustained Denial of Service. This issue affects Juniper...

7.5CVSS5.8AI score0.00277EPSS
Exploits0References1
OSV
OSV
added 2018/10/10 6:29 p.m.1 views

CVE-2018-0051

A Denial of Service vulnerability in the SIP application layer gateway ALG component of Junos OS based platforms allows an attacker to crash MS-PIC, MS-MIC, MS-MPC, MS-DPC or SRX flow daemon flowd process. This issue affects Junos OS devices with NAT or stateful firewall configuration in...

5.9CVSS5.8AI score0.00406EPSS
Exploits0References2
OSV
OSV
added 2018/04/11 7:29 p.m.0 views

CVE-2018-0018

On SRX Series devices during compilation of IDP policies, an attacker sending specially crafted packets may be able to bypass firewall rules, leading to information disclosure which an attacker may use to gain control of the target device or other internal devices, systems or services protected b...

5.9CVSS5.7AI score
Exploits0References3
OSV
OSV
added 2018/01/10 10:29 p.m.0 views

CVE-2018-0002

On SRX Series and MX Series devices with a Service PIC with any ALG enabled, a crafted TCP/IP response packet processed through the device results in memory corruption leading to a flowd daemon crash. Sustained crafted response packets lead to repeated crashes of the flowd daemon which results in...

5.9CVSS5.8AI score0.0184EPSS
Exploits0References2
Rows per page
Query Builder