877 matches found
CVE-2009-3485
Cross-site scripting XSS vulnerability in the J-Web interface in Juniper JUNOS 8.5R1.14 and 9.0R1.1 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to the default URI...
CVE-2009-3487
Multiple cross-site scripting XSS vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authenticated users to inject arbitrary web script or HTML via 1 the JEXECOUTID parameter in a JEXECMODERELAYOUTPUT action to the jexec program; the 2 act, 3 refresh-time, or 4 ifid...
CVE-2009-3486
Multiple cross-site scripting XSS vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authenticated users to inject arbitrary web script or HTML via the host parameter to 1 the pinghost program, reachable through the diagnose program; or 2 the traceroute program, reachab...
Design/Logic Flaw
The IPv6 Neighbor Discovery Protocol NDP implementation in 1 FreeBSD 6.3 through 7.1, 2 OpenBSD 4.2 and 4.3, 3 NetBSD, 4 Force10 FTOS before E7.7.1.1, 5 Juniper JUNOS, and 6 Wind River VxWorks 5.x through 6.4 does not validate the origin of Neighbor Discovery messages, which allows remote attacke...
CVE-2008-2476
The CVE-2008-2476 issue concerns the IPv6 Neighbor Discovery Protocol (NDP) implementation in several vendors (FreeBSD 6.3–7.1; OpenBSD 4.2–4.3; NetBSD; Force10 FTOS pre-E7.7.1.1; Juniper JUNOS; Wind River VxWorks 5.x–6.4) that does not validate the origin of Neighbor Discovery messages. This all...
CVE-2007-6372
Unspecified vulnerability in Juniper JUNOS 7.3 through 8.4 allows remote attackers to cause a denial of service crash via malformed BGP packets, possibly BGP UPDATE packets that trigger session flapping...
Session fixation
Unspecified vulnerability in Juniper JUNOS 7.3 through 8.4 allows remote attackers to cause a denial of service crash via malformed BGP packets, possibly BGP UPDATE packets that trigger session flapping...
CVE-2007-6372
Unspecified vulnerability in Juniper JUNOS 7.3 through 8.4 allows remote attackers to cause a denial of service crash via malformed BGP packets, possibly BGP UPDATE packets that trigger session flapping...
CVE-2006-3529
Memory leak in Juniper JUNOS 6.4 through 8.0, built before May 10, 2006, allows remote attackers to cause a denial of service kernel packet memory consumption and crash via crafted IPv6 packets whose buffers are not released after they are processed...
CVE-2006-3529
Memory leak in Juniper JUNOS 6.4 through 8.0, built before May 10, 2006, allows remote attackers to cause a denial of service kernel packet memory consumption and crash via crafted IPv6 packets whose buffers are not released after they are processed...
CVE-2006-3529
Juniper JUNOS IPv6 denial-of-service vulnerability (CVE-2006-3529) affects JUNOS 6.4–8.0 built before 10 May 2006. The issue is a memory leak where memory allocated for certain IPv6 packets is not freed, allowing remote attackers to exhaust kernel packet memory and crash the device. Affected devi...
CVE-2005-3733
Technical details for CVE-2005-3733 are not publicly provided in the connected documents. The sources reference related CVEs (CVE-2005-3666/3667/3668/3732) but do not specify Juniper JUNOS/E-series specifics or IKEv1 conditions for this CVE.
[SA17568] Juniper JUNOS/JUNOSe ISAKMP IKE Message Processing Denial of Service
TITLE: Juniper JUNOS/JUNOSe ISAKMP IKE Message Processing Denial of Service SECUNIA ADVISORY ID: SA17568 VERIFY ADVISORY: http://secunia.com/advisories/17568/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote OPERATING SYSTEM: JUNOSe 7.x http://secunia.com/product/6108/ JUNOSe 6.x...
CVE-2004-0467
Juniper JUNOS 5.x through JUNOS 7.x allows remote attackers to cause a denial of service routing disabled via a large number of MPLS packets, which are not filtered or verified before being sent to the Routing Engine, which reduces the speed at which other packets are processed...
CVE-2004-0467
Juniper JUNOS 5.x through JUNOS 7.x allows remote attackers to cause a denial of service routing disabled via a large number of MPLS packets, which are not filtered or verified before being sent to the Routing Engine, which reduces the speed at which other packets are processed...