CVE-2014-6447: Improper Neutralization of Input During Web Page Generation

Multiple vulnerabilities exist in Juniper Junos J-Web error handling that may lead to cross site scripting XSS issues or crash the J-Web service DoS. This affects Juniper Junos OS 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D20, 12.3 before 12.3R8, 12.3X48 befor...

PT-2020-7726

Name of the Vulnerable Software and Affected Versions Juniper Junos OS versions 12.1X44 through 12.1X44-D45 Juniper Junos OS versions 12.1X46 through 12.1X46-D30 Juniper Junos OS versions 12.1X47 through 12.1X47-D20 Juniper Junos OS versions 12.3 through 12.3R8 Juniper Junos OS versions 12.3X48...

Juniper Networks Junos OS and Junos OS Evolved Resource Management Error Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A resource management error vulnerability exists in the IPv4 JDHCPD service in Juniper Networks Junos OS and Junos OS...

Junos OS: Broadband Edge Service Denial of Service (DoS) Vulnerability (JSA10987)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability due to an unspecified issue in the processing of packets destined to Broadband Edge BBE clients connected to MX Series subscriber management platforms. Receipt of a...

Junos OS: pccd DoS (JSA10980)

According to its self-reported version number, the remote Juniper Junos device is affected by a vulnerability in the path computational element protocol daemon pccd process. An unauthenticated, remote attacker can exploit this issue, by sending malformed Path Computation Element Protocol PCEP...

Junos OS: Cross-Site Scripting (XSS) in J-Web (JSA10986)

According to its self-reported version number, the remote Juniper Junos device is affected by a cross-site scripting XSS vulnerability in J-Web due to insufficient XSS protection. An unauthenticated, remote attacker can exploit this, via injecting web script or HTML to hijack the target user's...

Junos OS: Path traversal vulnerability in J-Web (JSA10985)

According to its self-reported version number, a path traversal vulnerability in the Juniper Networks Junos OS device may allow an authenticated J-web user to read files with 'world' readable permission and delete files with 'world' writeable permission. Note that Nessus has not tested for this...

Multiple Vulnerabilities in Juniper Junos (JSA10954)

According to the self reported version of Junos OS on the remote device it is affected by a Denial of Service DoS vulnerability. A remote unauthenticated attacker can exploit this, to cause the device's Open Shortest Path First OSPF states to transition to Down, resulting in a Denial of Service D...

CVE-2014-6448

Juniper Junos OS 13.2 before 13.2R5, 13.2X51, 13.2X52, and 13.3 before 13.3R3 allow local users to bypass intended restrictions and execute arbitrary Python code via vectors involving shell access...

Code injection

Juniper Junos OS 13.2 before 13.2R5, 13.2X51, 13.2X52, and 13.3 before 13.3R3 allow local users to bypass intended restrictions and execute arbitrary Python code via vectors involving shell access...

CVE-2014-6448

Juniper Junos OS 13.2 before 13.2R5, 13.2X51, 13.2X52, and 13.3 before 13.3R3 allow local users to bypass intended restrictions and execute arbitrary Python code via vectors involving shell access...

CVE-2014-6448

CVE-2014-6448 affects Juniper Networks Junos OS: versions 13.2 before 13.2R5, 13.2X51, 13.2X52, and 13.3 before 13.3R3. The vulnerability allows local users to bypass restrictions and execute arbitrary Python code through vectors involving shell access. The cited sources describe a local privileg...

CVE-2020-1605

When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon JDHCPD process on Junos OS or Junos OS Evolved which is configured in relay mode it vulnerable to an attacker sending crafted IPv4 packets who may then arbitrarily execute commands as root on the target device. This...

CVE-2020-1609

When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon JDHCPD process on Junos OS or Junos OS Evolved which is configured in relay mode it vulnerable to an attacker sending crafted IPv6 packets who may then arbitrarily execute commands as root on the target device. This...

CVE-2020-1603

Specific IPv6 packets sent by clients processed by the Routing Engine RE are improperly handled. These IPv6 packets are designed to be blocked by the RE from egressing the RE. Instead, the RE allows these specific IPv6 packets to egress the RE, at which point a mbuf memory leak occurs within the...

CVE-2020-1604

On EX4300, EX4600, QFX3500, and QFX5100 Series, a vulnerability in the IP firewall filter component may cause the firewall filter evaluation of certain packets to fail. This issue only affects firewall filter evaluation of certain packets destined to the device Routing Engine RE. This issue does...

CVE-2020-1607

Insufficient Cross-Site Scripting XSS protection in J-Web may potentially allow a remote attacker to inject web script or HTML, hijack the target user's J-Web session and perform administrative actions on the Junos device as the targeted user. This issue affects Juniper Networks Junos OS 12.3...

CVE-2020-1608

Receipt of a specific MPLS or IPv6 packet on the core facing interface of an MX Series device configured for Broadband Edge BBE service may trigger a kernel crash vmcore, causing the device to reboot. The issue is specific to the processing of packets destined to BBE clients connected to MX Serie...

CVE-2020-1611

A Local File Inclusion vulnerability in Juniper Networks Junos Space allows an attacker to view all files on the target when the device receives malicious HTTP packets. This issue affects: Juniper Networks Junos Space versions prior to 19.4R1...

CVE-2020-1604

On EX4300, EX4600, QFX3500, and QFX5100 Series, a vulnerability in the IP firewall filter component may cause the firewall filter evaluation of certain packets to fail. This issue only affects firewall filter evaluation of certain packets destined to the device Routing Engine RE. This issue does...