Design/Logic Flaw

J-Web in Juniper vSRX virtual firewalls with Junos OS before 15.1X49-D20 allows remote attackers to cause a denial of service system reboot via unspecified vectors...

CVE-2014-6450

Juniper Junos OS before 11.4R12-S4, 12.1X44 before 12.1X44-D41, 12.1X46 before 12.1X46-D26, 12.1X47 before 12.1X47-D11/D15, 12.2 before 12.2R9, 12.2X50 before 12.2X50-D70, 12.3 before 12.3R8, 12.3X48 before 12.3X48-D10, 12.3X50 before 12.3X50-D42, 13.1 before 13.1R4-S3, 13.1X49 before 13.1X49-D42...

CVE-2014-6450

CVE-2014-6450 affects Juniper Networks Junos OS when IPv6 is enabled. The vulnerability allows remote attackers to cause a denial of service via crafted IPv6 packets, leading to mbuf chain corruption and a kernel panic. Affected versions include Junos OS releases listed in the CVE description (e....

CVE-2014-6451

J-Web in Juniper vSRX virtual firewalls with Junos OS before 15.1X49-D20 allows remote attackers to cause a denial of service system reboot via unspecified vectors...

CVE-2014-6449

Juniper Junos OS before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D15, 13.2 before 13.2R8, 13.3 before 13.3R7, 14.1 before 14.1R5, and 14.2 before 14.2R1 do not properly handle TCP packet reassembly, which allows remote...

CVE-2014-6449

CVE-2014-6449 affects Juniper Networks Junos OS (multiple branches/versions) where TCP packet reassembly is mishandled. A remote attacker can cause a denial of service by sending a crafted sequence of packets destined to the device, leading to buffer consumption. Concretely, the vulnerability tar...

CVE-2014-6451

Summary: CVE-2014-6451 affects Juniper Networks Junos OS J-Web on SRX5000-series devices, where the J-Web service is vulnerable to a remote denial of service that causes a system reboot. The vulnerability is described with unspecified vectors. Public references in connected data identify the issu...

Juniper Networks Junos Space Multiple Vulnerabilities (JSA10698)

Juniper Networks Junos Space is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Network based denial of service vulnerability in ScreenOS

A vulnerability in ScreenOS L2TP packet processing may allow a remote network based attacker to cause a denial of service condition on ScreenOS devices by sending a crafted L2TP packet. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources,...

Juniper Networks Junos Space Detection (SSH Login)

SSH login-based detection of Juniper Networks Junos Space. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

CVE-2015-7322

The CVE-2015-7322 issue affects Pulse Connect Secure’s Secure Meeting (Pulse Collaboration). Affected releases expose different join-meeting messages based on meeting status, enabling remote attackers to enumerate valid meeting IDs by issuing a sequence of requests. This is an information-disclos...

Junos Pulse Secure Meeting 8.0.5 Access Bypass

Profundis Labs Security Advisory https://profundis-labs.com/advisories/CVE-2015-7323.txt Product: ================================ Junos Pulse Secure Meeting Secure Meeting is a part of the Junos Puls Collaboration software, which allows you to organize and holding virtual meetings with internal...

CVE-2015-5369

Pulse Connect Secure (PCS) devices with Hardware Acceleration enabled are affected by CVE-2015-5369 due to improper validation of the TLS Finished handshake, enabling MITM via a crafted Finished message. Affected lines include PCS 8.1 before 8.1r5, 8.0 before 8.0r13, 7.4 before 7.4r13.5, and 7.1 ...

Juniper Pulse Secure TCP Hardware Acceleration User Data Access Vulnerability

Juniper Networks' Secure Access is an enterprise-grade SSL VPN access device, and the operating system running on the device is Juniper IVE OS. A security vulnerability in Juniper Pulse Secure TCP Hardware Acceleration allows remote users to exploit a TCP handshake checksum vulnerability which, i...

Juniper Junos bfdd RCE (JSA10690)

According to its self-reported version number, the remote Juniper Junos device is affected by a remote code execution vulnerability in the BFD daemon bfdd. A remote attacker, using a specially crafted BFD packet, can exploit this to cause a denial of service or execute arbitrary code. Note that...

Juniper Junos J-Web Multiple Vulnerabilities (JSA10682)

According to its self-reported version number, the remote Juniper Junos device is affected by multiple vulnerabilities in the J-Web component : - A cross-site scripting vulnerability exists due to a failure to validate input before returning it to users. A remote attacker, using a crafted request...

Juniper Junos IPv6 sendd DoS (JSA10688)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability in sendd due to improper handling of IPv6 Secure Neighbor Discovery SEND Protocol packets when the Secure Neighbor Discovery feature is configured. A remote attacker,...

Juniper Junos SRX Series 'set system ports console insecure' Local Privilege Escalation (JSA10683)

According to its self-reported version number, the remote Juniper Junos SRX Series device is affected by a privilege escalation vulnerability related to the 'set system ports console insecure' feature. A local attacker can exploit this vulnerability by using access to a console port to gain full...

Juniper Junos BGP-VPLS Advertisements RPD DoS (JSA10687)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability due to improper handling of BGP-VPLS advertisements with updated BGP local preference values. A remote attacker can exploit this to crash RDP with a NULL pointer deferen...

Juniper Junos LAST_ACK State DoS (JSA10686)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability due to the improper handling of TCP connection transitions to the LASTACK state when the device has more data to send. A remote attacker can exploit this cause the socke...