7172 matches found
CVE-2016-1257: Improper Input Validation
The Routing Engine in Juniper Junos OS 13.2R5 through 13.2R8, 13.3R1 before 13.3R8, 13.3R7 before 13.3R7-S3, 14.1R1 before 14.1R6, 14.1R3 before 14.1R3-S9, 14.1R4 before 14.1R4-S7, 14.1X51 before 14.1X51-D65, 14.1X53 before 14.1X53-D12, 14.1X53 before 14.1X53-D28, 14.1X53 before 4.1X53-D35, 14.2R...
CVE-2016-1256: Undefined Security Weakness
Juniper Junos OS before 12.1X44-D55, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R8, 13.2X51 before 13.2X51-D40, 13.3 before 13.3R7, 14.1 before 14.1R5, 14.1X53 before 14.1X53-D18 or 14.1X53-D30, 14.1X55 before...
PT-2016-4676
Name of the Vulnerable Software and Affected Versions Juniper Junos OS versions prior to 13.2X51-D36 Juniper Junos OS versions prior to 14.1X53-D25 Juniper Junos OS versions prior to 15.2R1 Description The issue allows remote attackers to cause a denial of service, resulting in a network loop and...
CVE-2016-1260: Undefined Security Weakness
Juniper Junos OS before 13.2X51-D36, 14.1X53 before 14.1X53-D25, and 15.2 before 15.2R1 on EX4300 series switches allow remote attackers to cause a denial of service network loop and bandwidth consumption via unspecified vectors related to Spanning Tree Protocol STP traffic...
PT-2016-4673
Name of the Vulnerable Software and Affected Versions Juniper Junos OS versions prior to 12.1X44-D55 Juniper Junos OS versions 12.1X46 prior to 12.1X46-D40 Juniper Junos OS versions 12.1X47 prior to 12.1X47-D25 Juniper Junos OS versions 12.3 prior to 12.3R10 Juniper Junos OS versions 12.3X48 prio...
Juniper Removes Dual_EC, ANSI X9.31 Algorithms
Juniper Networks announced late Friday it was removing the suspicious DualECDRBG random number generator from its ScreenOS operating system. And while that’s heralded as a positive move considering DualEC’s dubious origins, there remain important and unanswered questions about Juniper’s decision ...
Exploit for Improper Authentication in Juniper Screenos
CVE-2015-7755-POC CVE-2015-7755 vuln...
CVE-2015-7754
Juniper ScreenOS before 6.3.0r21, when ssh-pka is configured and enabled, allows remote attackers to cause a denial of service system crash or execute arbitrary code via crafted SSH negotiation...
Design/Logic Flaw
Juniper ScreenOS before 6.3.0r21, when ssh-pka is configured and enabled, allows remote attackers to cause a denial of service system crash or execute arbitrary code via crafted SSH negotiation...
CVE-2015-7754
CVE-2015-7754 affects Juniper ScreenOS before version 6.3.0r21 where ssh-pka is configured; an unauthenticated, remote attacker can cause a denial of service (system crash) or execute arbitrary code via crafted SSH negotiations. CVSS metrics indicate high impact (v3 base 8.1, High; v2 base 9.3, H...
CVE-2015-7754
Juniper ScreenOS before 6.3.0r21, when ssh-pka is configured and enabled, allows remote attackers to cause a denial of service system crash or execute arbitrary code via crafted SSH negotiation...
pathfinder.juniper.net XSS vulnerability
Vulnerable URL: http://pathfinder.juniper.net/feature-explorer/feature-family-info.html?familyName=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 12:10 GMT Vulnerability type:| XSS Vulnerability...
CVE-2015-7754: Improper Input Validation
Juniper ScreenOS before 6.3.0r21, when ssh-pka is configured and enabled, allows remote attackers to cause a denial of service system crash or execute arbitrary code via crafted SSH negotiation...
kb.juniper.net Open Redirect vulnerability
Vulnerable URL: http://kb.juniper.net/InfoCenter/index?page=answerlink=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 11:53 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...
Safety warning: the domestic more than 3 0 0 Station juniper network equipment by back door influence-vulnerability warning-the black bar safety net
In 2 0 1 5 year 1 2 on 1 8 November,Juniper's official website released a security Bulletin,noted that in their Netscrren firewall ScreenOS software found unauthorized code,which relates to the 2 security questions,one is in the VPN authentication code is placed in the back door,allowing an...
Mike Mimoso and Chris Brook Discuss the Threats of 2015
With 2015 more or less in the rear view mirror Mike Mimoso and Chris Brook discuss the year in security: Wassenaar, ransomware, Carbanak and Equation Group,how big of a deal Stagefright was, that Juniper backdoor, and more. Download: tp2015inreview.mp3 Music by Chris Gonsalves...
Juniper Networks ScreenOS Denial of Service Vulnerability
Juniper Networks ScreenOS is a Juniper Networks operating system that runs in the NetScreen family of firewalls. A denial of service vulnerability exists in Juniper Networks ScreenOS. An attacker could exploit this vulnerability to cause an application to crash, denying service to legitimate user...
VulnCheck KEV: CVE-2015-7756
The encryption implementation in Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0r14b, 6.3.0r15 before 6.3.0r15b, 6.3.0r16 before 6.3.0r16b, 6.3.0r17 before 6.3.0r17b, 6.3.0r18 before 6.3.0r18b, 6.3.0r19 before 6.3.0r19b, and...
Juniper ScreenOS SSH / Telnet Authentication Backdoor
The account 'netscreen' on the remote host has the password ' %sun='%s' = %u', a known backdoor password. The affected devices are firewalls and VPN gateways. A remote attacker can exploit this vulnerability to gain administrative access and monitor network traffic, deny network access, and alter...