Input validation

Juniper Junos 10.4S before 10.4S15, 10.4R before 10.4R16, 11.4 before 11.4R9, and 12.1R before 12.1R7 on SRX Series service gateways allows remote attackers to cause a denial of service flowd crash via a crafted IP packet...

Input validation

Juniper Junos 10.4 before 10.4R16, 11.4 before 11.4R10, 12.1R before 12.1R8-S2, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, 12.1X46 before 12.1X46-D10, 12.2 before 12.2R7, 12.3 before 12.3R4-S2, 13.1 before 13.1R3-S1, 13.2 before 13.2R2, and 13.3 before 13.3R1 allows remote attackers ...

Design/Logic Flaw

Juniper Junos 10.4 before 10.4R16, 11.4 before 11.4R10, 12.1R before 12.1R8-S2, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, 12.1X46 before 12.1X46-D10, 12.2 before 12.2R7, 12.3 before 12.3R5, 13.1 before 13.1R3-S1, 13.2 before 13.2R2, and 13.3 before 13.3R1 allows local users to gain...

Command injection

The XNM command processor in Juniper Junos 10.4 before 10.4R16, 11.4 before 11.4R10, 12.1R before 12.1R8-S2, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, 12.1X46 before 12.1X46-D10, 12.2 before 12.2R7, 12.3 before 12.3R5, 13.1 before 13.1R3-S1, 13.2 before 13.2R2-S2, and 13.3 before...

Juniper Networks Junos OS Denial of Service Vulnerability while Processing HTTP Traffic

Denial of Service vulnerability in flowd while processing valid HTTP traffic. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2014-0615

Juniper Junos 10.4 before 10.4R16, 11.4 before 11.4R10, 12.1R before 12.1R8-S2, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, 12.1X46 before 12.1X46-D10, 12.2 before 12.2R7, 12.3 before 12.3R5, 13.1 before 13.1R3-S1, 13.2 before 13.2R2, and 13.3 before 13.3R1 allows local users to gain...

CVE-2014-0616

Juniper Junos 10.4 before 10.4R16, 11.4 before 11.4R10, 12.1R before 12.1R8-S2, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, 12.1X46 before 12.1X46-D10, 12.2 before 12.2R7, 12.3 before 12.3R4-S2, 13.1 before 13.1R3-S1, 13.2 before 13.2R2, and 13.3 before 13.3R1 allows remote attackers ...

CVE-2014-0617

Juniper Junos 10.4S before 10.4S15, 10.4R before 10.4R16, 11.4 before 11.4R9, and 12.1R before 12.1R7 on SRX Series service gateways allows remote attackers to cause a denial of service flowd crash via a crafted IP packet...

CVE-2014-0617

The CVE-2014-0617 issue affects Juniper Junos OS on SRX Series gateways, with affected versions: 10.4S before 10.4S15, 10.4R before 10.4R16, 11.4 before 11.4R9, and 12.1R before 12.1R7. The vulnerability is in the flow daemon (flowd) and allows a remote attacker to cause a denial of service (flow...

CVE-2014-0615

CVE-2014-0615 affects Juniper Junos releases listed in the description, where local users gain privileges via certain combinations of Junos OS CLI commands and arguments. The vulnerability is a local-privilege-escalation issue impacting multiple branches (e.g., 10.4/R16 and earlier, 11.x, 12.x, 1...

CVE-2014-0613

The XNM command processor in Juniper Junos 10.4 before 10.4R16, 11.4 before 11.4R10, 12.1R before 12.1R8-S2, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, 12.1X46 before 12.1X46-D10, 12.2 before 12.2R7, 12.3 before 12.3R5, 13.1 before 13.1R3-S1, 13.2 before 13.2R2-S2, and 13.3 before...

CVE-2014-0616

CVE-2014-0616 affects multiple Juniper Junos OS versions (10.4 before 10.4R16, 11.4 before 11.4R10, 12.1R before 12.1R8-S2, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, 12.1X46 before 12.1X46-D10, 12.2 before 12.2R7, 12.3 before 12.3R4-S2, 13.1 before 13.1R3-S1, 13.2 before 13.2R2, and...

CVE-2014-0613

CVE-2014-0613 affects Juniper Junos OS XNM command processor. Versions listed (various 10.4, 11.x, 12.x, 13.x) are impacted when xnm-ssl or xnm-clear-text is enabled, allowing remote attackers to cause a denial of service via memory consumption. OpenVAS notes a vendor fix as remediation, but does...

CVE-2014-0618

Juniper Junos before 10.4 before 10.4R16, 11.4 before 11.4R8, 12.1R before 12.1R7, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D10 on SRX Series service gateways, when used as a UAC enforcer and captive portal is enabled, allows remote attackers to cause a denial of service flowd crash...

Input validation

Juniper Junos before 10.4 before 10.4R16, 11.4 before 11.4R8, 12.1R before 12.1R7, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D10 on SRX Series service gateways, when used as a UAC enforcer and captive portal is enabled, allows remote attackers to cause a denial of service flowd crash...

CVE-2014-0618

The CVE-2014-0618 entry affects Juniper Junos SRX Series gateways when configured as a UAC enforcer with Captive Portal enabled. A crafted HTTP message can cause the flowd daemon to crash, leading to remote denial of service. Affected versions include Junos releases prior to 10.4R16, 11.4R8, 12.1...

CVE-2014-0618

Juniper Junos before 10.4 before 10.4R16, 11.4 before 11.4R8, 12.1R before 12.1R7, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D10 on SRX Series service gateways, when used as a UAC enforcer and captive portal is enabled, allows remote attackers to cause a denial of service flowd crash...

Juniper Networks Junos OS Stack Exhaustion Denial of Service Vulnerability

Denial of Service vulnerability due to stack exhaustion in glibc used by Junos SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Juniper Junos Pulse Secure Access Service (IVE)跨站脚本漏洞

CVE ID:CVE-2013-6956 Juniper Networks的Secure Access是企业级的SSL VPN接入设备，设备上所运行的操作系统为Juniper IVE OS。 Juniper Junos Pulse Secure Access Service IVE在重写特性页面时没有正确过滤用户提交的输入，允许远程攻击者利用漏洞进行跨站脚本攻击，可构建恶意URI，诱使用户解析，可获取敏感信息或者劫持用户会话。 0 Juniper IVE OS 8.0 Juniper IVE OS 7.4r5 Juniper IVE OS 7.3r7 Juniper IVE OS...

Juniper IDP ACM Web服务器跨站脚本漏洞

CVE ID:CVE-2013-6957 Juniper IDP解决方案是业界领先的解决方案,可帮助管理员检测、控制并报告受到各种间谍软件应用威胁的系统。 Juniper IDP没有正确过滤提交给ACM WEB服务器的输入，允许远程攻击者利用漏洞进行跨站脚本攻击，可构建恶意URI，诱使用户解析，可获取敏感信息或者劫持用户会话。 0 Juniper IDP75 Juniper IDP250 Juniper IDP800 Juniper IDP8200 5.1 厂商补丁： Juniper ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...