CVE-2014-2712

Cross-site scripting XSS vulnerability in J-Web in Juniper Junos before 10.0S25, 10.4 before 10.4R10, 11.4 before 11.4R11, 12.1 before 12.1R9, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, 12.1X46 before 12.1X46-D10, and 12.2 before 12.2R1 allows remote attackers to inject arbitrary web...

CVE-2014-2714

The Enhanced Web Filtering EWF in Juniper Junos before 10.4R15, 11.4 before 11.4R9, 12.1 before 12.1R7, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D10, and 12.1X46 before 12.1X46-D10, as used in the SRX Series services gateways, allows remote attackers to cause a denial of service flow...

CVE-2014-2714

The CVE-2014-2714 issue affects Juniper Networks Junos OS when Enhanced Web Filtering (EWF) is enabled on SRX Series services gateways. The vulnerability stems from the EWF component processing crafted URLs, leading to a denial of service by crashing the flow daemon (flowd) and triggering a resta...

CVE-2014-2713

Affected product: Juniper Junos OS on MX Series and T4000 routers. Vulnerable component: Packet Forwarding Engine (PFE) modules, specifically Trio-based and Cassis-based PFEs. Root cause/issue: remote attacker can send a crafted IP packet to trigger a PFE restart, causing a denial of service (pot...

Juniper Junos SRX Series flowd DoS (JSA10622)

According to its self-reported version number, the remote Junos device is affected by a denial of service vulnerability due to improper processing by the Enhanced Web Filtering EWF. An attacker can exploit this vulnerability by sending a crafted URL to crash the flow daemon flowd process. Repeate...

Juniper Junos Kernel IGMP Flood DoS (JSA10618)

According to its self-reported version number, the remote Juniper Junos device is affected by denial of service vulnerability in the Junos kernel. A remote attacker can exploit this issue by sending specially crafted IGMP packets at a very high rate approximately 1000 packets per second. Note tha...

Juniper Junos J-Web Persistent XSS (JSA10619)

According to its self-reported version number, the remote Junos device is affected by a stored cross-site scripting vulnerability due to a failure to sanitize user-supplied input to the J-Web interface. An attacker can exploit this vulnerability to execute arbitrary JavaScript in the context of t...

Juniper Junos SRX Series Dynamic IPsec VPN DoS (JSA10620)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability related to the Dynamic IPsec VPN service. A remote, unauthenticated attacker can exploit this vulnerability to cause new Dynamic VPN connections to fail for other users ...

Juniper Junos MX and T4000 Series MPC Reboot DoS (JSA10621)

According to its self-reported version number, the remote Junos device is affected by a denial of service vulnerability. The issue exists in MX and T4000 series routers that use either Trio-based or Cassis-based PFE modules. An attacker can exploit this vulnerability by sending a crafted IP packe...

CVE-2014-2291

Cross-site scripting XSS vulnerability in the Pulse Collaboration Secure Meeting user pages in Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS before 7.1r18, 7.3 before 7.3r10, 7.4 before 7.4r8, and 8.0 before 8.0r1 allows remote authenticated users to inject arbitrary web scrip...

CVE-2014-2292

Unspecified vulnerability in the Linux Network Connect client in Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS before 7.1r18, 7.3 before 7.3r10, 7.4 before 7.4r8, and 8.0 before 8.0r1 allows local users to gain privileges via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Pulse Collaboration Secure Meeting user pages in Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS before 7.1r18, 7.3 before 7.3r10, 7.4 before 7.4r8, and 8.0 before 8.0r1 allows remote authenticated users to inject arbitrary web scrip...

Design/Logic Flaw

Unspecified vulnerability in the Linux Network Connect client in Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS before 7.1r18, 7.3 before 7.3r10, 7.4 before 7.4r8, and 8.0 before 8.0r1 allows local users to gain privileges via unspecified vectors...

CVE-2014-2292

CVE-2014-2292 concerns a local privilege escalation in the Linux Network Connect client used by Juniper Junos Pulse Secure Access Service (IVE OS). Affected desktop/server versions include IVE OS before 7.1r18, 7.3 before 7.3r10, 7.4 before 7.4r8, and 8.0 before 8.0r1. The underlying issue is a l...

CVE-2014-2291

Pulse Secure Access Service (IVE OS) is affected by CVE-2014-2291 due to inadequate input validation on the Pulse Collaboration (Secure Meeting) user pages, allowing remote authenticated users to inject arbitrary HTML/Script. Impact per sources is that this affects Juniper Junos Pulse Secure Acce...

CVE-2014-2292

Unspecified vulnerability in the Linux Network Connect client in Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS before 7.1r18, 7.3 before 7.3r10, 7.4 before 7.4r8, and 8.0 before 8.0r1 allows local users to gain privileges via unspecified vectors...

Juniper Junos Pulse Secure Access Service IVE OS (SSL VPN) XSS (JSA10617)

According to its self-reported version, the version of Juniper Junos Pulse Secure Access Service IVE OS running on the remote host is affected by an unspecified cross-site scripting vulnerability that is present within the Pulse Collaboration Secure Meeting user pages. An attacker could exploit...

CVE-2013-7313

The OSPF implementation in Juniper Junos through 13.x, JunosE, and ScreenOS through 6.3.x does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial o...

Design/Logic Flaw

The OSPF implementation in Juniper Junos through 13.x, JunosE, and ScreenOS through 6.3.x does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial o...

CVE-2013-7313

The OSPF implementation in Juniper Junos through 13.x, JunosE, and ScreenOS through 6.3.x does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial o...