The vulnerability of the DHCP Daemon (jdhcpd) on Juniper Networks Junos OS allows a attacker to cause a service failure.

The vulnerability of the DHCP Daemon jdhcpd on Juniper Networks Junos OS operating systems is related to improper handling of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

PT-2024-19406

Name of the Vulnerable Software and Affected Versions jupyter-lsp versions prior to 2.2.2 Description The issue affects installations of jupyter-lsp running in environments without configured file system access control and with jupyter-server instances exposed to non-trusted networks, allowing...

The vulnerability of the Packet Forwarding Engine (PFE) in Juniper Networks’ Junos operating system, which allows a hacker to gain access to confidential data

The vulnerability of the packet forwarding engine PFE in Juniper Networks’ Junos operating system is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...

The vulnerability of the kernel of Juniper Networks Junos OS-based MX routers, which allows a hacker to cause a service failure.

The vulnerability of Juniper Networks Junos OS routers in the MX series is related to insufficient checking of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Non-Stop Routing (NSR) routing mechanism in Juniper Networks’ Junos OS allows a attacker to cause a service failure.

The vulnerability of the Non-Stop Routing NSR routing mechanism in Juniper Networks’ Junos OS lies in the incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow a malicious actor to trigger service interruptions...

The vulnerability of the Packet Forwarding Engine (PFE) in Juniper Networks’ Junos routers of the MX series allows a attacker to cause a service failure.

The vulnerability of the packet forwarding engine PFE in Juniper Networks’ Junos routers of the MX series is related to memory release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the Demon Routing Protocol Daemon (RPD) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to cause a service failure.

The vulnerability of the Demon Routing Protocol Daemon RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to improper memory release. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Object Flooding Protocol service in Juniper Networks’ Junos OS Evolved operating systems allows a attacker to cause a service failure.

The vulnerability of the Object Flooding Protocol OFP in Juniper Networks’ Junos OS Evolved operating systems is related to improper handling of syntactically incorrect structures. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted TCP...

Juniper’s Critical RCE Vulnerability Shakes Network Security

Summary: Juniper Networks has a critical remote code execution RCE vulnerability, CVE-2024-21591, which affects SRX Series firewalls and EX Series switches. This flaw enables attackers to trigger a Denial-of-Service condition and potentially execute remote code with root privileges. Threat Level ...

F5 Networks BIG-IP : Apache Tomcat vulnerability (K000138178)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000138178 advisory. - Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from...

F5 Networks BIG-IP : OpenSSL vulnerability (K000138242)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000138242 advisory. - Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters ma...

Integration Objects OPC UA Server Toolkit (Update A)

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION : Exploitable remotely/low attack complexity Vendor : Integration Objects Equipment : OPC UA Server Toolkit Vulnerability : Improper Output Neutralization for Logs 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a...

EulerOS 2.0 SP11 : docker-engine (EulerOS-SA-2023-2637)

According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various...

CVE-2023-5253

A missing authentication check in the WebSocket channel used for the Check Point IoT integration in Nozomi Networks Guardian and CMC, may allow an unauthenticated attacker to obtain assets data without authentication. Malicious unauthenticated users with knowledge on the underlying system may be...

Authentication flaw

A missing authentication check in the WebSocket channel used for the Check Point IoT integration in Nozomi Networks Guardian and CMC, may allow an unauthenticated attacker to obtain assets data without authentication. Malicious unauthenticated users with knowledge on the underlying system may be...

CVE-2023-5253

CVE-2023-5253 affects Nozomi Networks Guardian/CMC: a missing authentication check in the WebSocket channel used for the Check Point IoT integration can allow an unauthenticated attacker to obtain assets data. The vulnerability impacts the WebSocket handling that exposes asset information without...

CVE-2023-5253 Check Point IoT integration: WebSocket returns assets data without authentication in Guardian/CMC before 23.3.0

A missing authentication check in the WebSocket channel used for the Check Point IoT integration in Nozomi Networks Guardian and CMC, may allow an unauthenticated attacker to obtain assets data without authentication. Malicious unauthenticated users with knowledge on the underlying system may be...

Nozomi Networks Guardian/CMC Access Control Error Vulnerability

Nozomi Networks Guardian/CMC is a centralized management console from Nozomi Networks, Inc. in the United States. An access control error vulnerability exists in Nozomi Networks Guardian/CMC prior to version v23.3.0 that stems from a lack of authentication checks in the WebSocket channel, allowin...

CVE-2023-5253: Missing Authentication for Critical Function

A missing authentication check in the WebSocket channel used for the Check Point IoT integration in Nozomi Networks Guardian and CMC, may allow an unauthenticated attacker to obtain assets data without authentication. Malicious unauthenticated users with knowledge on the underlying system may be...

Critical RCE Vulnerability Uncovered in Juniper SRX Firewalls and EX Switches

Juniper Networks has released updates to fix a critical remote code execution RCE vulnerability in its SRX Series firewalls and EX Series switches. The issue, tracked as CVE-2024-21591, is rated 9.8 on the CVSS scoring system. "An out-of-bounds write vulnerability in J-Web of Juniper Networks Jun...