Design/Logic Flaw

Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly implement role-based access control, which allows remote authenticated users to modify the configuration by leveraging the read-only privilege, aka PR 863804...

Design/Logic Flaw

Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly restrict access to the list of user accounts and their MD5 password hashes, which makes it easier for remote authenticated users to obtain sensitive information via a dictionary attack, a...

CVE-2013-5095

Cross-site scripting XSS vulnerability in the web-based interface in Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka PR 884469...

Cross site scripting

Cross-site scripting XSS vulnerability in the web-based interface in Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka PR 884469...

CVE-2013-5096

Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly implement role-based access control, which allows remote authenticated users to modify the configuration by leveraging the read-only privilege, aka PR 863804...

CVE-2013-5096

CVE-2013-5096 concerns Juniper Junos Space before 13.1R1.6. The issue is a flawed role-based access control implementation that allows remote authenticated users to modify device configurations by abusing the read-only privilege (PR 863804). The affected product is Junos Space (JA1500 appliance a...

CVE-2013-5097

Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly restrict access to the list of user accounts and their MD5 password hashes, which makes it easier for remote authenticated users to obtain sensitive information via a dictionary attack, a...

CVE-2013-5095

Cross-site scripting XSS vulnerability in the web-based interface in Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka PR 884469...

CVE-2013-5095

CVE-2013-5095 is a documented XSS vulnerability in the web-based interface of Juniper Junos Space prior to 13.1R1.6 (e.g., JA1500 and related deployments). The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The available sources confirm the affected ...

CVE-2013-5097

Juniper Junos Space before 13.1R1.6 (JA1500 and other contexts) exposes the list of user accounts and their MD5 password hashes due to improper access restriction, enabling remote authenticated users to obtain sensitive information via a dictionary attack. Affected are Junos Space deployments pri...

PT-2013-5360

Name of the Vulnerable Software and Affected Versions Junos Space versions prior to 13.1R1.6 Description A cross-site scripting XSS issue exists in the web-based interface, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions prior...

PT-2013-5361

Name of the Vulnerable Software and Affected Versions Juniper Junos Space versions prior to 13.1R1.6 Description The issue is related to the improper implementation of role-based access control. This allows remote authenticated users with read-only privileges to modify the configuration...

PT-2013-5362

Name of the Vulnerable Software and Affected Versions Juniper Junos Space versions prior to 13.1R1.6 Description The issue allows remote authenticated users to obtain sensitive information, specifically the list of user accounts and their MD5 password hashes, due to improper access restrictions...

CVE-2013-5095: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web-based interface in Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka PR 884469...

CVE-2013-5097: Undefined Security Weakness

Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly restrict access to the list of user accounts and their MD5 password hashes, which makes it easier for remote authenticated users to obtain sensitive information via a dictionary attack, a...

CVE-2013-5096: Undefined Security Weakness

Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly implement role-based access control, which allows remote authenticated users to modify the configuration by leveraging the read-only privilege, aka PR 863804...

Mitigating the LdrHotPatchRoutine DEP/ASLR bypass with MS13-063

Today we released MS13-063 which includes a defense in depth change to address an exploitation technique that could be used to bypass two important platform mitigations: Address Space Layout Randomization ASLR and Data Execution Prevention DEP. As we’ve described in the past, these mitigations pl...

[SECURITY] Fedora 17 Update: filelight-4.10.5-1.fc17

Filelight allows you to quickly understand exactly where your diskspace is being used by graphically representing your file system...

whois-ip NSE Script

Queries the WHOIS services of Regional Internet Registries RIR and attempts to retrieve information about the IP Address Assignment which contains the Target IP Address. The fields displayed contain information about the assignment and the organisation responsible for managing the address space...

[SECURITY] Fedora 18 Update: kdf-4.10.5-1.fc18

KDiskFree displays the available file devices hard drive partitions, floppy and CD/DVD drives, etc. along with information on their capacity, free space, type and mount point...