Privilege escalation

Junos Space is affected by a privilege escalation vulnerability that may allow a local authenticated attacker to gain root privileges...

CVE-2017-15845

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, an invalid input of firmware size negative value from user space can potentially lead to the memory leak or buffer overflow during the WLAN cal data store operation...

CVE-2018-0013 Junos Space: Local File Inclusion Vulnerability

A local file inclusion vulnerability in Juniper Networks Junos Space Network Management Platform may allow an authenticated user to retrieve files from the system...

CVE-2018-0012 Junos Space: Local privilege escalation vulnerability in Junos Space

Junos Space is affected by a privilege escalation vulnerability that may allow a local authenticated attacker to gain root privileges...

CVE-2018-0012

CVE-2018-0012 affects Junos Space and describes a privilege-escalation vulnerability that could allow a local authenticated attacker to obtain root privileges. The connected documents confirm Junos Space as the affected product and identify the impact (local escalation to root) and the attack con...

CVE-2018-0013

CVE-2018-0013 affects Juniper Networks Junos Space Network Management Platform. The vulnerability is a local file inclusion that may allow an authenticated user to retrieve files from the system. Public data lists CVSS v3.0 base score 6.5 (MEDIUM) with network attack vector, low complexity, and p...

CVE-2018-0010

A vulnerability in the Juniper Networks Junos Space Security Director allows a user who does not have SSH access to a device to reuse the URL that was created for another user to perform SSH access. Affected releases are all versions of Junos Space Security Director prior to 17.2R1...

CVE-2018-0011

CVE-2018-0011 is a reflected XSS vulnerability in Junos Space management interface. The issue allows a remote authenticated user to inject web script or HTML, potentially steal session data/credentials and perform administrative actions on the Junos Space device. Connected sources (e.g., NVD entr...

CVE-2018-0011 Junos Space: Reflected XSS vulnerability in Junos Space management interface

A reflected cross site scripting XSS vulnerability in Junos Space may potentially allow a remote authenticated user to inject web script or HTML and steal sensitive data and credentials from a session, and to perform administrative actions on the Junos Space network management device...

CVE-2018-0010

CVE-2018-0010 affects Junos Space Security Director. The vulnerability allows a user without SSH access to a device to reuse a URL created for another user to gain SSH access. Affected releases are all versions prior to 17.2R1. The provided documents do not detail the underlying root cause beyond...

CVE-2018-5331

Discuz! DiscuzX X3.4 has XSS via the view parameter to include/space/spacepoll.php, as demonstrated by a mod=space do=poll request to home.php...

CVE-2018-0010: Improper Privilege Management

A vulnerability in the Juniper Networks Junos Space Security Director allows a user who does not have SSH access to a device to reuse the URL that was created for another user to perform SSH access. Affected releases are all versions of Junos Space Security Director prior to 17.2R1...

PT-2018-16900

Name of the Vulnerable Software and Affected Versions DiscuzX version X3.4 Description The issue concerns a cross-site scripting XSS problem. It can be triggered via the view parameter in the include/space/space poll.php file. An example of exploitation is a request to home.php with mod=space and...

PT-2018-8563

Name of the Vulnerable Software and Affected Versions: Junos Space affected versions not specified Description: A privilege escalation issue may allow a local authenticated attacker to gain root privileges. Recommendations: At the moment, there is no information about a newer version that contain...

CVE-2018-0012: Undefined Security Weakness

Junos Space is affected by a privilege escalation vulnerability that may allow a local authenticated attacker to gain root privileges...

PT-2018-8561

Name of the Vulnerable Software and Affected Versions: Junos Space Security Director versions prior to 17.2R1 Description: A vulnerability in the Juniper Networks Junos Space Security Director allows unauthorized SSH access to a device by reusing a URL created for another user. Recommendations: F...

PT-2018-8562

Name of the Vulnerable Software and Affected Versions: Junos Space affected versions not specified Description: A reflected cross site scripting XSS issue may allow a remote authenticated user to inject web script or HTML, potentially leading to the theft of sensitive data and credentials from a...

CVE-2018-0013: Exposure of Sensitive Information to an Unauthorized Actor

A local file inclusion vulnerability in Juniper Networks Junos Space Network Management Platform may allow an authenticated user to retrieve files from the system...

PT-2018-8564

Name of the Vulnerable Software and Affected Versions: Junos Space Network Management Platform affected versions not specified Description: A local file inclusion issue may allow an authenticated user to retrieve files from the system. Recommendations: At the moment, there is no information about...

CVE-2018-0011: Improper Neutralization of Input During Web Page Generation

A reflected cross site scripting XSS vulnerability in Junos Space may potentially allow a remote authenticated user to inject web script or HTML and steal sensitive data and credentials from a session, and to perform administrative actions on the Junos Space network management device...