PT-2020-5144

Name of the Vulnerable Software and Affected Versions Junos OS on SRX Series versions prior to 12.3X48-D90 Junos OS on SRX Series versions prior to 15.1X49-D190 Junos OS on SRX Series versions prior to 17.4R2-S9, 17.4R3 Junos OS on SRX Series versions prior to 18.1R3-S9 Junos OS on SRX Series...

srxautopecas.com.br Cross Site Scripting vulnerability OBB-1301221

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

srx.com.sg Cross Site Scripting vulnerability OBB-1241485

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Junos OS: SRX Series: Unified Access Control (UAC) bypass vulnerability (JSA11018)

The version of Junos OS installed on the remote host is prior to 12.3X48-D100, 15.1X49-D210, 17.3R2-S5, 17.4R2-S9, 18.1R3-S10, 18.2R2-S7, 18.3R1-S7, 18.4R1-S6, 19.1R1-S4, 19.2R1-S3, 19.3R2-S1, or 19.4R1-S1. It is, therefore, affected by a unified access control UAC bypass vulnerability as...

Juniper Junos SRX Double Free ICAP Redirect DoS RCE (JSA11034)

According to its self-reported version, the Junos OS on the remote device is affected by a double free vulnerability. On Juniper Networks SRX Series with ICAP Internet Content Adaptation Protocol redirect service enabled, this double free vulnerability can lead to a Denial of Service DoS or Remot...

Memory corruption

In all versions of FactoryTalk View SE, after bypassing memory corruption mechanisms found in the operating system, a local, authenticated attacker may corrupt the associated memory space allowing for arbitrary code execution. Rockwell Automation recommends applying patch 1126290. Before installi...

Input validation

All versions of FactoryTalk View SE do not properly validate input of filenames within a project directory. A remote, unauthenticated attacker may be able to execute a crafted file on a remote endpoint that may result in remote code execution RCE. Rockwell Automation recommends applying patch...

CVE-2020-1654

On Juniper Networks SRX Series with ICAP Internet Content Adaptation Protocol redirect service enabled, processing a malformed HTTP message can lead to a Denial of Service DoS or Remote Code Execution RCE Continued processing of this malformed HTTP message may result in an extended Denial of...

CVE-2020-1647

On Juniper Networks SRX Series with ICAP Internet Content Adaptation Protocol redirect service enabled, a double free vulnerability can lead to a Denial of Service DoS or Remote Code Execution RCE due to processing of a specific HTTP message. Continued processing of this specific HTTP message may...

CVE-2020-1654

On Juniper Networks SRX Series with ICAP Internet Content Adaptation Protocol redirect service enabled, processing a malformed HTTP message can lead to a Denial of Service DoS or Remote Code Execution RCE Continued processing of this malformed HTTP message may result in an extended Denial of...

CVE-2020-1647

On Juniper Networks SRX Series with ICAP Internet Content Adaptation Protocol redirect service enabled, a double free vulnerability can lead to a Denial of Service DoS or Remote Code Execution RCE due to processing of a specific HTTP message. Continued processing of this specific HTTP message may...

Double free

On Juniper Networks SRX Series with ICAP Internet Content Adaptation Protocol redirect service enabled, a double free vulnerability can lead to a Denial of Service DoS or Remote Code Execution RCE due to processing of a specific HTTP message. Continued processing of this specific HTTP message may...

Design/Logic Flaw

On Juniper Networks SRX Series with ICAP Internet Content Adaptation Protocol redirect service enabled, processing a malformed HTTP message can lead to a Denial of Service DoS or Remote Code Execution RCE Continued processing of this malformed HTTP message may result in an extended Denial of...

CVE-2020-1654

CVE-2020-1654 affects Juniper Networks Junos OS on SRX Series when ICAP redirect service is enabled. A malformed HTTP message can cause DoS or RCE; continued processing may extend DoS. Affected releases include 18.1 before 18.1R3-S9; 18.2 before 18.2R2-S7 (and 18.2R3-S3); 18.3 before 18.3R1-S7, 1...

CVE-2020-1654 Junos OS: SRX Series: processing a malformed HTTP message when ICAP redirect service is enabled may can lead to flowd process crash or remote code execution

On Juniper Networks SRX Series with ICAP Internet Content Adaptation Protocol redirect service enabled, processing a malformed HTTP message can lead to a Denial of Service DoS or Remote Code Execution RCE Continued processing of this malformed HTTP message may result in an extended Denial of...

CVE-2020-1647

CVE-2020-1647 (Junos OS SRX ICAP redirect double-free) affects Juniper Networks SRX Series with ICAP redirect service enabled. A double-free vulnerability in the ICAP processing of a specific HTTP message can lead to a Denial of Service or Remote Code Execution . The offending HTTP message may or...

CVE-2020-1647: Double Free

On Juniper Networks SRX Series with ICAP Internet Content Adaptation Protocol redirect service enabled, a double free vulnerability can lead to a Denial of Service DoS or Remote Code Execution RCE due to processing of a specific HTTP message. Continued processing of this specific HTTP message may...

CVE-2020-1654: Buffer Copy without Checking Size of Input

On Juniper Networks SRX Series with ICAP Internet Content Adaptation Protocol redirect service enabled, processing a malformed HTTP message can lead to a Denial of Service DoS or Remote Code Execution RCE Continued processing of this malformed HTTP message may result in an extended Denial of...

Juniper Networks Junos OS Resource Management Error Vulnerability (CNVD-2020-43753)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A resource management error vulnerability exists in Juniper Networks Junos OS SRX Series. A remote attacker could exploit...

PT-2020-5933

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on SRX Series versions 18.1 through 18.1R3-S9 Juniper Networks Junos OS on SRX Series versions 18.2 through 18.2R2-S7 Juniper Networks Junos OS on SRX Series versions 18.2 through 18.2R3-S3 Juniper Networks Junos OS ...