VYPR
← Juniper Networks

Vendor CVEs

Juniper Networks

All CVEs

1,117 total · sorted by risk
  • CVE-2014-3813Jun 13, 2014
    Juniper Networks
    Screenos
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Juniper Networks NetScreen Firewall products with ScreenOS before 6.3r17, when configured to use the internal DNS lookup client, allows remote attackers to cause a denial of service (crash and reboot) via vectors related to a DNS lookup.

  • CVE-2014-3812Jun 13, 2014
    Juniper Networks
    Ive OS
    risk 0.00cvss —epss 0.01

    The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS before 7.4r5 and 8.x before 8.0r1 and Junos Pulse Access Control Service (UAC) before 4.4r5 and 5.x before 5.0r1 enable cipher suites with weak encryption algorithms, which make it easier for remote…

  • CVE-2014-3412May 20, 2014
    Juniper Networks
    Junos Space
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Juniper Junos Space before 13.3R1.8, when the firewall in disabled, allows remote attackers to execute arbitrary commands via unspecified vectors.

  • CVE-2014-3411May 19, 2014
    Juniper Networks
    NSM
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the NSM XDB service in Juniper NSM before 2012.2R8 allows remote attackers to execute arbitrary code via unspecified vectors.

  • CVE-2014-0460Apr 16, 2014
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI.

  • CVE-2014-0453Apr 16, 2014
    Juniper Networks
    Junos Space
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Security.

  • CVE-2014-2842Apr 15, 2014
    Juniper Networks
    Screenos
    risk 0.00cvss —epss 0.04

    Juniper ScreenOS 6.3 and earlier allows remote attackers to cause a denial of service (crash and restart or failover) via a malformed SSL/TLS packet.

  • CVE-2014-2714Apr 14, 2014
    Juniper Networks
    Junos
    risk 0.00cvss —epss 0.02

    The Enhanced Web Filtering (EWF) in Juniper Junos before 10.4R15, 11.4 before 11.4R9, 12.1 before 12.1R7, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D10, and 12.1X46 before 12.1X46-D10, as used in the SRX Series services gateways, allows remote attackers to cause a…

  • CVE-2014-2713Apr 14, 2014
    Juniper Networks
    Junos
    risk 0.00cvss —epss 0.01

    Juniper Junos before 11.4R11, 12.1 before 12.1R9, 12.2 before 12.2R7, 12.3R4 before 12.3R4-S3, 13.1 before 13.1R4, 13.2 before 13.2R2, and 13.3 before 13.3R1, as used in MX Series and T4000 routers, allows remote attackers to cause a denial of service (PFE restart) via a crafted…

  • CVE-2014-2712Apr 14, 2014
    Juniper Networks
    Junos
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in J-Web in Juniper Junos before 10.0S25, 10.4 before 10.4R10, 11.4 before 11.4R11, 12.1 before 12.1R9, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, 12.1X46 before 12.1X46-D10, and 12.2 before 12.2R1 allows remote attackers to…

  • CVE-2014-2711Apr 14, 2014
    Juniper Networks
    Junos
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in J-Web in Juniper Junos before 11.4R11, 11.4X27 before 11.4X27.62 (BBE), 12.1 before 12.1R9, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, 12.2 before 12.2R7, 12.3 before 12.3R6, 13.1 before 13.1R4,…

  • CVE-2014-0614Apr 14, 2014
    Juniper Networks
    Junos
    risk 0.00cvss —epss 0.02

    Juniper Junos 13.2 before 13.2R3 and 13.3 before 13.3R1, when PIM is enabled, allows remote attackers to cause a denial of service (kernel panic and crash) via a large number of crafted IGMP packets.

  • CVE-2014-0612Apr 14, 2014
    Juniper Networks
    Junos
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Juniper Junos before 11.4R10-S1, before 11.4R11, 12.1X44 before 12.1X44-D26, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, and 12.1X46 before 12.1X46-D10, when Dynamic IPsec VPN is configured, allows remote attackers to cause a denial of…

  • CVE-2014-2292Mar 14, 2014
    Juniper Networks
    Ive OS
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the Linux Network Connect client in Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS before 7.1r18, 7.3 before 7.3r10, 7.4 before 7.4r8, and 8.0 before 8.0r1 allows local users to gain privileges via unspecified vectors.

  • CVE-2014-2291Mar 14, 2014
    Juniper Networks
    Ive OS
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Pulse Collaboration (Secure Meeting) user pages in Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS before 7.1r18, 7.3 before 7.3r10, 7.4 before 7.4r8, and 8.0 before 8.0r1 allows remote authenticated users to…

  • CVE-2013-7313Jan 23, 2014
    Juniper Networks
    Junos
    risk 0.00cvss —epss 0.01

    The OSPF implementation in Juniper Junos through 13.x, JunosE, and ScreenOS through 6.3.x does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers…

  • CVE-2014-0617Jan 15, 2014
    Juniper Networks
    Junos
    risk 0.00cvss —epss 0.02

    Juniper Junos 10.4S before 10.4S15, 10.4R before 10.4R16, 11.4 before 11.4R9, and 12.1R before 12.1R7 on SRX Series service gateways allows remote attackers to cause a denial of service (flowd crash) via a crafted IP packet.

  • CVE-2014-0616Jan 15, 2014
    Juniper Networks
    Junos
    risk 0.00cvss —epss 0.02

    Juniper Junos 10.4 before 10.4R16, 11.4 before 11.4R10, 12.1R before 12.1R8-S2, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, 12.1X46 before 12.1X46-D10, 12.2 before 12.2R7, 12.3 before 12.3R4-S2, 13.1 before 13.1R3-S1, 13.2 before 13.2R2, and 13.3 before 13.3R1 allows…

  • CVE-2014-0615Jan 15, 2014
    Juniper Networks
    Junos
    risk 0.00cvss —epss 0.00

    Juniper Junos 10.4 before 10.4R16, 11.4 before 11.4R10, 12.1R before 12.1R8-S2, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, 12.1X46 before 12.1X46-D10, 12.2 before 12.2R7, 12.3 before 12.3R5, 13.1 before 13.1R3-S1, 13.2 before 13.2R2, and 13.3 before 13.3R1 allows…

  • CVE-2014-0613Jan 15, 2014
    Juniper Networks
    Junos
    risk 0.00cvss —epss 0.02

    The XNM command processor in Juniper Junos 10.4 before 10.4R16, 11.4 before 11.4R10, 12.1R before 12.1R8-S2, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, 12.1X46 before 12.1X46-D10, 12.2 before 12.2R7, 12.3 before 12.3R5, 13.1 before 13.1R3-S1, 13.2 before 13.2R2-S2,…

  • CVE-2014-0618Jan 11, 2014
    Juniper Networks
    Junos
    risk 0.00cvss —epss 0.04

    Juniper Junos before 10.4 before 10.4R16, 11.4 before 11.4R8, 12.1R before 12.1R7, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D10 on SRX Series service gateways, when used as a UAC enforcer and captive portal is enabled, allows remote attackers to cause a denial of…

  • CVE-2013-6958Dec 13, 2013
    Juniper Networks
    Screenos
    risk 0.00cvss —epss 0.02

    Juniper NetScreen Firewall running ScreenOS 5.4, 6.2, or 6.3, when the Ping of Death screen is disabled, allows remote attackers to cause a denial of service via a crafted packet.

  • CVE-2013-6957Dec 13, 2013
    Juniper Networks
    IDP
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the web administrative component in Juniper IDP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors to the ACM web server.

  • CVE-2013-6956Dec 13, 2013
    Juniper Networks
    Ive OS
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Secure Access Service Web rewriting feature in Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS before 7.1r17, 7.3 before 7.3r8, 7.4 before 7.4r6, and 8.0 before 8.0r1, when web rewrite is enabled, allows remote…

  • CVE-2013-6012Oct 28, 2013
    Juniper Networks
    Junos
    risk 0.00cvss —epss 0.02

    Juniper Junos 12.1X44 before 12.1.X44-D20 and 12.1X45 before 12.1X45-D15, when the no-validate option is enabled, does not properly handle configuration validation errors during the config commit phase of the boot-up sequence, which allows remote attackers to bypass…

  • CVE-2013-6170Oct 17, 2013
    Juniper Networks
    Junos
    risk 0.00cvss —epss 0.02

    Juniper Junos 10.0 before 10.0S28, 10.4 before 10.4R7, 11.1 before 11.1R5, 11.2 before 11.2R2, and 11.4 before 11.4R1, when in a Next-Generation Multicast VPN (NGEN MVPN) environment, allows remote attackers to cause a denial of service (RPD routing daemon crash) via a large…

  • CVE-2013-6015Oct 17, 2013
    Juniper Networks
    Junos
    risk 0.00cvss —epss 0.02

    Juniper Junos before 10.4S14, 11.4 before 11.4R5-S2, 12.1R before 12.1R3, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D15 on SRX Series services gateways, when a plugin using TCP proxy is configured, allows remote attackers to cause a denial of service (flow daemon…

  • CVE-2013-6013Oct 17, 2013
    Juniper Networks
    Junos
    risk 0.00cvss —epss 0.04

    Buffer overflow in the flow daemon (flowd) in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7-S2, 12.1.X44 before 12.1X44-D15, 12.1X45 before 12.1X45-D10 on SRX devices, when using telnet pass-through authentication on the firewall, might allow remote attackers to execute…

  • CVE-2013-4689Oct 17, 2013
    Juniper Networks
    Junos
    risk 0.00cvss —epss 0.01

    J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1R before 12.1R6, 12.1X44 before 12.1X44-D15, 12.1x45 before 12.1X45-D10, 12.2 before 12.2R3, 12.3 before 12.3R2, and 13.1 before 13.1R3 allow remote attackers to bypass the cross-site request forgery (CSRF)…

  • CVE-2013-5650Sep 16, 2013
    Juniper Networks
    Junos Pulse Secure Access Service
    risk 0.00cvss —epss 0.02

    Junos Pulse Secure Access Service (IVE) 7.1 before 7.1r5, 7.2 before 7.2r10, 7.3 before 7.3r6, and 7.4 before 7.4r3 and Junos Pulse Access Control Service (UAC) 4.1 before 4.1r8.1, 4.2 before 4.2r5, 4.3 before 4.3r6 and 4.4 before 4.4r3, when a hardware SSL acceleration card is…

  • CVE-2013-5649Sep 13, 2013
    Juniper Networks
    Ive OS
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS 7.1 before 7.1r15, 7.2 before 7.2r11, 7.3 before 7.3r6, and 7.4 before 7.4r3 allow (1) remote attackers to inject arbitrary web script or HTML via vectors…

  • CVE-2013-5097Aug 16, 2013
    Juniper Networks
    Junos Space
    risk 0.00cvss —epss 0.01

    Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly restrict access to the list of user accounts and their MD5 password hashes, which makes it easier for remote authenticated users to obtain sensitive information via a…

  • CVE-2013-5096Aug 16, 2013
    Juniper Networks
    Junos Space
    risk 0.00cvss —epss 0.01

    Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly implement role-based access control, which allows remote authenticated users to modify the configuration by leveraging the read-only privilege, aka PR 863804.

  • CVE-2013-5095Aug 16, 2013
    Juniper Networks
    Junos Space
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the web-based interface in Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka PR 884469.

  • CVE-2012-5460Aug 1, 2013
    Juniper Networks
    Ive OS
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the help page in Juniper Secure Access (SA) with IVE OS before 7.1r13, 7.2.x before 7.2r7, and 7.3.x before 7.3r2 allows remote attackers to inject arbitrary web script or HTML via the WWHSearchWordsText parameter.

  • CVE-2013-4690Jul 11, 2013
    Juniper Networks
    Junos
    risk 0.00cvss —epss 0.02

    Juniper Junos 10.4 before 10.4S13, 11.4 before 11.4R7-S1, 12.1 before 12.1R5-S3, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D10 on the SRX1400, SRX3400, and SRX3600 does not properly initialize memory locations used during padding of Ethernet packets, which allows…

  • CVE-2013-4688Jul 11, 2013
    Juniper Networks
    Junos
    risk 0.00cvss —epss 0.02

    flowd in Juniper Junos 10.4 before 10.4R11 on SRX devices, when the MSRPC Application Layer Gateway (ALG) is enabled, allows remote attackers to cause a denial of service (daemon crash) via crafted MSRPC requests, aka PR 772834.

  • CVE-2013-4687Jul 11, 2013
    Juniper Networks
    Junos
    risk 0.00cvss —epss 0.03

    flowd in Juniper Junos 10.4 before 10.4S14, 11.2 and 11.4 before 11.4R6-S2, and 12.1 before 12.1R6 on SRX devices, when certain Application Layer Gateways (ALGs) are enabled, allows remote attackers to cause a denial of service (daemon crash) via crafted TCP packets, aka PRs…

  • CVE-2013-4686Jul 11, 2013
    Juniper Networks
    Junos
    risk 0.00cvss —epss 0.02

    The kernel in Juniper Junos 10.4 before 10.4R14, 11.4 before 11.4R8, 11.4X27 before 11.4X27.43, 12.1 before 12.1R6, 12.1X44 before 12.1X44-D20, 12.2 before 12.2R4, and 12.3 before 12.3R2, in certain VLAN configurations with unrestricted arp-resp and proxy-arp settings, allows…

  • CVE-2013-4684Jul 11, 2013
    Juniper Networks
    Junos
    risk 0.00cvss —epss 0.03

    flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R8, 12.1 before 12.1R7, and 12.1X44 before 12.1X44-D15 on SRX devices, when PIM and NAT are enabled, allows remote attackers to cause a denial of service (daemon crash) via crafted PIM packets, aka PR 842253.

  • CVE-2013-3970Jun 13, 2013
    Juniper Networks
    Junos Pulse Secure Access Service
    risk 0.00cvss —epss 0.00

    Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS 7.0r2 through 7.0r8 and 7.1r1 through 7.1r5 and Junos Pulse Access Control Service (aka UAC) with UAC OS 4.1r1 through 4.1r5 include a test Certification Authority (CA) certificate in the Trusted Server CAs…

  • CVE-2013-3498May 8, 2013
    Juniper Networks
    Smartpass
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Juniper SmartPass WLAN Security Management before 7.7 MR3 and 8.0 before MR2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2013-3497May 8, 2013
    Juniper Networks
    Junos Space
    risk 0.00cvss —epss 0.00

    Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen.

  • CVE-2009-5086Sep 2, 2011
    Juniper Networks
    IDP
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Appliance Configuration Manager (ACM) in Juniper IDP 4.1 before 4.1r3 and 4.2 before 4.2r1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2010-2289Jun 15, 2010
    Juniper Networks
    Secure Access 2000
    risk 0.00cvss —epss 0.01

    Open redirect vulnerability in dana/home/homepage.cgi in Juniper Networks IVE 6.5R1 (Build 14599) and 6.5R2 (Build 14951) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the Location parameter.

  • CVE-2010-2288Jun 15, 2010
    Juniper Networks
    Secure Access 2000
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in dana/nc/ncrun.cgi in Juniper Networks IVE 6.5R1 (Build 14599) and 6.5R2 (Build 14951) allows remote attackers to inject arbitrary web script or HTML via the DSSignInURL cookie.

  • CVE-2009-4643Feb 15, 2010
    Juniper Networks
    Odyssey Access Client
    risk 0.00cvss —epss 0.04

    Stack-based buffer overflow in dsInstallerService.dll in the Juniper Installer Service, as used in Juniper Odyssey Access Client 4.72.11421.0 and other products, allows remote attackers to execute arbitrary code via a long string in a malformed DSSETUPSERVICE_CMD_UNINSTALL…

  • CVE-2009-2631Dec 4, 2009
    Stonesoft
    Stonegate
    risk 0.00cvss —epss 0.05

    Multiple clientless SSL VPN products that run in web browsers, including Stonesoft StoneGate; Cisco ASA; SonicWALL E-Class SSL VPN and SonicWALL SSL VPN; SafeNet SecureWire Access Gateway; Juniper Networks Secure Access; Nortel CallPilot; Citrix Access Gateway; and other…

  • CVE-2008-6096Feb 9, 2009
    Juniper Networks
    Screenos
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Juniper NetScreen ScreenOS before 5.4r10, 6.0r6, and 6.1r2 allows remote attackers to inject arbitrary web script or HTML via the user name parameter to the (1) web interface login page or the (2) telnet login page.

  • CVE-2008-5302Dec 1, 2008
    Perl Foundation
    File\
    risk 0.00cvss —epss 0.00

    Race condition in the rmtree function in File::Path 1.08 and 2.07 (lib/File/Path.pm) in Perl 5.8.8 and 5.10.0 allows local users to create arbitrary setuid binaries via a symlink attack, a different vulnerability than CVE-2005-0448, CVE-2004-0452, and CVE-2008-2827. NOTE: this…

Page 22 of 23