Page 27 of 300 results (0.006 seconds)

CVSS: 7.8EPSS: 0%CPEs: 22EXPL: 0

CVE-2014-6378

https://notcve.org/view.php?id=CVE-2014-6378

14 Oct 2014 — Juniper Junos 11.4 before R12-S4, 12.1X44 before D35, 12.1X45 before D30, 12.1X46 before D25, 12.1X47 before D10, 12.2 before R9, 12.2X50 before D70, 12.3 before R7, 13.1 before R4 before S3, 13.1X49 before D55, 13.1X50 before D30, 13.2 before R5, 13.2X50 before D20, 13.2X51 before D26 and D30, 13.2X52 before D15, 13.3 before R3, and 14.1 before R1 allows remote attackers to cause a denial of service (router protocol daemon crash) via a crafted RSVP PATH message. Juniper Junos 11.4 anhterior a R12-S4, 12.1X... • http://www.securityfocus.com/bid/70363 • CWE-399: Resource Management Errors •

CVSS: 9.8EPSS: 0%CPEs: 21EXPL: 0

CVE-2014-6379

https://notcve.org/view.php?id=CVE-2014-6379

14 Oct 2014 — Juniper Junos 11.4 before R12, 12.1 before R10, 12.1X44 before D35, 12.1X45 before D25, 12.1X46 before D20, 12.1X47 before D10, 12.2 before R8, 12.2X50 before D70, 12.3 before R6, 13.1 before R4-S3, 13.1X49 before D55, 13.1X50 before D30, 13.2 before R4, 13.2X50 before D20, 13.2X51 before D26 and D30, 13.2X52 before D15, 13.3 before R2, and 14.1 before R1, when a RADIUS accounting server is configured as [system accounting destination radius], creates an entry in /var/etc/pam_radius.conf, which might allow ... • http://www.securityfocus.com/bid/70365 • CWE-287: Improper Authentication •

CVSS: 7.8EPSS: 0%CPEs: 18EXPL: 1

CVE-2014-6380

https://notcve.org/view.php?id=CVE-2014-6380

14 Oct 2014 — Juniper Junos 11.4 before R11, 12.1 before R9, 12.1X44 before D30, 12.1X45 before D20, 12.1X46 before D15, 12.1X47 before D10, 12.2 before R8, 12.2X50 before D70, 12.3 before R6, 13.1 before R4, 13.1X49 before D55, 13.1X50 before D30, 13.2 before R4, 13.2X50 before D20, 13.2X51 before D15, 13.2X52 before D15, 13.3 before R1, when using an em interface to connect to a certain internal network, allows remote attackers to cause a denial of service (em driver bock and FPC reset or "go offline") via a series of ... • http://www.securityfocus.com/bid/70369 •

CVSS: 7.8EPSS: 0%CPEs: 14EXPL: 0

CVE-2014-3815

https://notcve.org/view.php?id=CVE-2014-3815

11 Jul 2014 — Juniper Junos 12.1X46 before 12.1X46-D20 and 12.1X47 before 12.1X47-D10 on SRX Series devices allows remote attackers to cause a denial of service (flowd crash) via a crafted SIP packet. Juniper Junos 12.1X46 anterior a 12.1X46-D20 y 12.1X47 anterior a 12.1X47-D10 en dispositivos de la serie SRX permite a atacantes remotos causar una denegación de servicio (caída del demonio de flujo) a través de un paquete SIP manipulado. • http://www.securityfocus.com/bid/68551 • CWE-20: Improper Input Validation •

CVSS: 9.0EPSS: 0%CPEs: 12EXPL: 0

CVE-2014-3816

https://notcve.org/view.php?id=CVE-2014-3816

11 Jul 2014 — Juniper Junos 11.4 before 11.4R12, 12.1 before 12.1R11, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D30, 12.1X46 before 12.1X46-D20, 12.1X47 before 12.1X47-D10, 12.2 before 12.2R8-S2, 12.3 before 12.3R7, 13.1 before 13.1R4-S2, 13.2 before 13.2R5, 13.3 before 13.3R2-S2, and 14.1 before 14.1R1 allows remote authenticated users to gain privileges via unspecified combinations of CLI commands and arguments. Juniper Junos 11.4 anterior a 11.4R12, 12.1 anterior a 12.1R11, 12.1X44 anterior a 12.1X44-D35, 12.... • http://www.securitytracker.com/id/1030559 • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 7.8EPSS: 0%CPEs: 17EXPL: 0

CVE-2014-3817

https://notcve.org/view.php?id=CVE-2014-3817

11 Jul 2014 — Juniper Junos 11.4 before 11.4R12, 12.1X44 before 12.1X44-D32, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, and 12.1X47 before 12.1X47-D10 on SRX Series devices, when NAT protocol translation from IPv4 to IPv6 is enabled, allows remote attackers to cause a denial of service (flowd hang or crash) via a crafted packet. Juniper Junos 11.4 anterior a 11.4R12, 12.1X44 anterior a 12.1X44-D32, 12.1X45 anterior a 12.1X45-D25, 12.1X46 anterior a 12.1X46-D20 y 12.1X47 anterior a 12.1X47-D10 en dispositivos... • http://secunia.com/advisories/59136 • CWE-20: Improper Input Validation •

CVSS: 7.8EPSS: 0%CPEs: 12EXPL: 0

CVE-2014-3819

https://notcve.org/view.php?id=CVE-2014-3819

11 Jul 2014 — Juniper Junos 11.4 before 11.4R12, 12.1 before 12.1R10, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, 12.1X47 before 12.1X47-D10, 12.2 before 12.2R8, 12.3 before 12.3R7, 13.1 before 13.1R4, 13.2 before 13.2R4, 13.3 before 13.3R2, and 14.1 before 14.1R1, when Auto-RP is enabled, allows remote attackers to cause a denial of service (RDP routing process crash and restart) via a malformed PIM packet. Juniper Junos 11.4 anterior a 11.4R12, 12.1 anterior a 12.1R10, 12.1X44 an... • http://www.securityfocus.com/bid/68539 • CWE-20: Improper Input Validation •

CVSS: 7.5EPSS: 0%CPEs: 18EXPL: 0

CVE-2014-3822

https://notcve.org/view.php?id=CVE-2014-3822

11 Jul 2014 — Juniper Junos 11.4 before 11.4R8, 12.1 before 12.1R5, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D15, 12.1X46 before 12.1X46-D10, and 12.1X47 before 12.1X47-D10 on SRX Series devices, allows remote attackers to cause a denial of service (flowd crash) via a malformed packet, related to translating IPv6 to IPv4. Juniper Junos 11.4 anterior a 11.4R8, 12.1 anterior a 12.1R5, 12.1X44 anterior a 12.1X44-D20, 12.1X45 anterior a 12.1X45-D15, 12.1X46 anterior a 12.1X46-D10 y 12.1X47 anterior a 12.1X47-D10 en... • http://www.securitytracker.com/id/1030560 • CWE-20: Improper Input Validation •

CVSS: 6.1EPSS: 0%CPEs: 11EXPL: 0

CVE-2014-2711

https://notcve.org/view.php?id=CVE-2014-2711

14 Apr 2014 — Cross-site scripting (XSS) vulnerability in J-Web in Juniper Junos before 11.4R11, 11.4X27 before 11.4X27.62 (BBE), 12.1 before 12.1R9, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, 12.2 before 12.2R7, 12.3 before 12.3R6, 13.1 before 13.1R4, 13.2 before 13.2R3, and 13.3 before 13.3R1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de XSS en J-Web en Juniper Junos en versiones anteriores a 11.4R11, 11.4X27 en version... • http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10619 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 8EXPL: 0

CVE-2014-2712

https://notcve.org/view.php?id=CVE-2014-2712

14 Apr 2014 — Cross-site scripting (XSS) vulnerability in J-Web in Juniper Junos before 10.0S25, 10.4 before 10.4R10, 11.4 before 11.4R11, 12.1 before 12.1R9, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, 12.1X46 before 12.1X46-D10, and 12.2 before 12.2R1 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to index.php. Vulnerabilidad de XSS en J-Web en Juniper Junos en versiones anteriores a 10.0S25, 10.4 en versiones anteriores a 10.4R10, 11.4 en versiones anteriores a 11... • http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10521 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •