CVSS: 9.8EPSS: 3%CPEs: 1EXPL: 0CVE-2016-4926
https://notcve.org/view.php?id=CVE-2016-4926
20 Mar 2017 — Insufficient authentication vulnerability in Junos Space before 15.2R2 allows remote network based users with access to Junos Space web interface to perform certain administrative tasks without authentication. Vulnerabilidad de insuficiencia de autenticación en Junos Space en versiones anteriores a 15.2R2 permite a usuarios basados en redes remotas con acceso a la interfaz web de Junos Space realizar ciertas tareas administrativas sin autenticación. • http://www.securityfocus.com/bid/93540 • CWE-287: Improper Authentication •
CVSS: 8.1EPSS: 0%CPEs: 1EXPL: 0CVE-2016-4927
https://notcve.org/view.php?id=CVE-2016-4927
20 Mar 2017 — Insufficient validation of SSH keys in Junos Space before 15.2R2 allows man-in-the-middle (MITM) type of attacks while a Space device is communicating with managed devices. Validación insuficiente de claves SSH en Junos Space en versiones anteriores a 15.2R2 permite ataques del tipo man-in-the-middle (MITM) mientras un dispositivo Space se está comunicando con dispositivos gestionados. • http://www.securityfocus.com/bid/93540 • CWE-20: Improper Input Validation •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2016-4928
https://notcve.org/view.php?id=CVE-2016-4928
20 Mar 2017 — Cross site request forgery vulnerability in Junos Space before 15.2R2 allows remote attackers to perform certain administrative actions on Junos Space. Vulnerabilidad de CSRF en Junos Space en versiones anteriores a 15.2R2 permite a atacantes remotos realizar ciertas acciones administrativas en Junos Space. • http://www.securityfocus.com/bid/93540 • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 9.0EPSS: 2%CPEs: 1EXPL: 0CVE-2016-4929
https://notcve.org/view.php?id=CVE-2016-4929
20 Mar 2017 — Command injection vulnerability in Junos Space before 15.2R2 allows attackers to execute arbitrary code as a root user. Vulnerabilidad de inyección de comandos en Junos Space en versiones anteriores a 15.2R2 permite a atacantes ejecutar código arbitrario como usuario root. • http://www.securityfocus.com/bid/93540 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2016-4930
https://notcve.org/view.php?id=CVE-2016-4930
20 Mar 2017 — Cross-site scripting (XSS) vulnerability in Junos Space before 15.2R2 allows remote attackers to steal sensitive information or perform certain administrative actions. Vulnerabilidad de XSS en Junos Space en versiones anteriores a 15.2R2 permite a atacantes remotos robar información sensible o realizar ciertas acciones administrativas en Junos Space. • http://www.securityfocus.com/bid/93540 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2016-4931
https://notcve.org/view.php?id=CVE-2016-4931
20 Mar 2017 — XML entity injection in Junos Space before 15.2R2 allows attackers to cause a denial of service. Inyección de XML en Junos Space en versiones anteriores a 15.2R2 permite a atacantes provocar una denegación de servicio. • http://www.securityfocus.com/bid/93540 • CWE-611: Improper Restriction of XML External Entity Reference •
CVSS: 8.8EPSS: 0%CPEs: 11EXPL: 0CVE-2015-2620 – mysql: unspecified vulnerability related to Server:Security:Privileges (CPU July 2015)
https://notcve.org/view.php?id=CVE-2015-2620
16 Jul 2015 — Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.23 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Security : Privileges. Vulnerabilidad no especificada en Oracle MySQL Server 5.5.43 y anteriores y 5.6.23 y anteriores, permite a usuarios remotos autenticados afectar la confidencialidad a través de vectores desconocidos relacionados con Server : Security : Privileges. MariaDB is a multi-user, multi-threaded SQL databa... • http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698 •
CVSS: 10.0EPSS: 4%CPEs: 36EXPL: 0CVE-2015-3209 – qemu: pcnet: multi-tmd buffer overflow in the tx path
https://notcve.org/view.php?id=CVE-2015-3209
10 Jun 2015 — Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending a packet with TXSTATUS_STARTPACKET set and then a crafted packet with TXSTATUS_DEVICEOWNS set. Desbordamiento de buffer basado en memoria dinámica en el controlador PCNET en QEMU permite a atacantes remotos ejecutar código arbitrario mediante el envío de un paquete con el juego TXSTATUS_STARTPACKET y posteriormente un paquete manipulado con el juego TXSTATUS_DEVICEOWNS. A flaw was found in... • http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-787: Out-of-bounds Write •
CVSS: 8.8EPSS: 0%CPEs: 34EXPL: 0CVE-2015-0501 – mysql: unspecified vulnerability related to Server:Compiling (CPU April 2015)
https://notcve.org/view.php?id=CVE-2015-0501
16 Apr 2015 — Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Compiling. Vulnerabilidad no especificada en Oracle MySQL Server 5.5.42 y anterioresw y 5.6.23 y anteriores, permite a usuarios remotos autenticados afectar la disponibilidad a través de vectores desconocidos relacionados con Server : Compiling. MariaDB is a multi-user, multi-threaded SQL database server that is binary c... • http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698 •
CVSS: 4.3EPSS: 1%CPEs: 10EXPL: 0CVE-2014-6559 – mysql: unspecified vulnerability related to C API SSL CERTIFICATE HANDLING (CPU October 2014)
https://notcve.org/view.php?id=CVE-2014-6559
15 Oct 2014 — Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect confidentiality via vectors related to C API SSL CERTIFICATE HANDLING. Vulnerabilidad sin especificar en Oracle MySQL Server 5.5.39 y anteriores, y 5.6.20 y anteriores, permite a atacantes remotos afectar la confidencialidad a través de vectores relacionados con C API SSL CERTIFICATE HANDLING. Multiple security issues were discovered in MySQL and this update includes a new upstream ... • http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698 •