Page 32 of 164 results (0.004 seconds)

CVSS: 4.3EPSS: 1%CPEs: 53EXPL: 0

CVE-2013-6015

https://notcve.org/view.php?id=CVE-2013-6015

Juniper Junos before 10.4S14, 11.4 before 11.4R5-S2, 12.1R before 12.1R3, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D15 on SRX Series services gateways, when a plugin using TCP proxy is configured, allows remote attackers to cause a denial of service (flow daemon crash) via an unspecified sequence of TCP packets. Juniper Junos en versiones anteriores a 10.4S14, 11.4 en versiones anteriores a 11.4R5-S2, 12.1R en versiones anteriores a 12.1R3, 12.1X44 en versiones anteriores a 12.1X44-D20 y 12.1X45 en versiones anteriores a 12.1X45-D15 en puertas de enlace de servicios SRX Series, cuando se configura un plugin utilizando un proxy TCP, permite a atacantes remotos provocar una denegación de servicio (caída del demonio de flujo) a través de una secuencia no especificada de paquetes TCP. • http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10596 http://osvdb.org/98368 http://secunia.com/advisories/55218 http://www.securitytracker.com/id/1029177 • CWE-20: Improper Input Validation •

CVSS: 5.1EPSS: 0%CPEs: 44EXPL: 0

CVE-2013-4689

https://notcve.org/view.php?id=CVE-2013-4689

J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1R before 12.1R6, 12.1X44 before 12.1X44-D15, 12.1x45 before 12.1X45-D10, 12.2 before 12.2R3, 12.3 before 12.3R2, and 13.1 before 13.1R3 allow remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism and hijack the authentication of administrators for requests that (1) create new administrator accounts or (2) have other unspecified impacts. J-Web in Juniper Junos anterior a la versión 10.4R13, 11.4 anterior a 11.4R7, 12.1R anterior a la versión 12.1R6, 12.1X44 anterior a 12.1X44-D15, 12.1x45 anterior a la versión 12.1X45-D10, 12.2 anterior a 12.2R3, 12.3 anterior a la versión 12.3R2, y 13.1 anterior a 13.1R3 permite a atacantes remotos evadir el mecanismo de protección CSRF y secuestrar la autenticación de administrador para peticiones que (1) crean nuevas cuentas de administración o (2) tiene otros impactos no especificados. • http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10597 http://osvdb.org/98325 http://secunia.com/advisories/55166 http://www.securityfocus.com/bid/62940 • CWE-352: Cross-Site Request Forgery (CSRF) •

CVSS: 6.8EPSS: 11%CPEs: 52EXPL: 0

CVE-2013-6013

https://notcve.org/view.php?id=CVE-2013-6013

Buffer overflow in the flow daemon (flowd) in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7-S2, 12.1.X44 before 12.1X44-D15, 12.1X45 before 12.1X45-D10 on SRX devices, when using telnet pass-through authentication on the firewall, might allow remote attackers to execute arbitrary code via a crafted telnet message. Desbordamiento de búfer en el demonio de flujo (flowd) de Juniper Junos anterior 10.4S14 10.4, 11.4 anterior 11.4R7-S2, 12.1.X44 anterior 12.1X44-D15, anterior 12.1X45 12.1X45-D10 en dispositivos SRX, al usar telnet con autenticación pass-through en el firewall, podría permitir a atacantes remotos ejecutar código arbitrario a través de un mensaje telnet manipulado. • http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10594 http://osvdb.org/98369 http://secunia.com/advisories/55109 http://www.securityfocus.com/bid/62962 http://www.securitytracker.com/id/1029175 https://exchange.xforce.ibmcloud.com/vulnerabilities/87847 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 4.3EPSS: 0%CPEs: 5EXPL: 0

CVE-2014-3821 – Juniper JunOS 9.x Cross Site Scripting

https://notcve.org/view.php?id=CVE-2014-3821

Cross-site scripting (XSS) vulnerability in SRX Web Authentication (webauth) in Juniper Junos 11.4 before 11.4R11, 12.1X44 before 12.1X44-D34, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, and 12.1X47 before 12.1X47-D10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de XSS en SRX Web Authentication (webauth) en Juniper Junos 11.4 anterior a 11.4R11, 12.1X44 anterior a 12.1X44-D34, 12.1X45 anterior a 12.1X45-D25, 12.1X46 anterior a 12.1X46-D20 y 12.1X47 anterior a 12.1X47-D10 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados. Juniper JunOS version 9.x suffers from a html injection vulnerability that allows for cross site scripting attacks. • http://www.securityfocus.com/bid/68548 http://www.securitytracker.com/id/1030563 https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10640 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.0EPSS: 0%CPEs: 8EXPL: 0

CVE-2013-4690

https://notcve.org/view.php?id=CVE-2013-4690

Juniper Junos 10.4 before 10.4S13, 11.4 before 11.4R7-S1, 12.1 before 12.1R5-S3, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D10 on the SRX1400, SRX3400, and SRX3600 does not properly initialize memory locations used during padding of Ethernet packets, which allows remote attackers to obtain sensitive information by reading packet data, aka PR 829536, a related issue to CVE-2003-0001. Juniper Junos v10.4 antes de v10.4S13, v11.4 antes de v11.4R7-S1, v12.1 antes de v12.1R5-S3, v12.1X44 antes de v12.1X44-D20, y v12.1X45 antes de v12.1X45-D10 en SRX1400, SRX3400, y SRX3600 no inicializa correctamente partes de memoria usadas con paquetes Ethernet manipulados, lo que permite a atacantes remotos obtener información sensible leyendo paquetes de datos, también conocido como PR 829536, un incidente relacionado con CVE-2003-0001. • http://kb.juniper.net/JSA10579 http://osvdb.org/95112 http://www.securityfocus.com/bid/61123 https://exchange.xforce.ibmcloud.com/vulnerabilities/85627 • CWE-399: Resource Management Errors •