CVSS: 7.5EPSS: 0%CPEs: 18EXPL: 0CVE-2014-3822
https://notcve.org/view.php?id=CVE-2014-3822
11 Jul 2014 — Juniper Junos 11.4 before 11.4R8, 12.1 before 12.1R5, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D15, 12.1X46 before 12.1X46-D10, and 12.1X47 before 12.1X47-D10 on SRX Series devices, allows remote attackers to cause a denial of service (flowd crash) via a malformed packet, related to translating IPv6 to IPv4. Juniper Junos 11.4 anterior a 11.4R8, 12.1 anterior a 12.1R5, 12.1X44 anterior a 12.1X44-D20, 12.1X45 anterior a 12.1X45-D15, 12.1X46 anterior a 12.1X46-D10 y 12.1X47 anterior a 12.1X47-D10 en... • http://www.securitytracker.com/id/1030560 • CWE-20: Improper Input Validation •
CVSS: 7.5EPSS: 0%CPEs: 12EXPL: 0CVE-2014-0612
https://notcve.org/view.php?id=CVE-2014-0612
14 Apr 2014 — Unspecified vulnerability in Juniper Junos before 11.4R10-S1, before 11.4R11, 12.1X44 before 12.1X44-D26, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, and 12.1X46 before 12.1X46-D10, when Dynamic IPsec VPN is configured, allows remote attackers to cause a denial of service (new Dynamic VPN connection failures and CPU and disk consumption) via unknown vectors. Vulnerabilidad no especificada en Juniper Junos anterior a versión 11.4R10-S1, anterior a versión 11.4R11, versiones 12.1X44 anteriores a 1... • http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10620 •
CVSS: 7.5EPSS: 0%CPEs: 16EXPL: 0CVE-2014-0617
https://notcve.org/view.php?id=CVE-2014-0617
14 Jan 2014 — Juniper Junos 10.4S before 10.4S15, 10.4R before 10.4R16, 11.4 before 11.4R9, and 12.1R before 12.1R7 on SRX Series service gateways allows remote attackers to cause a denial of service (flowd crash) via a crafted IP packet. Juniper Junos 10.4S anteriores a 10.4S15, 10.4R anteriores a 10.4R16, 11.4 anteriores a 11.4R9 y 12.1R anteriores a 12.1R7 en los servicios de pasarela SRX Series permite a atacantes remotos causar denegación de servicio (caída de flowd) a través de un paquete IP manipulado. • http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10610 •
CVSS: 7.8EPSS: 0%CPEs: 17EXPL: 0CVE-2014-0618
https://notcve.org/view.php?id=CVE-2014-0618
11 Jan 2014 — Juniper Junos before 10.4 before 10.4R16, 11.4 before 11.4R8, 12.1R before 12.1R7, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D10 on SRX Series service gateways, when used as a UAC enforcer and captive portal is enabled, allows remote attackers to cause a denial of service (flowd crash) via a crafted HTTP message. Juniper Junos anterior a la versión 10.4 anterior a 10.4R16, 11.4 anterior a la versión 11.4R8, 12.1R anterior a 12.1R7, 12.1X44 anterior a la versión 12.1X44-D20, y 12.1X45 anterior a... • http://osvdb.org/101864 •
CVSS: 8.1EPSS: 5%CPEs: 52EXPL: 0CVE-2013-6013
https://notcve.org/view.php?id=CVE-2013-6013
17 Oct 2013 — Buffer overflow in the flow daemon (flowd) in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7-S2, 12.1.X44 before 12.1X44-D15, 12.1X45 before 12.1X45-D10 on SRX devices, when using telnet pass-through authentication on the firewall, might allow remote attackers to execute arbitrary code via a crafted telnet message. Desbordamiento de búfer en el demonio de flujo (flowd) de Juniper Junos anterior 10.4S14 10.4, 11.4 anterior 11.4R7-S2, 12.1.X44 anterior 12.1X44-D15, anterior 12.1X45 12.1X45-D10 en dispo... • http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10594 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 0%CPEs: 53EXPL: 0CVE-2013-6015
https://notcve.org/view.php?id=CVE-2013-6015
17 Oct 2013 — Juniper Junos before 10.4S14, 11.4 before 11.4R5-S2, 12.1R before 12.1R3, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D15 on SRX Series services gateways, when a plugin using TCP proxy is configured, allows remote attackers to cause a denial of service (flow daemon crash) via an unspecified sequence of TCP packets. Juniper Junos en versiones anteriores a 10.4S14, 11.4 en versiones anteriores a 11.4R5-S2, 12.1R en versiones anteriores a 12.1R3, 12.1X44 en versiones anteriores a 12.1X44-D20 y 12.1X... • http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10596 • CWE-20: Improper Input Validation •
CVSS: 7.8EPSS: 0%CPEs: 16EXPL: 0CVE-2013-4684
https://notcve.org/view.php?id=CVE-2013-4684
11 Jul 2013 — flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R8, 12.1 before 12.1R7, and 12.1X44 before 12.1X44-D15 on SRX devices, when PIM and NAT are enabled, allows remote attackers to cause a denial of service (daemon crash) via crafted PIM packets, aka PR 842253. flowd en Juniper Junos v10.4 antes de v10.4S14, v11.4 antes de v11.4R8, v12.1 antes de v12.1R7, y v12.1X44 antes de v12.1X44-D15 para dispositivos SRX, cuando PIM y NAT están habilitados, permite a atacantes remotos causar una denegación de se... • http://kb.juniper.net/JSA10573 •
CVSS: 10.0EPSS: 9%CPEs: 16EXPL: 0CVE-2013-4685
https://notcve.org/view.php?id=CVE-2013-4685
11 Jul 2013 — Buffer overflow in flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7, 12.1 before 12.1R6, and 12.1X44 before 12.1X44-D15 on SRX devices, when Captive Portal is enabled with the UAC enforcer role, allows remote attackers to execute arbitrary code via crafted HTTP requests, aka PR 849100. Desbordamiento de búfer en flowd en Juniper Junos v10.4 antes de v10.4S14, v11.4 antes de v11.4R7, v12.1 antes de v12.1R6, y v12.1X44 antes de v12.1X44-D15 para dispositivos SRX, cuando Captive Portal está habil... • http://kb.juniper.net/JSA10574 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 2%CPEs: 16EXPL: 0CVE-2013-4687
https://notcve.org/view.php?id=CVE-2013-4687
11 Jul 2013 — flowd in Juniper Junos 10.4 before 10.4S14, 11.2 and 11.4 before 11.4R6-S2, and 12.1 before 12.1R6 on SRX devices, when certain Application Layer Gateways (ALGs) are enabled, allows remote attackers to cause a denial of service (daemon crash) via crafted TCP packets, aka PRs 727980, 806269, and 835593. flowd en Juniper Junos v10.4 antes de v10.4S14, v11.2 y v11.4 antes de v11.4R6-S2, y v12.1 antes de v12.1R6 para dispositivos SRX, cuando Application Layer Gateways (ALGs) están habilitados , permite a atacan... • http://kb.juniper.net/JSA10577 •
CVSS: 7.8EPSS: 0%CPEs: 13EXPL: 0CVE-2013-4688
https://notcve.org/view.php?id=CVE-2013-4688
11 Jul 2013 — flowd in Juniper Junos 10.4 before 10.4R11 on SRX devices, when the MSRPC Application Layer Gateway (ALG) is enabled, allows remote attackers to cause a denial of service (daemon crash) via crafted MSRPC requests, aka PR 772834. El flujo de Juniper Junos v10.4 antes de v10.4R11 para dispositivos SRX, cuando el MSRPC Application Layer Gateway (ALG) está habilitado, permite a atacantes remotos causar una denegación de servicios (caída del demonio) a través de peticiones MSRPC, también conocido como PR 772834. • http://kb.juniper.net/JSA10578 •