Skip to contentJuniper Junos vulnerabilities
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: A weakness in the Veriexec subsystem may allow privilege escalation.CVE-2019-00587.8 High
- juniper junos, juniper networks junos os +1 moreNFX Series: An attacker may be able to take control of the JDM application and subsequently the entire system.CVE-2019-00577.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: An MPC10 Denial of Service (DoS) due to OSPF states transitioning to Down, causes traffic to stop forwarding through the device.CVE-2019-00567.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: An attacker may cause flowd to crash by sending certain valid SIP traffic to a device with SIP ALG enabled.CVE-2019-00557.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: An attacker may be able to perform Man-in-the-Middle (MitM) attacks during app-id signature updates.CVE-2019-00546.8 Medium
- juniper junos, juniper networks junos os +1 moreSRX5000 Series: Denial of Service vulnerability in SSL-Proxy feature.CVE-2019-00516.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX1500: Denial of service due to crash of srxpfe process under heavy traffic conditions.CVE-2019-00507.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Persistent XSS vulnerability in J-WebCVE-2019-00478.8 High
- juniper junos, juniper networks junos os, debian linux +2 moreJunos OS: Insufficient validation of environment variables in telnet client may lead to stack-based buffer overflowCVE-2019-0053Public exploitFix available7.8 High
- juniper junos, juniper networks junos os +1 moreSRX Series: srxpfe process crash while JSF/UTM module parses specific HTTP packetsCVE-2019-00527.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: RPD process crashes when BGP peer restartsCVE-2019-00497.5 High
- juniper junos, juniper networks junos os +1 moreEX4300 Series: When a firewall filter is applied to a loopback interface, other firewall filters for multicast traffic may failCVE-2019-00485.8 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4300 Series: Denial of Service upon receipt of large number of specific valid packets on management interface.CVE-2019-00466.5 Medium
- backdropcms backdrop, drupal, jquery +102 more +104 moreXSS in jQuery as used in Drupal, Backdrop CMS, and other productsCVE-2019-11358Public exploitFix availableEPSS 86.8%6.1 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX5000 series: Kernel crash (vmcore) upon receipt of a specific packet on fxp0 interfaceCVE-2019-00447.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: RPD process crashes upon receipt of a specific SNMP packetCVE-2019-00437.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4300-MP Series: IP transit traffic can reach the control plane via loopback interface.CVE-2019-00416.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Specially crafted packets sent to port 111 on any interface triggers responses from the management interfaceCVE-2019-00406.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Login credentials are vulnerable to brute force attacks through the REST APICVE-2019-00395.3 Medium
- juniper junos, juniper networks junos os +1 moreSRX Series: Crafted packets destined to fxp0 management interface on SRX340/SRX345 devices can lead to DoSCVE-2019-00386.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: jdhcpd crash upon receipt of crafted DHCPv6 solicit messageCVE-2019-00377.4 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Firewall filter terms named "internal-1" and "internal-2" being ignoredCVE-2019-00367.2 High
- juniper junos, juniper networks junos os +1 moreJunos OS: 'set system ports console insecure' allows root password recovery on OAM volumesCVE-2019-00356.8 Medium
- juniper junos, juniper networks junos os +1 moreSRX Series: A remote attacker may cause a high CPU Denial of Service to the device when proxy ARP is configured.CVE-2019-00337.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: jdhcpd daemon memory consumption Denial of Service when receiving specific IPv6 DHCP packets.CVE-2019-00317.4 High
- juniper junos, juniper networks junos os +1 moreJunos OS: RPD process crashes due to specific BGP peer restarts condition.CVE-2019-00287.5 High
- juniper junos, juniper networks junos os +1 moreBGP packets can trigger rpd crash when BGP tracing is enabled.CVE-2019-00197.5 High
- juniper junos, juniper networks junos os +1 moreQFX5000 Series, EX4300, EX4600: A stack buffer overflow vulnerability in Packet Forwarding Engine manager (FXPC) processCVE-2019-00089.8 Critical
- juniper junos spaceJunos Space: Unrestricted file upload vulnerabilityCVE-2019-00176.5 Medium
- juniper junos spaceJunos Space: Authenticated user able to delete devices without delete device privilegesCVE-2019-00166.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Deleted dynamic VPN users are allowed to establish VPN connections until rebootCVE-2019-00155.4 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX and PTX Series: FPC process crashes after J-Flow processes a malformed packetCVE-2019-00147.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: RPD crash upon receipt of malformed PIM packetCVE-2019-00136.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: rpd crash on VPLS PE upon receipt of specific BGP messageCVE-2019-00127.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Kernel crash after processing specific incoming packet to the out of band management interface (CVE-2019-0011)CVE-2019-00116.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Crafted HTTP traffic may cause UTM to consume all mbufs, leading to Denial of ServiceCVE-2019-00107.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: EX2300 and EX3400: High disk I/O operations may disrupt the communication between RE and PFECVE-2019-00095.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: vMX series: Predictable IP ID sequence numbers vulnerabilityCVE-2019-00079.3 Critical
- juniper junos, juniper networks junos os +1 moreJunos OS: EX, QFX and MX series: Packet Forwarding Engine manager (FXPC) process crashes due to a crafted HTTP packet in a Virtual Chassis configurationCVE-2019-00069.8 Critical
- juniper junosOn EX2300, EX3400, EX4600, QFX3K and QFX5K series, firewall filter configuration cannot perform...CVE-2019-00055.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: A flowspec BGP update with a specific term-order causes routing protocol daemon (rpd) process to crash with a core.CVE-2019-00037.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: EX2300 and EX3400 series: Certain stateless firewall filter rules might not take effectCVE-2019-00025.8 Medium
- juniper junos, juniper networks junos os, fedoraproject fedora +2 moreJunos OS: MX Series: uncontrolled recursion and crash in Broadband Edge subscriber management daemon (bbe-smgd).CVE-2019-00017.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Nexthop index allocation failed: private index space exhausted after incoming ARP requests to management interfaceCVE-2018-00636.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Denial of Service in J-WebCVE-2018-00625.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Denial of service in telnetdCVE-2018-00615.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Invalid IP/mask learned from DHCP server might cause device control daemon (dcd) process crashCVE-2018-00605.3 Medium
- juniper junos, juniper networks junos os +1 moreMX Series: In BBE configurations, receipt of a crafted IPv6 exception packet causes a Denial of ServiceCVE-2018-00585.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: authd allows assignment of IP address requested by DHCP subscriber logging in with Option 50 (Requested IP Address)CVE-2018-00576.1 Medium
- juniper junos, juniper networks junos os +1 moreMX Series: L2ALD daemon may crash if a duplicate MAC is learned by two different interfacesCVE-2018-00566.5 Medium
- Show moreLoading…