Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
juniper junos 14.1 vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2018-0002
On SRX Series and MX Series devices with a Service PIC with any ALG enabled, a crafted TCP/IP response packet processed through the device results in memory corruption leading to a flowd daemon crash. Sustained crafted response packets lead to repeated crashes of the flowd daemon...
Juniper Junos 12.1x46
Juniper Junos 12.3x48
Juniper Junos 14.1
Juniper Junos 14.2
Juniper Junos 15.1x49
Juniper Junos 15.1
Juniper Junos 16.1
Juniper Junos 16.2
Juniper Junos 17.1
1 Github repository
4.3
CVSSv2
CVE-2017-10611
If extended statistics are enabled via 'set chassis extended-statistics', when executing any operation that fetches interface statistics, including but not limited to SNMP GET requests, the pfem process or the FPC may crash and restart. Repeated crashes of PFE processin...
Juniper Junos 14.1
Juniper Junos 14.1x53
Juniper Junos 14.2
Juniper Junos 15.1
Juniper Junos 16.1
Juniper Junos 16.1x65
Juniper Junos 16.2
Juniper Junos 17.1
Juniper Junos 17.2
Juniper Junos 17.2x75
Juniper Junos 17.3
4.3
CVSSv2
CVE-2017-10618
When the 'bgp-error-tolerance' feature â€" designed to help mitigate remote session resets from malformed path attributes â€" is enabled, a BGP UPDATE containing a specifically crafted set of transitive attributes can cause ...
Juniper Junos 13.3
Juniper Junos 14.1
Juniper Junos 14.1x50
Juniper Junos 14.1x53
Juniper Junos 14.2
Juniper Junos 15.1
Juniper Junos 15.1x49
Juniper Junos 15.1x53
Juniper Junos 16.1
Juniper Junos 16.2
Juniper Junos 17.1
Juniper Junos 17.2
Juniper Junos 17.2x75
4.3
CVSSv2
CVE-2016-4923
Insufficient cross site scripting protection in J-Web component in Juniper Networks Junos OS may potentially allow a remote unauthenticated user to inject web script or HTML and steal sensitive data and credentials from a J-Web session and to perform administrative actions on the...
Juniper Junos 11.4
Juniper Junos 11.4r13
Juniper Junos 12.3
Juniper Junos 12.3x48
Juniper Junos 13.3
Juniper Junos 14.1
Juniper Junos 14.2
Juniper Junos 15.1x53
Juniper Junos 15.1
Juniper Junos 15.1x49
Juniper Junos 12.1x44
Juniper Junos 12.1x46
Juniper Junos 12.1x47
4.3
CVSSv2
CVE-2016-1257
The Routing Engine in Juniper Junos OS 13.2R5 up to and including 13.2R8, 13.3R1 prior to 13.3R8, 13.3R7 prior to 13.3R7-S3, 14.1R1 prior to 14.1R6, 14.1R3 prior to 14.1R3-S9, 14.1R4 prior to 14.1R4-S7, 14.1X51 prior to 14.1X51-D65, 14.1X53 prior to 14.1X53-D12, 14.1X53 prior to ...
Juniper Junos 15.1x49
Juniper Junos 14.2
Juniper Junos 14.1x51
Juniper Junos 14.1
Juniper Junos 13.3
Juniper Junos 13.2
Juniper Junos 15.1
Juniper Junos 14.1x53
4.3
CVSSv2
CVE-2015-3004
J-Web in Juniper Junos 11.4 prior to 11.4R12, 12.1X44 prior to 12.1X44-D35, 12.1X46 prior to 12.1X46-D25, 12.1X47 prior to 12.1X47-D10, 12.3X48 prior to 12.3X48-D10, 12.2 prior to 12.2R9, 12.3 prior to 12.3R7, 13.2 prior to 13.2R6, 13.2X51 prior to 13.2X51-D20, 13.3 prior to 13.3...
Juniper Junos 12.1x44
Juniper Junos 12.1x46
Juniper Junos 12.2
Juniper Junos 12.3
Juniper Junos 13.2
Juniper Junos 13.3
Juniper Junos 12.1x47
Juniper Junos 12.3x48
Juniper Junos 14.2
Juniper Junos 13.2x51
Juniper Junos 14.1
Juniper Junos 14.1x53
4
CVSSv2
CVE-2018-0010
A vulnerability in the Juniper Networks Junos Space Security Director allows a user who does not have SSH access to a device to reuse the URL that was created for another user to perform SSH access. Affected releases are all versions of Junos Space Security Director before 17.2R1...
Juniper Junos Space 17.1
Juniper Junos Space 15.2
Juniper Junos Space 15.1
Juniper Junos Space 14.1
Juniper Junos Space 16.1
Juniper Junos Space 17.2
Juniper Junos Space 13.3
3.5
CVSSv2
CVE-2021-0220
The Junos Space Network Management Platform has been found to store shared secrets in a recoverable format that can be exposed through the UI. An attacker who is able to execute arbitrary code in the victim browser (for example via XSS) or access cached contents may be able to ob...
Juniper Junos Space 1.0
Juniper Junos Space 1.1
Juniper Junos Space 1.2
Juniper Junos Space 1.3
Juniper Junos Space 1.4
Juniper Junos Space 2.0
Juniper Junos Space 11.1
Juniper Junos Space 11.2
Juniper Junos Space 11.3
Juniper Junos Space 11.4
Juniper Junos Space 12.1
Juniper Junos Space 12.2
Juniper Junos Space 12.3
Juniper Junos Space 13.1
Juniper Junos Space 13.3
Juniper Junos Space 14.1
Juniper Junos Space 15.1
Juniper Junos Space 15.2
Juniper Junos Space 16.1
Juniper Junos Space 17.1
Juniper Junos Space 17.2
Juniper Junos Space 18.1
3.5
CVSSv2
CVE-2018-0047
A persistent cross-site scripting vulnerability in the UI framework used by Junos Space Security Director may allow authenticated users to inject persistent and malicious scripts. This may allow stealing of information or performing actions as a different user when other users ac...
Juniper Junos Space 13.3
Juniper Junos Space 14.1
Juniper Junos Space 15.1
Juniper Junos Space 16.1
Juniper Junos Space 17.2
Juniper Junos Space 15.2
Juniper Junos Space 17.1
3.5
CVSSv2
CVE-2018-0011
A reflected cross site scripting (XSS) vulnerability in Junos Space may potentially allow a remote authenticated user to inject web script or HTML and steal sensitive data and credentials from a session, and to perform administrative actions on the Junos Space network management ...
Juniper Junos Space 16.1
Juniper Junos Space 17.1
Juniper Junos Space 15.1
Juniper Junos Space 14.1
Juniper Junos Space 13.3
Juniper Junos Space 15.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33572
CVE-2024-24919
CVE-2024-0230
CVE-2024-32714
HTML injection
local file inclusion
CVE-2024-31098
CVE-2024-31244
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
2
3
4
5
6
7
8
NEXT »