Browse CVEs

HIGH 7.4 CVE-2021-0296 The Juniper Networks CTPView server is not enforcing HTTP Strict Transport Security (HSTS). HSTS is an optional response header which allows servers … Ctpview Mitigation only Fix from $1,9502021-10-19 MEDIUM 6.5 CVE-2021-0297 A vulnerability in the processing of TCP MD5 authentication in Juniper Networks Junos OS Evolved may allow a BGP or LDP session configured with MD5 a… Junos Os Evolved Mitigation only Fix from $1,6002021-10-19 HIGH 7.5 CVE-2021-0284 A buffer overflow vulnerability in the TCP/IP stack of Juniper Networks Junos OS allows an attacker to send specific sequences of packets to the devi… Junos Mitigation only Fix from $1,9502021-08-17 MEDIUM 6.5 CVE-2021-0292 An Uncontrolled Resource Consumption vulnerability in the ARP daemon (arpd) and Network Discovery Protocol (ndp) process of Juniper Networks Junos OS… Junos Os Evolved Mitigation only Fix from $1,6002021-07-15 MEDIUM 6.1 CVE-2021-0295 A vulnerability in the Distance Vector Multicast Routing Protocol (DVMRP) of Juniper Networks Junos OS on the QFX10K Series switches allows an attack… Junos Mitigation only Fix from $1,6002021-07-15 MEDIUM 5.5 CVE-2021-0293 A vulnerability in Juniper Networks Junos OS caused by Missing Release of Memory after Effective Lifetime leads to a memory leak each time the CLI co… Junos Mitigation only Fix from $1,6002021-07-15 MEDIUM 5.3 CVE-2021-0294 A vulnerability in Juniper Networks Junos OS, which only affects the release 18.4R2-S5, where a function is inconsistently implemented on Juniper Net… Junos Mitigation only Fix from $1,6002021-07-15 HIGH 7.5 CVE-2021-0283 A buffer overflow vulnerability in the TCP/IP stack of Juniper Networks Junos OS allows an attacker to send specific sequences of packets to the devi… Junos Mitigation only Fix from $1,9502021-07-15 HIGH 7.5 CVE-2021-0285 An uncontrolled resource consumption vulnerability in Juniper Networks Junos OS on QFX5000 Series and EX4600 Series switches allows an attacker sendi… Junos Mitigation only Fix from $1,9502021-07-15 HIGH 7.5 CVE-2021-0286 A vulnerability in the handling of exceptional conditions in Juniper Networks Junos OS Evolved (EVO) allows an attacker to send specially crafted pac… Junos Os Evolved Mitigation only Fix from $1,9502021-07-15 MEDIUM 6.5 CVE-2021-0287 In a Segment Routing ISIS (SR-ISIS)/MPLS environment, on Juniper Networks Junos OS and Junos OS Evolved devices, configured with ISIS Flexible Algori… Junos Mitigation only Fix from $1,6002021-07-15 MEDIUM 6.5 CVE-2021-0288 A vulnerability in the processing of specific MPLS packets in Juniper Networks Junos OS on MX Series and EX9200 Series devices with Trio-based MPCs (… Junos Mitigation only Fix from $1,6002021-07-15 MEDIUM 6.5 CVE-2021-0290 Improper Handling of Exceptional Conditions in Ethernet interface frame processing of Juniper Networks Junos OS allows an attacker to send specially … Junos Mitigation only Fix from $1,6002021-07-15 MEDIUM 6.5 CVE-2021-0291 An Exposure of System Data vulnerability in Juniper Networks Junos OS and Junos OS Evolved, where a sensitive system-level resource is not being suff… Junos Mitigation only Fix from $1,6002021-07-15 CRITICAL 9.8 CVE-2021-0276 A stack-based Buffer Overflow vulnerability in Juniper Networks SBR Carrier with EAP (Extensible Authentication Protocol) authentication configured, … Steel Belted Radius Carrier Mitigation only Fix from $2,3002021-07-15 HIGH 8.8 CVE-2021-0277 An Out-of-bounds Read vulnerability in the processing of specially crafted LLDP frames by the Layer 2 Control Protocol Daemon (l2cpd) of Juniper Netw… Junos Mitigation only Fix from $1,9502021-07-15 HIGH 7.8 CVE-2021-0278 An Improper Input Validation vulnerability in J-Web of Juniper Networks Junos OS allows a locally authenticated attacker to escalate their privileges… Junos Mitigation only Fix from $1,9502021-07-15 HIGH 7.5 CVE-2021-0280 Due to an Improper Initialization vulnerability in Juniper Networks Junos OS on PTX platforms and QFX10K Series with Paradise (PE) chipset-based line… Junos Mitigation only Fix from $1,9502021-07-15 HIGH 7.5 CVE-2021-0281 On Juniper Networks Junos OS devices configured with BGP origin validation using Resource Public Key Infrastructure (RPKI) receipt of a specific pack… Junos Mitigation only Fix from $1,9502021-07-15 HIGH 7.5 CVE-2021-0282 On Juniper Networks Junos OS devices with Multipath or add-path feature enabled, processing a specific BGP UPDATE can lead to a routing process daemo… Junos Mitigation only Fix from $1,9502021-07-15 HIGH 8.8 CVE-2021-0275 A Cross-site Scripting (XSS) vulnerability in J-Web on Juniper Networks Junos OS allows an attacker to target another user's session thereby gaining … Junos Mitigation only Fix from $1,9502021-04-22 MEDIUM 6.5 CVE-2021-0271 A Double Free vulnerability in the software forwarding interface daemon (sfid) process of Juniper Networks Junos OS allows an adjacently-connected at… Junos Mitigation only Fix from $1,6002021-04-22 MEDIUM 6.5 CVE-2021-0272 A kernel memory leak in QFX10002-32Q, QFX10002-60C, QFX10002-72Q, QFX10008, QFX10016 devices Flexible PIC Concentrators (FPCs) on Juniper Networks Ju… Junos Mitigation only Fix from $1,6002021-04-22 MEDIUM 5.9 CVE-2021-0270 On PTX Series and QFX10k Series devices with the "inline-jflow" feature enabled, a use after free weakness in the Packet Forwarding Engine (PFE) micr… Junos Mitigation only Fix from $1,6002021-04-22 MEDIUM 5.3 CVE-2021-0273 An always-incorrect control flow implementation in the implicit filter terms of Juniper Networks Junos OS and Junos OS Evolved on ACX5800, EX9200 Ser… Junos Mitigation only Fix from $1,6002021-04-22 CRITICAL 9.8 CVE-2021-0249 On SRX Series devices configured with UTM services a buffer overflow vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS… Junos Mitigation only Fix from $2,3002021-04-22 CRITICAL 9.8 CVE-2021-0254 A buffer size validation vulnerability in the overlayd service of Juniper Networks Junos OS may allow an unauthenticated remote attacker to send spec… Junos Mitigation only Fix from $2,3002021-04-22 CRITICAL 9.8 CVE-2021-0266 The use of multiple hard-coded cryptographic keys in cSRX Series software in Juniper Networks Junos OS allows an attacker to take control of any inst… Junos Mitigation only Fix from $2,3002021-04-22 CRITICAL 9.3 CVE-2021-0268 An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') weakness in J-web of Juniper Networks Junos OS leads to buff… Junos Mitigation only Fix from $2,3002021-04-22 HIGH 8.8 CVE-2021-0269 The improper handling of client-side parameters in J-Web of Juniper Networks Junos OS allows an attacker to perform a number of different malicious a… Junos Mitigation only Fix from $1,9502021-04-22