Browse CVEs

HIGH 7.8 CVE-2021-31357 A command injection vulnerability in tcpdump command processing on Juniper Networks Junos OS Evolved allows an attacker with authenticated CLI access… Junos Os Evolved after 20.3 Fix from $1,9502021-10-19 HIGH 7.5 CVE-2021-0299 An Improper Handling of Exceptional Conditions vulnerability in the processing of a transit or directly received malformed IPv6 packet in Juniper Net… Junos Mitigation only Fix from $1,9502021-10-19 HIGH 7.5 CVE-2021-31351 An Improper Check for Unusual or Exceptional Conditions in packet processing on the MS-MPC/MS-MIC utilized by Juniper Networks Junos OS allows a mali… Junos Mitigation only Fix from $1,9502021-10-19 HIGH 7.5 CVE-2021-31353 An Improper Handling of Exceptional Conditions vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows an attacker to inject a specifi… Junos after 20.3 Fix from $1,9502021-10-19 HIGH 7.4 CVE-2021-0296 The Juniper Networks CTPView server is not enforcing HTTP Strict Transport Security (HSTS). HSTS is an optional response header which allows servers … Ctpview Mitigation only Fix from $1,9502021-10-19 MEDIUM 6.5 CVE-2021-0297 A vulnerability in the processing of TCP MD5 authentication in Juniper Networks Junos OS Evolved may allow a BGP or LDP session configured with MD5 a… Junos Os Evolved Mitigation only Fix from $1,6002021-10-19 MEDIUM 5.4 CVE-2021-31355 A persistent cross-site scripting (XSS) vulnerability in the captive portal graphical user interface of Juniper Networks Junos OS may allow a remote … Junos Patch available Fix from $1,6002021-10-19 MEDIUM 5.3 CVE-2021-31352 An Information Exposure vulnerability in Juniper Networks SRC Series devices configured for NETCONF over SSH permits the negotiation of weak ciphers,… Session And Resource Control 4.130r6+ Fix from $1,6002021-10-19 HIGH 8.8 CVE-2021-39531 An issue was discovered in libslax through v0.22.1. slaxLexer() in slaxlexer.c has a stack-based buffer overflow. Libslax after 0.22.1 Fix from $1,9502021-09-20 HIGH 8.8 CVE-2021-39533 An issue was discovered in libslax through v0.22.1. slaxLexer() in slaxlexer.c has a heap-based buffer overflow. Libslax after 0.22.1 Fix from $1,9502021-09-20 HIGH 8.8 CVE-2021-39534 An issue was discovered in libslax through v0.22.1. slaxIsCommentStart() in slaxlexer.c has a heap-based buffer overflow. Libslax after 0.22.1 Fix from $1,9502021-09-20 MEDIUM 6.5 CVE-2021-39532 An issue was discovered in libslax through v0.22.1. A NULL pointer dereference exists in the function slaxLexer() located in slaxlexer.c. It allows a… Libslax after 0.22.1 Fix from $1,6002021-09-20 HIGH 7.5 CVE-2021-0284 A buffer overflow vulnerability in the TCP/IP stack of Juniper Networks Junos OS allows an attacker to send specific sequences of packets to the devi… Junos Mitigation only Fix from $1,9502021-08-17 MEDIUM 6.5 CVE-2021-0292 An Uncontrolled Resource Consumption vulnerability in the ARP daemon (arpd) and Network Discovery Protocol (ndp) process of Juniper Networks Junos OS… Junos Os Evolved Mitigation only Fix from $1,6002021-07-15 MEDIUM 6.1 CVE-2021-0295 A vulnerability in the Distance Vector Multicast Routing Protocol (DVMRP) of Juniper Networks Junos OS on the QFX10K Series switches allows an attack… Junos Mitigation only Fix from $1,6002021-07-15 MEDIUM 5.5 CVE-2021-0293 A vulnerability in Juniper Networks Junos OS caused by Missing Release of Memory after Effective Lifetime leads to a memory leak each time the CLI co… Junos Mitigation only Fix from $1,6002021-07-15 MEDIUM 5.3 CVE-2021-0294 A vulnerability in Juniper Networks Junos OS, which only affects the release 18.4R2-S5, where a function is inconsistently implemented on Juniper Net… Junos Mitigation only Fix from $1,6002021-07-15 HIGH 7.5 CVE-2021-0283 A buffer overflow vulnerability in the TCP/IP stack of Juniper Networks Junos OS allows an attacker to send specific sequences of packets to the devi… Junos Mitigation only Fix from $1,9502021-07-15 HIGH 7.5 CVE-2021-0285 An uncontrolled resource consumption vulnerability in Juniper Networks Junos OS on QFX5000 Series and EX4600 Series switches allows an attacker sendi… Junos Mitigation only Fix from $1,9502021-07-15 HIGH 7.5 CVE-2021-0286 A vulnerability in the handling of exceptional conditions in Juniper Networks Junos OS Evolved (EVO) allows an attacker to send specially crafted pac… Junos Os Evolved Mitigation only Fix from $1,9502021-07-15 MEDIUM 6.5 CVE-2021-0287 In a Segment Routing ISIS (SR-ISIS)/MPLS environment, on Juniper Networks Junos OS and Junos OS Evolved devices, configured with ISIS Flexible Algori… Junos Mitigation only Fix from $1,6002021-07-15 MEDIUM 6.5 CVE-2021-0288 A vulnerability in the processing of specific MPLS packets in Juniper Networks Junos OS on MX Series and EX9200 Series devices with Trio-based MPCs (… Junos Mitigation only Fix from $1,6002021-07-15 MEDIUM 6.5 CVE-2021-0290 Improper Handling of Exceptional Conditions in Ethernet interface frame processing of Juniper Networks Junos OS allows an attacker to send specially … Junos Mitigation only Fix from $1,6002021-07-15 MEDIUM 6.5 CVE-2021-0291 An Exposure of System Data vulnerability in Juniper Networks Junos OS and Junos OS Evolved, where a sensitive system-level resource is not being suff… Junos Mitigation only Fix from $1,6002021-07-15 MEDIUM 5.3 CVE-2021-0289 When user-defined ARP Policer is configured and applied on one or more Aggregated Ethernet (AE) interface units, a Time-of-check Time-of-use (TOCTOU)… Junos 15.1 / 18.4+ Fix from $1,6002021-07-15 CRITICAL 9.8 CVE-2021-0276 A stack-based Buffer Overflow vulnerability in Juniper Networks SBR Carrier with EAP (Extensible Authentication Protocol) authentication configured, … Steel Belted Radius Carrier Mitigation only Fix from $2,3002021-07-15 HIGH 8.8 CVE-2021-0277 An Out-of-bounds Read vulnerability in the processing of specially crafted LLDP frames by the Layer 2 Control Protocol Daemon (l2cpd) of Juniper Netw… Junos Mitigation only Fix from $1,9502021-07-15 HIGH 7.8 CVE-2021-0278 An Improper Input Validation vulnerability in J-Web of Juniper Networks Junos OS allows a locally authenticated attacker to escalate their privileges… Junos Mitigation only Fix from $1,9502021-07-15 HIGH 7.5 CVE-2021-0280 Due to an Improper Initialization vulnerability in Juniper Networks Junos OS on PTX platforms and QFX10K Series with Paradise (PE) chipset-based line… Junos Mitigation only Fix from $1,9502021-07-15 HIGH 7.5 CVE-2021-0281 On Juniper Networks Junos OS devices configured with BGP origin validation using Resource Public Key Infrastructure (RPKI) receipt of a specific pack… Junos Mitigation only Fix from $1,9502021-07-15