Skip to content
Noroxi

Juniper records

1,112 published records for vendor juniper.

Researcher profile

Entered KEV
8 · 0.7%
Weaponized
11 · 1%
Pre-auth RCE
41
With a fix record
33.5%
Median publish → KEV
88 days

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

1,112 records
  • CVE-2023-36845
    98Now

    Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

    CriticalCVSS 9.8KEVWeaponizedEPSS 95%

    juniper · junosAug 17, 2023

  • CVE-2015-7755
    87Now

    Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0r14b, 6.3.0r15 before

    CriticalCVSS 9.8KEVWeaponizedEPSS 61%

    juniper · screenosDec 19, 2015

  • CVE-2023-36846
    79This week

    Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files

    MediumCVSS 5.3KEVWeaponizedEPSS 93%

    juniper · junosAug 17, 2023

  • CVE-2023-36844
    78This week

    Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables

    MediumCVSS 5.3KEVWeaponizedEPSS 90%

    juniper · junosAug 17, 2023

  • CVE-2023-36847
    76This week

    Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files

    MediumCVSS 5.3KEVWeaponizedEPSS 83%

    juniper · junosAug 17, 2023

  • CVE-2020-1631
    70This week

    Out of Cycle Security Advisory: Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) services

    CriticalCVSS 9.8KEVWeaponizedEPSS 5%

    juniper · junosMay 4, 2020

  • CVE-2022-42889
    69This week

    Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults

    CriticalCVSS 9.8WeaponizedEPSS 100%

    apache · commons textOct 13, 2022

  • CVE-2020-10188
    61This week

    utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, becaus

    CriticalCVSS 9.8No exploitEPSS 74%

    netkit telnet project · netkit telnetMar 6, 2020

  • CVE-2008-0960
    61This week

    SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) J

    CriticalCVSS 10.0Proof of conceptEPSS 69%

    net-snmp · net snmpJun 10, 2008

  • CVE-2025-21590
    57Plan

    Junos OS: An local attacker with shell access can execute arbitrary code

    MediumCVSS 6.7KEVWeaponizedEPSS 2%

    juniper · junosMar 12, 2025

  • CVE-2016-1286
    53Plan

    named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure an

    HighCVSS 8.6No exploitEPSS 62%

    isc · bindMar 9, 2016

  • CVE-2009-1185
    52Plan

    udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sen

    HighCVSS 7.2WeaponizedEPSS 80%

    udev project · udevApr 17, 2009

  • CVE-2023-36851
    51Plan

    Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary files

    MediumCVSS 5.3KEVWeaponizedEPSS 1%

    juniper · junosSep 27, 2023

  • CVE-2019-11358
    50Plan

    jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototyp

    MediumCVSS 6.1Proof of conceptEPSS 87%

    jquery · jqueryApr 19, 2019

  • CVE-2006-2086
    50Plan

    Buffer overflow in JuniperSetupDLL.dll, loaded from JuniperSetup.ocx by the Juniper SSL-VPN Client when accessing a Juniper NetScreen IVE de

    HighCVSS 7.5WeaponizedEPSS 67%

    juniper · junipersetup controlApr 29, 2006

  • CVE-2016-1285
    45Plan

    named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages,

    MediumCVSS 6.8No exploitEPSS 59%

    isc · bindMar 9, 2016

  • CVE-2004-0230
    44Plan

    TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connectio

    MediumCVSS 5.0Proof of conceptEPSS 80%

    juniper · junosAug 18, 2004

  • CVE-2024-21591
    44Plan

    Junos OS: SRX Series and EX Series: Security Vulnerability in J-web allows a preAuth Remote Code Execution

    CriticalCVSS 9.8No exploitEPSS 18%

    juniper · junosJan 11, 2024

  • CVE-2026-21902
    42Plan

    Junos OS Evolved: PTX Series: A vulnerability allows a unauthenticated, network-based attacker to execute code as root

    CriticalCVSS 9.3Proof of conceptEPSS 18%

    juniper · junos os evolvedFeb 25, 2026

  • CVE-2013-4685
    42Plan

    Buffer overflow in flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7, 12.1 before 12.1R6, and 12.1X44 before 12.1X44-D15 on SRX

    CriticalCVSS 10.0No exploitEPSS 8%

    juniper · junosJul 11, 2013

  • CVE-2014-0429
    42Plan

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote

    CriticalCVSS 10.0No exploitEPSS 7%

    oracle · jrockitApr 15, 2014

  • CVE-2014-0456
    42Plan

    Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality,

    CriticalCVSS 10.0No exploitEPSS 7%

    oracle · jrockitApr 15, 2014

  • CVE-2014-2421
    42Plan

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to a

    CriticalCVSS 10.0No exploitEPSS 7%

    oracle · jrockitApr 15, 2014

  • CVE-2014-0457
    42Plan

    Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remo

    CriticalCVSS 10.0No exploitEPSS 7%

    oracle · jrockitApr 15, 2014

  • CVE-2018-0001
    41Plan

    Junos: Unauthenticated Remote Code Execution through J-Web interface

    CriticalCVSS 9.8No exploitEPSS 6%

    juniper · junosJan 10, 2018