İçeriğe atla
Noroxi

juniper kayıtları

juniper üreticisine ait 1.112 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
8 · %0,7
Silahlaştırılmış
11 · %1
Pre-auth RCE
41
Düzeltme kaydı olan
%33,5
Yayından KEV’e ortanca
88 gün

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

1.112 kayıt
  • CVE-2023-36845
    98Hemen

    Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %95

    juniper · junos17 Ağu 2023

  • CVE-2015-7755
    87Hemen

    Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0r14b, 6.3.0r15 before

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %61

    juniper · screenos19 Ara 2015

  • CVE-2023-36846
    79Bu hafta

    Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files

    OrtaCVSS 5,3KEVSilahlaştırılmışEPSS %93

    juniper · junos17 Ağu 2023

  • CVE-2023-36844
    78Bu hafta

    Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables

    OrtaCVSS 5,3KEVSilahlaştırılmışEPSS %90

    juniper · junos17 Ağu 2023

  • CVE-2023-36847
    76Bu hafta

    Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files

    OrtaCVSS 5,3KEVSilahlaştırılmışEPSS %83

    juniper · junos17 Ağu 2023

  • CVE-2020-1631
    70Bu hafta

    Out of Cycle Security Advisory: Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) services

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %5

    juniper · junos4 May 2020

  • CVE-2022-42889
    69Bu hafta

    Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults

    KritikCVSS 9,8SilahlaştırılmışEPSS %100

    apache · commons text13 Eki 2022

  • CVE-2020-10188
    61Bu hafta

    utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, becaus

    KritikCVSS 9,8İstismar yokEPSS %74

    netkit telnet project · netkit telnet6 Mar 2020

  • CVE-2008-0960
    61Bu hafta

    SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) J

    KritikCVSS 10,0Kavram kanıtıEPSS %69

    net-snmp · net snmp10 Haz 2008

  • CVE-2025-21590
    57Planlayın

    Junos OS: An local attacker with shell access can execute arbitrary code

    OrtaCVSS 6,7KEVSilahlaştırılmışEPSS %2

    juniper · junos12 Mar 2025

  • CVE-2016-1286
    53Planlayın

    named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure an

    YüksekCVSS 8,6İstismar yokEPSS %62

    isc · bind9 Mar 2016

  • CVE-2009-1185
    52Planlayın

    udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sen

    YüksekCVSS 7,2SilahlaştırılmışEPSS %80

    udev project · udev17 Nis 2009

  • CVE-2023-36851
    51Planlayın

    Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary files

    OrtaCVSS 5,3KEVSilahlaştırılmışEPSS %1

    juniper · junos27 Eyl 2023

  • CVE-2019-11358
    50Planlayın

    jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototyp

    OrtaCVSS 6,1Kavram kanıtıEPSS %87

    jquery · jquery19 Nis 2019

  • CVE-2006-2086
    50Planlayın

    Buffer overflow in JuniperSetupDLL.dll, loaded from JuniperSetup.ocx by the Juniper SSL-VPN Client when accessing a Juniper NetScreen IVE de

    YüksekCVSS 7,5SilahlaştırılmışEPSS %67

    juniper · junipersetup control29 Nis 2006

  • CVE-2016-1285
    45Planlayın

    named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages,

    OrtaCVSS 6,8İstismar yokEPSS %59

    isc · bind9 Mar 2016

  • CVE-2004-0230
    44Planlayın

    TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connectio

    OrtaCVSS 5,0Kavram kanıtıEPSS %80

    juniper · junos18 Ağu 2004

  • CVE-2024-21591
    44Planlayın

    Junos OS: SRX Series and EX Series: Security Vulnerability in J-web allows a preAuth Remote Code Execution

    KritikCVSS 9,8İstismar yokEPSS %18

    juniper · junos11 Oca 2024

  • CVE-2026-21902
    42Planlayın

    Junos OS Evolved: PTX Series: A vulnerability allows a unauthenticated, network-based attacker to execute code as root

    KritikCVSS 9,3Kavram kanıtıEPSS %18

    juniper · junos os evolved25 Şub 2026

  • CVE-2013-4685
    42Planlayın

    Buffer overflow in flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7, 12.1 before 12.1R6, and 12.1X44 before 12.1X44-D15 on SRX

    KritikCVSS 10,0İstismar yokEPSS %8

    juniper · junos11 Tem 2013

  • CVE-2014-0429
    42Planlayın

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote

    KritikCVSS 10,0İstismar yokEPSS %7

    oracle · jrockit15 Nis 2014

  • CVE-2014-0456
    42Planlayın

    Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality,

    KritikCVSS 10,0İstismar yokEPSS %7

    oracle · jrockit15 Nis 2014

  • CVE-2014-2421
    42Planlayın

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to a

    KritikCVSS 10,0İstismar yokEPSS %7

    oracle · jrockit15 Nis 2014

  • CVE-2014-0457
    42Planlayın

    Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remo

    KritikCVSS 10,0İstismar yokEPSS %7

    oracle · jrockit15 Nis 2014

  • CVE-2018-0001
    41Planlayın

    Junos: Unauthenticated Remote Code Execution through J-Web interface

    KritikCVSS 9,8İstismar yokEPSS %6

    juniper · junos10 Oca 2018