Archive
9 October 2019
Vulnerabilities first published on this day (UTC), newest first.
107 results · Feed
-
High 7.5
Junos OS: SRX Series: flowd process crash due to processing of specific transit IP packets
The flowd process, responsible for forwarding traffic in SRX Series services gateways, may crash and restart when processing specific transit IP packets through an IPSec tunnel. Continued processing of these packets may result in an extended Denial of Service…
-
Medium 6.5
Junos OS: MX Series: jdhcpd crash when receiving a specific crafted DHCP response message
When an MX Series Broadband Remote Access Server (BRAS) is configured as a Broadband Network Gateway (BNG) with DHCPv6 enabled, jdhcpd might crash when receiving a specific crafted DHCP response message on a subscriber interface. The daemon automatically rest…
-
High 8.8
Junos OS: NFX Series: An Improper Input Validation weakness allows a malicious local attacker to elevate their permissions.
An Improper Input Validation weakness allows a malicious local attacker to elevate their permissions to take control of other portions of the NFX platform they should not be able to access, and execute commands outside their authorized scope of control. This …
-
High 7.5
Junos OS: SRX1500: Denial of service due to crash of srxpfe process under heavy traffic conditions.
Under certain heavy traffic conditions srxpfe process can crash and result in a denial of service condition for the SRX1500 device. Repeated crashes of the srxpfe can result in an extended denial of service condition. The SRX device may fail to forward traffi…
-
High 7.8
NFX Series: An attacker may be able to take control of the JDM application and subsequently the entire system.
An improper authorization weakness in Juniper Networks Junos OS allows a local authenticated attacker to bypass regular security controls to access the Junos Device Manager (JDM) application and take control of the system. This issue affects: Juniper Networks…
-
Medium 6.5
SRX5000 Series: Denial of Service vulnerability in SSL-Proxy feature.
SSL-Proxy feature on SRX devices fails to handle a hardware resource limitation which can be exploited by remote SSL/TLS servers to crash the flowd daemon. Repeated crashes of the flowd daemon can result in an extended denial of service condition. For this is…
-
Medium 5.9
Junos OS: vSRX, SRX1500, SRX4K, ACX5K, EX4600, QFX5100, QFX5110, QFX5200, QFX10K and NFX Series: console management port device authentication credentials are logged in clear text
On EX4600, QFX5100 Series, NFX Series, QFX10K Series, QFX5110, QFX5200 Series, QFX5110, QFX5200, QFX10K Series, vSRX, SRX1500, SRX4000 Series, vSRX, SRX1500, SRX4000, QFX5110, QFX5200, QFX10K Series, when the user uses console management port to authenticate,…
-
Medium 6.5
Junos OS: SRX Series: Denial of Service vulnerability in flowd due to multicast packets
The SRX flowd process, responsible for packet forwarding, may crash and restart when processing specific multicast packets. By continuously sending the specific multicast packets, an attacker can repeatedly crash the flowd process causing a sustained Denial o…
-
Medium 6.5
Junos OS: Kernel crash (vmcore) upon receipt of a specific link-local IPv6 packet on devices configured with Multi-Chassis Link Aggregation Group (MC-LAG)
Receipt of a specific link-local IPv6 packet destined to the RE may cause the system to crash and restart (vmcore). By continuously sending a specially crafted IPv6 packet, an attacker can repeatedly crash the system causing a prolonged Denial of Service (DoS…
-
High 7.5
Junos OS: A malformed IPv4 packet received by Junos in an NG-mVPN scenario may cause the routing protocol daemon (rpd) process to core
An unexpected status return value weakness in the Next-Generation Multicast VPN (NG-mVPN) service of Juniper Networks Junos OS allows attacker to cause a Denial of Service (DoS) condition and core the routing protocol daemon (rpd) process when a specific malf…
-
High 7.5
Junos OS: Session fixation vulnerability in J-Web
A session fixation vulnerability in J-Web on Junos OS may allow an attacker to use social engineering techniques to fix and hijack a J-Web administrators web session and potentially gain administrative access to the device. This issue affects: Juniper Network…
-
High 7.5
Junos OS: MX Series: An MPC10 Denial of Service (DoS) due to OSPF states transitioning to Down, causes traffic to stop forwarding through the device.
This issue only affects devices with three (3) or more MPC10's installed in a single chassis with OSPF enabled and configured on the device. An Insufficient Resource Pool weakness allows an attacker to cause the device's Open Shortest Path First (OSPF) states…
-
High 8.8
Junos OS: Persistent XSS vulnerability in J-Web
A persistent Cross-Site Scripting (XSS) vulnerability in Junos OS J-Web interface may allow remote unauthenticated attackers to perform administrative actions on the Junos device. Successful exploitation requires a Junos administrator to first perform certain…
-
High 7.8
Junos OS: Insecure management daemon (MGD) configuration may allow local privilege escalation
The management daemon (MGD) is responsible for all configuration and management operations in Junos OS. The Junos CLI communicates with MGD over an internal unix-domain socket and is granted special permission to open this protected mode socket. Due to a misc…
-
High 8.1
Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data Protection Appliance (I…
-
High 7.2
MantisBT Remote Code Execution
MantisBT before 1.3.20 and 2.22.1 allows Post Authentication Command Injection, leading to Remote Code Execution.
-
Unscored —
iTerm2, up to and including version 3.3.5, with tmux integration is vulnerable to remote command execution
A vulnerability exists in the way that iTerm2 integrates with tmux's control mode, which may allow an attacker to execute arbitrary commands by providing malicious output to the terminal. This affects versions of iTerm2 up to and including 3.3.5. This vulnera…
-
Unscored —
SnapManager for Oracle prior to version 3.4.2P1 are susceptible to a vulnerability which when successfully exploited co…
-
Unscored —
An XSS vulnerability in project list in OpenProject before 9.0.4 and 10.x before 10.0.2 allows remote attackers to inje…
-
Unscored —
libyal liblnk 20191006 has a heap-based buffer over-read in the network_share_name_offset>20 code block of liblnk_locat…
-
Unscored —
Clustered Data ONTAP versions 9.0 and higher do not enforce hostname verification under certain circumstances making th…
-
Unscored —
The Shack Forms Pro extension before 4.0.32 for Joomla! allows path traversal via a file attachment.
-
Unscored —
In RIOT 2019.07, the MQTT-SN implementation (asymcute) mishandles errors occurring during a read operation on a UDP soc…
-
Unscored —
Kramer VIAware 2.5.0719.1034 has Incorrect Access Control.
-
Unscored —
The animate-it plugin before 2.3.5 for WordPress has XSS.
-
Unscored —
The animate-it plugin before 2.3.4 for WordPress has XSS.
-
High 8.8CVE-2019-13529 Public exploit
An attacker could send a malicious link to an authenticated operator, which may allow remote attackers to perform actio…
-
Unscored —CVE-2019-15226 EPSS 65%
Upon receiving each incoming request header data, Envoy will iterate over existing request headers to verify that the t…
-
Unscored —
cPanel before 82.0.15 allows self XSS in the WHM Update Preferences interface (SEC-528).
-
Unscored —
cPanel before 82.0.15 allows self stored XSS in the WHM SSL Storage Manager interface (SEC-527).
-
Unscored —
cPanel before 82.0.15 allows self XSS in the SSL Key Delete interface (SEC-526).
-
Unscored —
cPanel before 82.0.15 allows self XSS in LiveAPI example scripts (SEC-524).
-
Unscored —
cPanel before 82.0.15 allows self XSS in the SSL Certificate Upload interface (SEC-521).
-
Unscored —
cPanel before 82.0.15 allows API token credentials to persist after an account has been renamed or terminated (SEC-517).
-
Unscored —
Netreo OmniCenter through 12.1.1 allows unauthenticated SQL Injection (Boolean Based Blind) in the redirect parameters …
-
Unscored —
Password disclosure in the web interface on socomec DIRIS A-40 devices before 48250501 allows a remote attacker to get …
-
Unscored —
An issue was discovered in the RENPHO application 3.0.0 for iOS. It transmits JSON data unencrypted to a server without…
-
High 8.1
A security vulnerability has been identified in all levels of IBM Spectrum Scale V5.0.0.0 through V5.0.3.2 and IBM Spec…
-
Medium 4.3
IBM Maximo Asset Management 7.6.1.1 generates an error message that includes sensitive information that could be used i…
-
Unscored —
On certain Samsung P(9.0) phones, an attacker with physical access can start a TCP Dump capture without the user's know…