Vulnerabilities > Juniper > Junos > Medium

DATE CVE VULNERABILITY TITLE RISK
2013-07-11 CVE-2013-4690 Resource Management Errors vulnerability in Juniper products
Juniper Junos 10.4 before 10.4S13, 11.4 before 11.4R7-S1, 12.1 before 12.1R5-S3, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D10 on the SRX1400, SRX3400, and SRX3600 does not properly initialize memory locations used during padding of Ethernet packets, which allows remote attackers to obtain sensitive information by reading packet data, aka PR 829536, a related issue to CVE-2003-0001.
network
low complexity
juniper CWE-399
5.0
2009-09-30 CVE-2009-3485 Cross-Site Scripting vulnerability in Juniper Junos 8.5/9.0
Cross-site scripting (XSS) vulnerability in the J-Web interface in Juniper JUNOS 8.5R1.14 and 9.0R1.1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the default URI.
network
juniper CWE-79
4.3
2006-07-12 CVE-2006-3529 Remote Denial of Service vulnerability in Juniper Networks JUNOS IPv6 Packet Processing
Memory leak in Juniper JUNOS 6.4 through 8.0, built before May 10, 2006, allows remote attackers to cause a denial of service (kernel packet memory consumption and crash) via crafted IPv6 packets whose buffers are not released after they are processed.
network
low complexity
juniper
5.0
2004-12-31 CVE-2004-0467 Remote Denial Of Service vulnerability in Juniper Networks JUNOS
Juniper JUNOS 5.x through JUNOS 7.x allows remote attackers to cause a denial of service (routing disabled) via a large number of MPLS packets, which are not filtered or verified before being sent to the Routing Engine, which reduces the speed at which other packets are processed.
network
low complexity
juniper
5.0
2004-12-06 CVE-2004-0468 Unspecified vulnerability in Juniper Junos
Memory leak in Juniper JUNOS Packet Forwarding Engine (PFE) allows remote attackers to cause a denial of service (memory exhaustion and device reboot) via certain IPv6 packets.
network
low complexity
juniper
5.0
2004-08-18 CVE-2004-0230 TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.
network
low complexity
oracle openpgp mcafee netbsd xinuos juniper
5.0