Latest CVE Feed
-
7.5
HIGHCVE-2022-22206
A Buffer Overflow vulnerability in the PFE of Juniper Networks Junos OS on SRX series allows an unauthenticated network based attacker to cause a Denial of Service (DoS). The PFE will crash when specific traffic is scanned by Enhanced Web Filtering safe-s... Read more
- Published: Jul. 20, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2022-22205
A Missing Release of Memory after Effective Lifetime vulnerability in the Application Quality of Experience (appqoe) subsystem of the PFE of Juniper Networks Junos OS on SRX Series allows an unauthenticated network based attacker to cause a Denial of Serv... Read more
- Published: Jul. 20, 2022
- Modified: Nov. 21, 2024
-
5.3
MEDIUMCVE-2022-22204
An Improper Release of Memory Before Removing Last Reference vulnerability in the Session Initiation Protocol (SIP) Application Layer Gateway (ALG) of Juniper Networks Junos OS allows unauthenticated network-based attacker to cause a partial Denial of Ser... Read more
- Published: Jul. 20, 2022
- Modified: Nov. 21, 2024
-
6.5
MEDIUMCVE-2022-22203
An Incorrect Comparison vulnerability in PFE of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to cause a Denial of Service (DoS). On QFX5000 Series, and EX4600 and EX4650 platforms, the fxpc process will crash followed by the FPC r... Read more
- Published: Jul. 20, 2022
- Modified: Nov. 21, 2024
-
6.5
MEDIUMCVE-2022-22202
An Improper Handling of Exceptional Conditions vulnerability on specific PTX Series devices, including the PTX1000, PTX3000 (NextGen), PTX5000, PTX10002-60C, PTX10008, and PTX10016 Series, in Juniper Networks Junos OS allows an unauthenticated MPLS-based ... Read more
- Published: Jul. 20, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2022-22201
An Improper Validation of Specified Index, Position, or Offset in Input vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an unauthenticated network-based attacker to cause a Denial of Service (DoS). On SRX5000 Series... Read more
- Published: Oct. 18, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2022-22198
An Access of Uninitialized Pointer vulnerability in the SIP ALG of Juniper Networks Junos OS allows an unauthenticated network-based attacker to cause a Denial of Service (DoS). Continued receipt of these specific packets will cause a sustained Denial of ... Read more
- Published: Apr. 14, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2022-22197
An Operation on a Resource after Expiration or Release vulnerability in the Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker with an established BGP session to cause a Denial ... Read more
- Published: Apr. 14, 2022
- Modified: Nov. 21, 2024
-
6.5
MEDIUMCVE-2022-22196
An Improper Check for Unusual or Exceptional Conditions vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker with an established ISIS adjacency to cause a Denial ... Read more
- Published: Apr. 14, 2022
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2022-22195
An Improper Update of Reference Count vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to trigger a counter overflow, eventually causing a Denial of Service (DoS). This issue affects Junipe... Read more
- Published: Apr. 14, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2022-22194
An Improper Check for Unusual or Exceptional Conditions vulnerability in the packetIO daemon of Juniper Networks Junos OS Evolved on PTX10003, PTX10004, and PTX10008 allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). Con... Read more
- Published: Apr. 14, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-22193
An Improper Handling of Unexpected Data Type vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause a Denial of Service (DoS). Continued exe... Read more
- Published: Apr. 14, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2022-22192
An Improper Validation of Syntactic Correctness of Input vulnerability in the kernel of Juniper Networks Junos OS Evolved on PTX series allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS). When an incoming TCP packet destin... Read more
- Published: Oct. 18, 2022
- Modified: Nov. 21, 2024
-
6.5
MEDIUMCVE-2022-22191
A Denial of Service (DoS) vulnerability in the processing of a flood of specific ARP traffic in Juniper Networks Junos OS on the EX4300 switch, sent from the local broadcast domain, may allow an unauthenticated network-adjacent attacker to trigger a PFEMA... Read more
- Published: Apr. 14, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2022-22190
An Improper Access Control vulnerability in the Juniper Networks Paragon Active Assurance Control Center allows an unauthenticated attacker to leverage a crafted URL to generate PDF reports, potentially containing sensitive configuration information. A fe... Read more
- Published: Apr. 14, 2022
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2022-22189
An Incorrect Ownership Assignment vulnerability in Juniper Networks Contrail Service Orchestration (CSO) allows a locally authenticated user to have their permissions elevated without authentication thereby taking control of the local system they are curr... Read more
Affected Products : contrail_service_orchestration- Published: Apr. 14, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2022-22188
An Uncontrolled Memory Allocation vulnerability leading to a Heap-based Buffer Overflow in the packet forwarding engine (PFE) of Juniper Networks Junos OS allows a network-based unauthenticated attacker to flood the device with traffic leading to a Denial... Read more
- Published: Apr. 14, 2022
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2022-22187
An Improper Privilege Management vulnerability in the Windows Installer framework used in the Juniper Networks Juniper Identity Management Service (JIMS) allows an unprivileged user to trigger a repair operation. Running a repair operation, in turn, will ... Read more
Affected Products : identity_management_service- Published: Apr. 14, 2022
- Modified: Nov. 21, 2024
-
7.2
HIGHCVE-2022-22186
Due to an Improper Initialization vulnerability in Juniper Networks Junos OS on EX4650 devices, packets received on the management interface (em0) but not destined to the device, may be improperly forwarded to an egress interface, instead of being discard... Read more
- Published: Apr. 14, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2022-22185
A vulnerability in Juniper Networks Junos OS on SRX Series, allows a network-based unauthenticated attacker to cause a Denial of Service (DoS) by sending a specific fragmented packet to the device, resulting in a flowd process crash, which is responsible ... Read more
- Published: Apr. 14, 2022
- Modified: Nov. 21, 2024