Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
  • 6.5

    MEDIUM
    CVE-2022-22179

    A Improper Validation of Specified Index, Position, or Offset in Input vulnerability in the Juniper DHCP daemon (jdhcpd) of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to cause a crash of jdhcpd and thereby a Denial of Service (D... Read more

    Affected Products : junos
    • Published: Jan. 19, 2022
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2022-22178

    A Stack-based Buffer Overflow vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on MX Series and SRX series allows an unauthenticated networked attacker to cause a flowd crash and thereby a Denial of Service (DoS). Continued... Read more

    Affected Products : junos srx100 srx110 srx210 srx220 srx240 srx550 srx650 srx1400 srx3400 +35 more products
    • Published: Jan. 19, 2022
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2022-22177

    A release of illegal memory vulnerability in the snmpd daemon of Juniper Networks Junos OS, Junos OS Evolved allows an attacker to halt the snmpd daemon causing a sustained Denial of Service (DoS) to the service until it is manually restarted. This issue ... Read more

    Affected Products : junos junos_os_evolved
    • Published: Jan. 19, 2022
    • Modified: Nov. 21, 2024
  • 7.4

    HIGH
    CVE-2022-22176

    An Improper Validation of Syntactic Correctness of Input vulnerability in the Juniper DHCP daemon (jdhcpd) of Juniper Networks Junos OS allows an adjacent unauthenticated attacker sending a malformed DHCP packet to cause a crash of jdhcpd and thereby a De... Read more

    Affected Products : junos
    • Published: Jan. 19, 2022
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2022-22175

    An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series and SRX Series allows an unauthenticated networked attacker to cause a flowprocessing daemon (flowd) crash and thereby a Denial of Service (DoS). Continued receipt ... Read more

    Affected Products : junos srx100 srx110 srx210 srx220 srx240 srx550 srx650 srx1400 srx3400 +35 more products
    • Published: Jan. 19, 2022
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2022-22174

    A vulnerability in the processing of inbound IPv6 packets in Juniper Networks Junos OS on QFX5000 Series and EX4600 switches may cause the memory to not be freed, leading to a packet DMA memory leak, and eventual Denial of Service (DoS) condition. Once th... Read more

    Affected Products : junos ex4600 ex4600-vc ex4650 qfx5100 qfx5200 qfx5110 qfx5120 qfx5210 qfx5220 +2 more products
    • Published: Jan. 19, 2022
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2022-22173

    A Missing Release of Memory after Effective Lifetime vulnerability in the Public Key Infrastructure daemon (pkid) of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause Denial of Service (DoS). In a scenario where Public Key In... Read more

    Affected Products : junos
    • Published: Jan. 19, 2022
    • Modified: Nov. 21, 2024
  • 6.5

    MEDIUM
    CVE-2022-22172

    A Missing Release of Memory after Effective Lifetime vulnerability in the Layer-2 control protocols daemon (l2cpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a memory leak. Continued exploitation... Read more

    Affected Products : junos junos_os_evolved
    • Published: Jan. 19, 2022
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2022-22171

    An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause a Denial of Service (DoS) by sending specific packets over VXLAN... Read more

    Affected Products : junos
    • Published: Jan. 19, 2022
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2022-22170

    A Missing Release of Resource after Effective Lifetime vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause a Denial of Service (DoS) by sending specific packets over VXLAN ... Read more

    Affected Products : junos
    • Published: Jan. 19, 2022
    • Modified: Nov. 21, 2024
  • 5.9

    MEDIUM
    CVE-2022-22169

    An Improper Initialization vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker who sends specific packets in certain orders and at specific timings to force OSPFv3 to unexpectedly enter g... Read more

    Affected Products : junos junos_os_evolved
    • Published: Jan. 19, 2022
    • Modified: Nov. 21, 2024
  • 6.5

    MEDIUM
    CVE-2022-22168

    An Improper Validation of Specified Type of Input vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated adjacent attacker to trigger a Missing Release of Memory after Effective Lifetime vulnerability. Continued exploitation of... Read more

    Affected Products : junos vmx mx150
    • Published: Jan. 19, 2022
    • Modified: Nov. 21, 2024
  • 9.8

    CRITICAL
    CVE-2022-22167

    A traffic classification vulnerability in Juniper Networks Junos OS on the SRX Series Services Gateways may allow an attacker to bypass Juniper Deep Packet Inspection (JDPI) rules and access unauthorized networks or resources, when 'no-syn-check' is enabl... Read more

    Affected Products : junos srx100 srx110 srx210 srx220 srx240 srx550 srx650 srx1400 srx3400 +18 more products
    • Published: Jan. 19, 2022
    • Modified: Nov. 21, 2024
  • 6.5

    MEDIUM
    CVE-2022-22166

    An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause an rdp crash and thereby a Denial of Service (DoS). If a BGP update... Read more

    Affected Products : junos
    • Published: Jan. 19, 2022
    • Modified: Nov. 21, 2024
  • 6.5

    MEDIUM
    CVE-2022-22164

    An Improper Initialization vulnerability in Juniper Networks Junos OS Evolved may cause a commit operation for disabling the telnet service to not take effect as expected, resulting in the telnet service staying enabled. When it is not intended to be oper... Read more

    Affected Products : junos_os_evolved
    • Published: Jan. 19, 2022
    • Modified: Nov. 21, 2024
  • 7.4

    HIGH
    CVE-2022-22163

    An Improper Input Validation vulnerability in the Juniper DHCP daemon (jdhcpd) of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to cause a crash of jdhcpd and thereby a Denial of Service (DoS). If a device is configured as DHCPv6 l... Read more

    Affected Products : junos
    • Published: Jan. 19, 2022
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2022-22162

    A Generation of Error Message Containing Sensitive Information vulnerability in the CLI of Juniper Networks Junos OS allows a locally authenticated attacker with low privileges to elevate these to the level of any other user logged in via J-Web at this ti... Read more

    Affected Products : junos
    • Published: Jan. 19, 2022
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2022-22161

    An Uncontrolled Resource Consumption vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated network based attacker to cause 100% CPU load and the device to become unresponsive by sending a flood of traffic to the out-of-band ma... Read more

    Affected Products : junos mx104
    • Published: Jan. 19, 2022
    • Modified: Nov. 21, 2024
  • 6.5

    MEDIUM
    CVE-2022-22160

    An Unchecked Error Condition vulnerability in the subscriber management daemon (smgd) of Juniper Networks Junos OS allows an unauthenticated adjacent attacker to cause a crash of and thereby a Denial of Service (DoS). In a subscriber management / broadban... Read more

    Affected Products : junos mx10 mx104 mx2010 mx2020 mx240 mx40 mx480 mx80 mx960 +8 more products
    • Published: Jan. 19, 2022
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2022-22159

    A vulnerability in the NETISR network queue functionality of Juniper Networks Junos OS kernel allows an attacker to cause a Denial of Service (DoS) by sending crafted genuine packets to a device. During an attack, the routing protocol daemon (rpd) CPU may... Read more

    Affected Products : junos junos_os_evolved
    • Published: Jan. 19, 2022
    • Modified: Nov. 21, 2024
Showing 20 of 294848 Results