Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-2316 State: PUBLISHED Published: 2017-04-24T15:00:00 Last Updated: 2024-08-05T13:48:05.421Z Vendors: Juniper Networks Products: NorthStar Controller Application Problem Types: buffer overflow vulnerability leading to a denial of service Description: A buffer overflow vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated malicious user to cause a buffer overflow leading to a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10783 - http://www.securityfocus.com/bid/97601
CVE ID: CVE-2017-2317 State: PUBLISHED Published: 2017-04-24T15:00:00 Last Updated: 2024-08-05T13:48:05.212Z Vendors: Juniper Networks Products: NorthStar Controller Application Problem Types: denials of service, potential information disclosure or modification of system states Description: A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, unprivileged, network-based attacker to cause denials of services to underlying database tables leading to potential information disclosure, modification of system states, and partial to full denial of services relying upon data modified by an attacker.
losure, modification of system states, and partial to full denial of services relying upon data modified by an attacker. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10783 - http://www.securityfocus.com/bid/97652
CVE ID: CVE-2017-2318 State: PUBLISHED Published: 2017-04-24T15:00:00 Last Updated: 2024-08-05T13:48:05.277Z Vendors: Juniper Networks Products: NorthStar Controller Application Problem Types: read log files, compromise the integrity of the system or elevation of privileges Description: A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated malicious user to read log files which will compromise the integrity of the system, or provide elevation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10783 - http://www.securityfocus.com/bid/97660
CVE ID: CVE-2017-2319 State: PUBLISHED Published: 2017-04-24T15:00:00 Last Updated: 2024-08-05T13:48:05.244Z Vendors: Juniper Networks Products: NorthStar Controller Application Problem Types: vulnerability that may compromise the system's confidentiality or integrity or denial of service Description: A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious attacker to compromise the systems confidentiality or integrity without authentication, leading to managed systems being compromised or services being denied to authentic end users and systems as a result. Additional Analyst Notes: - CVE Program Container: References:
ng denied to authentic end users and systems as a result. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10783 - http://www.securityfocus.com/bid/97659
CVE ID: CVE-2017-2320 State: PUBLISHED Published: 2017-04-24T15:00:00 Last Updated: 2024-08-05T13:48:05.267Z Vendors: Juniper Networks Products: NorthStar Controller Application Problem Types: vulnerability that may allow complete compromise the system's confidentiality or integrity or cause a complete denial of service Description: A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, unprivileged, network-based attacker to cause various denials of services leading to targeted information disclosure, modification of any component of the NorthStar system, including managed systems, and full denial of services
sclosure, modification of any component of the NorthStar system, including managed systems, and full denial of services to any systems under management which NorthStar interacts with using read-only or read-write credentials. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10783 - http://www.securityfocus.com/bid/97687
CVE ID: CVE-2017-2321 State: PUBLISHED Published: 2017-04-24T15:00:00 Last Updated: 2024-08-05T13:48:05.312Z Vendors: Juniper Networks Products: NorthStar Controller Application Problem Types: denials of services, modification of system states and files, and potential disclosure of sensitive information Description: A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, unprivileged, network-based attacker to cause various system services partial to full denials of services, modification of system states and files, and potential disclosure of sensitive information which may assist the attacker in further attack
stem states and files, and potential disclosure of sensitive information which may assist the attacker in further attacks on the system through the use of multiple attack vectors, including man-in-the-middle attacks, file injections, and malicious execution of commands causing out of bound memory conditions leading to other attacks. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10783 - http://www.securityfocus.com/bid/97693
CVE ID: CVE-2017-2322 State: PUBLISHED Published: 2017-04-24T18:00:00 Last Updated: 2024-08-05T13:48:05.247Z Vendors: Juniper Networks Products: NorthStar Controller Application Problem Types: denial of service Description: A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1, may allow an authenticated user to cause widespread denials of service to system services by consuming TCP and UDP ports which are normally reserved for other system services. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10783 - http://www.securityfocus.com/bid/97613
CVE ID: CVE-2017-2323 State: PUBLISHED Published: 2017-04-24T15:00:00 Last Updated: 2024-08-05T13:48:05.268Z Vendors: Juniper Networks Products: NorthStar Controller Application Problem Types: persistent denial of service Description: A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious attacker crafting packets destined to the device to cause a persistent denial of service to the path computation server service. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10783 - http://www.securityfocus.com/bid/97600
CVE ID: CVE-2017-2324 State: PUBLISHED Published: 2017-04-24T15:00:00 Last Updated: 2024-08-05T13:48:05.327Z Vendors: Juniper Networks Products: NorthStar Controller Application Problem Types: denial of service via remote command injection Description: A command injection vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a network-based malicious attacker to cause a denial of service condition. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10783 - http://www.securityfocus.com/bid/97604
CVE ID: CVE-2017-2325 State: PUBLISHED Published: 2017-04-24T15:00:00 Last Updated: 2024-08-05T13:48:05.317Z Vendors: Juniper Networks Products: NorthStar Controller Application Problem Types: buffer overflow leading to a denial of service Description: A buffer overflow vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated malicious user to cause a buffer overflow leading to a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10783 - http://www.securityfocus.com/bid/97602
CVE ID: CVE-2017-2326 State: PUBLISHED Published: 2017-04-24T15:00:00 Last Updated: 2024-08-05T13:48:05.234Z Vendors: Juniper Networks Products: NorthStar Controller Application Problem Types: information disclosure Description: An information disclosure vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, network-based attacker to replicate the underlying Junos OS VM and all data it maintains to their local system for future analysis. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97691 - https://kb.juniper.net/JSA10783
CVE ID: CVE-2017-2327 State: PUBLISHED Published: 2017-04-24T15:00:00 Last Updated: 2024-08-05T13:48:05.271Z Vendors: Juniper Networks Products: NorthStar Controller Application Problem Types: denial of service Description: A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated malicious user to consume large amounts of system resources leading to a cascading denial of services. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10783 - http://www.securityfocus.com/bid/97609
CVE ID: CVE-2017-2328 State: PUBLISHED Published: 2017-04-24T15:00:00 Last Updated: 2024-08-05T13:48:05.291Z Vendors: Juniper Networks Products: NorthStar Controller Application Problem Types: information leak Description: An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, user to elevate their permissions through reading unprivileged information stored in the NorthStar controller. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10783 - http://www.securityfocus.com/bid/97617
CVE ID: CVE-2017-2329 State: PUBLISHED Published: 2017-04-24T15:00:00 Last Updated: 2024-08-05T13:48:05.308Z Vendors: Juniper Networks Products: NorthStar Controller Application Problem Types: insufficient authentication Description: An insufficient authentication vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, user to execute certain specific unprivileged system files capable of causing widespread denials of system services. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10783 - http://www.securityfocus.com/bid/97614
CVE ID: CVE-2017-2330 State: PUBLISHED Published: 2017-04-24T15:00:00 Last Updated: 2024-08-05T13:48:05.232Z Vendors: Juniper Networks Products: NorthStar Controller Application Problem Types: denial of service Description: A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, local user, to create a fork bomb scenario, also known as a rabbit virus, or wabbit, which will create processes that replicate themselves, until all resources are consumed on the system, leading to a denial of service to the entire system until it is restarted. Continued attacks by an unauthenticated, local user, can l
denial of service to the entire system until it is restarted. Continued attacks by an unauthenticated, local user, can lead to persistent denials of services. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10783 - http://www.securityfocus.com/bid/97618
CVE ID: CVE-2017-2331 State: PUBLISHED Published: 2017-04-24T15:00:00 Last Updated: 2024-08-05T13:48:05.306Z Vendors: Juniper Networks Products: NorthStar Controller Application Problem Types: firewall bypass Description: A firewall bypass vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a network-based malicious attacker to bypass firewall policies, leading to authentication bypass methods, information disclosure, modification of system files, and denials of service. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10783 - http://www.securityfocus.com/bid/97619
CVE ID: CVE-2017-2332 State: PUBLISHED Published: 2017-04-24T15:00:00 Last Updated: 2024-08-05T13:48:05.234Z Vendors: Juniper Networks Products: NorthStar Controller Application Problem Types: insufficient authentication Description: An insufficient authentication vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious, network based, unauthenticated attacker to perform privileged actions to gain complete control over the environment. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10783 - http://www.securityfocus.com/bid/97624
CVE ID: CVE-2017-2333 State: PUBLISHED Published: 2017-04-24T15:00:00 Last Updated: 2024-08-05T13:48:05.267Z Vendors: Juniper Networks Products: NorthStar Controller Application Problem Types: persistent denial of service Description: A persistent denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious, network-based, authenticated attacker to consume enough system resources to cause a persistent denial of service by visiting certain specific URLs on the server. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10783 - http://www.securityfocus.com/bid/97608
CVE ID: CVE-2017-2334 State: PUBLISHED Published: 2017-04-24T15:00:00 Last Updated: 2024-08-05T13:48:05.234Z Vendors: Juniper Networks Products: NorthStar Controller Application Problem Types: information leak Description: An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a network-based malicious attacker to perform a man-in-the-middle attack, thereby stealing authentic credentials from encrypted paths which are easily decrypted, and subsequently gain complete control of the system. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10783 - http://www.securityfocus.co
onal Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10783 - http://www.securityfocus.com/bid/97616
CVE ID: CVE-2017-2335 State: PUBLISHED Published: 2017-07-14T14:00:00Z Last Updated: 2024-09-16T20:17:28.685Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Juniper Networks Products: ScreenOS Problem Types: persistent cross site scripting vulnerability Description: A persistent cross site scripting vulnerability in NetScreen WebUI of Juniper Networks Juniper NetScreen Firewall+VPN running ScreenOS allows a user with the 'security' role to inject HTML/JavaScript content into the management session of other users including the administrator. This enables the lower-privileged user to effectively execute commands with the permissions of an administrator. This is
This enables the lower-privileged user to effectively execute commands with the permissions of an administrator. This issue affects Juniper Networks ScreenOS 6.3.0 releases prior to 6.3.0r24 on SSG Series. No other Juniper Networks products or platforms are affected by this issue. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10782 - http://www.securitytracker.com/id/1038881 - http://www.securityfocus.com/bid/99590
CVE ID: CVE-2017-2336 State: PUBLISHED Published: 2017-07-14T14:00:00Z Last Updated: 2024-09-16T17:38:40.445Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Juniper Networks Products: ScreenOS Problem Types: reflected cross site scripting vulnerability Description: A reflected cross site scripting vulnerability in NetScreen WebUI of Juniper Networks Juniper NetScreen Firewall+VPN running ScreenOS allows a network based attacker to inject HTML/JavaScript content into the management session of other users including the administrator. This enables the attacker to effectively execute commands with the permissions of an administrator. This issue affects Junipe
enables the attacker to effectively execute commands with the permissions of an administrator. This issue affects Juniper Networks ScreenOS 6.3.0 releases prior to 6.3.0r24 on SSG Series. No other Juniper Networks products or platforms are affected by this issue. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10782 - http://www.securitytracker.com/id/1038881 - http://www.securityfocus.com/bid/99590
CVE ID: CVE-2017-2337 State: PUBLISHED Published: 2017-07-14T14:00:00Z Last Updated: 2024-09-16T20:13:15.247Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Juniper Networks Products: ScreenOS Problem Types: persistent cross site scripting vulnerability Description: A persistent cross site scripting vulnerability in NetScreen WebUI of Juniper Networks Juniper NetScreen Firewall+VPN running ScreenOS allows a user with the 'security' role to inject HTML/JavaScript content into the management session of other users including the administrator. This enables the lower-privileged user to effectively execute commands with the permissions of an administrator. This is
CVE ID: CVE-2017-2338 State: PUBLISHED Published: 2017-07-14T14:00:00Z Last Updated: 2024-09-16T23:41:11.241Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Juniper Networks Products: ScreenOS Problem Types: persistent cross site scripting vulnerability Description: A persistent cross site scripting vulnerability in NetScreen WebUI of Juniper Networks Juniper NetScreen Firewall+VPN running ScreenOS allows a user with the 'security' role to inject HTML/JavaScript content into the management session of other users including the administrator. This enables the lower-privileged user to effectively execute commands with the permissions of an administrator. This is
CVE ID: CVE-2017-2339 State: PUBLISHED Published: 2017-07-14T14:00:00Z Last Updated: 2024-09-16T20:52:25.134Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Juniper Networks Products: ScreenOS Problem Types: persistent cross site scripting vulnerability Description: A persistent cross site scripting vulnerability in NetScreen WebUI of Juniper Networks Juniper NetScreen Firewall+VPN running ScreenOS allows a user with the 'security' role to inject HTML/JavaScript content into the management session of other users including the administrator. This enables the lower-privileged user to effectively execute commands with the permissions of an administrator. This is
CVE ID: CVE-2017-2340 State: PUBLISHED Published: 2017-04-24T15:00:00 Last Updated: 2024-08-05T13:48:05.396Z Vendors: Juniper Networks Products: Junos OS on M/MX platforms where Enhanced Subscriber Management for DHCPv6 subscribers is configured Problem Types: denial of service vulnerability Description: On Juniper Networks Junos OS 15.1 releases from 15.1R3 to 15.1R4, 16.1 prior to 16.1R3, on M/MX platforms where Enhanced Subscriber Management for DHCPv6 subscribers is configured, a vulnerability in processing IPv6 ND packets originating from subscribers and destined to M/MX series routers can result in a PFE (Packet Forwarding Engine) hang or crash. Additional Analyst Notes: - CVE Program
MX series routers can result in a PFE (Packet Forwarding Engine) hang or crash. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10786 - http://www.securitytracker.com/id/1038254 - http://www.securityfocus.com/bid/97607
CVE ID: CVE-2017-2341 State: PUBLISHED Published: 2017-07-14T14:00:00Z Last Updated: 2024-09-16T18:48:59.443Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Juniper Networks Products: Junos OS Problem Types: insufficient authentication vulnerability Description: An insufficient authentication vulnerability on platforms where Junos OS instances are run in a virtualized environment, may allow unprivileged users on the Junos OS instance to gain access to the host operating environment, and thus escalate privileges. Affected releases are Juniper Networks Junos OS 14.1X53 prior to 14.1X53-D40 on QFX5110, QFX5200, QFX10002, QFX10008, QFX10016, EX4600 and NFX250; 15
Networks Junos OS 14.1X53 prior to 14.1X53-D40 on QFX5110, QFX5200, QFX10002, QFX10008, QFX10016, EX4600 and NFX250; 15.1 prior to 15.1R5 on EX4600; 15.1X49 prior to 15.1X49-D70 on vSRX, SRX1500, SRX4100, SRX4200; 16.1 prior to 16.1R2 on EX4600, ACX5000 series. This issue does not affect vMX. No other Juniper Networks products or platforms are affected by this issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038893 - https://kb.juniper.net/JSA10787
CVE ID: CVE-2017-2342 State: PUBLISHED Published: 2017-07-14T14:00:00Z Last Updated: 2024-09-16T16:27:33.007Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Juniper Networks Products: Junos OS Problem Types: CWE-392 Description: MACsec feature on Juniper Networks Junos OS 15.1X49 prior to 15.1X49-D100 on SRX300 series does not report errors when a secure link can not be established. It falls back to an unencrypted link. This can happen when MACsec is configured on ports that are not capable of MACsec or when a secure link can not be established. This can mislead customers into believing that a link is secure. On SRX 300 series devices, prior to 15.1X49-D100,
hed. This can mislead customers into believing that a link is secure. On SRX 300 series devices, prior to 15.1X49-D100, MACsec was only supported on control and fabric ports of SRX340 and SRX345 devices. SRX300 and and SRX320 did not have any MACsec capable ports. Configuring MACsec on ports that were not MACsec capable would have resulted in this issue. Affected releases are Juniper Networks Junos OS 15.1X49 prior to 15.1X49-D100 on SRX300 series. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10790 - http://www.securitytracker.com/id/1038890
CVE ID: CVE-2017-2343 State: PUBLISHED Published: 2017-07-14T14:00:00Z Last Updated: 2024-09-17T02:17:10.153Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Juniper Networks Products: Junos OS Problem Types: Use of Hard-coded Credentials Description: The Integrated User Firewall (UserFW) feature was introduced in Junos OS version 12.1X47-D10 on the Juniper SRX Series devices to provide simple integration of user profiles on top of the existing firewall polices. As part of an internal security review of the UserFW services authentication API, hardcoded credentials were identified and removed which can impact both the SRX Series device, and potentially LDAP
PI, hardcoded credentials were identified and removed which can impact both the SRX Series device, and potentially LDAP and Active Directory integrated points. An attacker may be able to completely compromise SRX Series devices, as well as Active Directory servers and services. When Active Directory is compromised, it may allow access to user credentials, workstations, servers performing other functions such as email, database, etc. Inter-Forest Active Directory deployments may also be at risk as the attacker may gain full administrative control over one or more Active Directories depending on the credentials supplied by the administrator of the AD domains and SRX devices performing integrat
ctories depending on the credentials supplied by the administrator of the AD domains and SRX devices performing integrated authentication of users, groups and devices. To identify if your device is potentially vulnerable to exploitation, check to see if the service is operating; from CLI review the following output: root@SRX-Firewall# run show services user-identification active-directory-access domain-controller status extensive A result of "Status: Connected" will indicate that the service is active on the device. To evaluate if user authentication is occurring through the device: root@SRX-Firewall# run show services user-identification active-directory-access active-directory-authenticati