Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
/lists/oss-security/2016/11/22/20 - https://security.gentoo.org/glsa/201701-29 - http://www.debian.org/security/2016/dsa-3722 - https://github.com/vim/vim/commit/d0b5138ba4bccff8a744c99836041ef6322ed39a - https://lists.debian.org/debian-lts-announce/2016/11/msg00025.html - http://www.ubuntu.com/usn/USN-3139-1 - http://www.securitytracker.com/id/1037338 - https://github.com/neovim/neovim/commit/4fad66fbe637818b6b3d6bc5d21923ba72795040 - http://www.securityfocus.com/bid/94478 - https://github.com/vim/vim/releases/tag/v8.0.0056 - http://rhn.redhat.com/errata/RHSA-2016-2972.html - https://anonscm.debian.org/cgit/pkg-vim/vim.git/tree/debian/changelog
CVE ID: CVE-2016-1249 State: PUBLISHED Published: 2017-02-16T18:00:00 Last Updated: 2024-08-05T22:48:13.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DBD::mysql module before 4.039 for Perl, when using server-side prepared statement support, allows attackers to cause a denial of service (out-of-bounds read) via vectors involving an unaligned number of placeholders in WHERE condition and output fields in SELECT expression. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/11/16/1 - https://github.com/perl5-dbi/DBD-mysql/commit/793b72b1a0baa5070adacaac0e12fd995a6fbabe - http://www.securityfocus.com/bid/94350 -
ithub.com/perl5-dbi/DBD-mysql/commit/793b72b1a0baa5070adacaac0e12fd995a6fbabe - http://www.securityfocus.com/bid/94350 - http://cpansearch.perl.org/src/CAPTTOFU/DBD-mysql-4.039/Changes - https://security.gentoo.org/glsa/201701-51
CVE ID: CVE-2016-1250 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-1251 State: PUBLISHED Published: 2016-11-29T20:00:00 Last Updated: 2024-08-05T22:48:13.671Z Vendors: n/a Products: DBD::mysql before 4.041 Problem Types: use after free Description: There is a vulnerability of type use-after-free affecting DBD::mysql (aka DBD-mysql or the Database Interface (DBI) MySQL driver for Perl) 3.x and 4.x before 4.041 when used with mysql_server_prepare=1. Additional Analyst Notes: - CVE Program Container: References: - https://tracker.debian.org/news/819888 - http://www.openwall.com/lists/oss-security/2016/11/28/2 - https://anonscm.debian.org/cgit/pkg-perl/packages/libdbd-mysql-perl.git/commit/?id=a8b97e4713391b1f8beffbfddac483c276feaff1 - http://w
m.debian.org/cgit/pkg-perl/packages/libdbd-mysql-perl.git/commit/?id=a8b97e4713391b1f8beffbfddac483c276feaff1 - http://www.securityfocus.com/bid/94573 - https://github.com/perl5-dbi/DBD-mysql/commit/3619c170461a3107a258d1fd2d00ed4832adb1b1 - https://security.gentoo.org/glsa/201701-51
CVE ID: CVE-2016-1252 State: PUBLISHED Published: 2017-12-05T16:00:00 Last Updated: 2024-08-05T22:48:13.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: The apt package in Debian jessie before 1.0.9.8.4, in Debian unstable before 1.4~beta2, in Ubuntu 14.04 LTS before 1.0.1ubuntu2.17, in Ubuntu 16.04 LTS before 1.2.15ubuntu0.2, and in Ubuntu 16.10 before 1.3.2ubuntu0.1 allows man-in-the-middle attackers to bypass a repository-signing protection mechanism by leveraging improper error handling when validating InRelease file signatures. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2016/dsa-3733 - http://www.ubuntu.com/usn/USN-315
- CVE Program Container: References: - https://www.debian.org/security/2016/dsa-3733 - http://www.ubuntu.com/usn/USN-3156-1 - http://packetstormsecurity.com/files/140145/apt-Repository-Signing-Bypass.html - https://www.exploit-db.com/exploits/40916/ - https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1647467 - https://bugs.chromium.org/p/project-zero/issues/detail?id=1020
CVE ID: CVE-2016-1253 State: PUBLISHED Published: 2017-12-05T16:00:00 Last Updated: 2024-08-05T22:48:13.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: The most package in Debian wheezy before 5.0.0a-2.2, in Debian jessie before 5.0.0a-2.3+deb8u1, and in Debian unstable before 5.0.0a-3 allows remote attackers to execute arbitrary commands via shell metacharacters in the name of an LZMA-compressed file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94931 - http://seclists.org/oss-sec/2016/q4/666 - https://lists.debian.org/debian-lts-announce/2016/12/msg00020.html - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848132
CVE ID: CVE-2016-1254 State: PUBLISHED Published: 2017-12-05T16:00:00 Last Updated: 2024-08-05T22:48:13.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor before 0.2.8.12 might allow remote attackers to cause a denial of service (client crash) via a crafted hidden service descriptor. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-12/msg00154.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTU2R253477RZLYAJAR5DAXAON7KIVLA/ - https://blog.torproject.org/blog/tor-02812-released - http://lists.opensuse.org/opensuse-updates/2016-12/msg00155.html - https://www.
torproject.org/blog/tor-02812-released - http://lists.opensuse.org/opensuse-updates/2016-12/msg00155.html - https://www.debian.org/security/2016/dsa-3741 - https://trac.torproject.org/projects/tor/ticket/21018 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FXOJSMCTIOHLBRYFBVEL3CDLGPZXX6WE/ - https://gitweb.torproject.org/tor.git/commit/?id=d978216dea6b21ac38230a59d172139185a68dbd
CVE ID: CVE-2016-1255 State: PUBLISHED Published: 2017-12-05T16:00:00 Last Updated: 2024-08-05T22:48:13.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pg_ctlcluster script in postgresql-common package in Debian wheezy before 134wheezy5, in Debian jessie before 165+deb8u2, in Debian unstable before 178, in Ubuntu 12.04 LTS before 129ubuntu1.2, in Ubuntu 14.04 LTS before 154ubuntu1.1, in Ubuntu 16.04 LTS before 173ubuntu0.1, in Ubuntu 17.04 before 179ubuntu0.1, and in Ubuntu 17.10 before 184ubuntu1.1 allows local users to gain root privileges via a symlink attack on a logfile in /var/log/postgresql. Additional Analyst Notes: - CVE Program Container: References: - https://l
k attack on a logfile in /var/log/postgresql. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2017/01/msg00002.html - http://www.ubuntu.com/usn/USN-3476-1 - https://anonscm.debian.org/cgit/pkg-postgresql/postgresql-common.git/commit/?id=c8989206ec360f199400c74f129f7b4cb878c1ee - http://www.ubuntu.com/usn/USN-3476-2
CVE ID: CVE-2016-1256 State: PUBLISHED Published: 2016-01-15T19:00:00 Last Updated: 2024-08-05T22:48:13.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos OS before 12.1X44-D55, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R8, 13.2X51 before 13.2X51-D40, 13.3 before 13.3R7, 14.1 before 14.1R5, 14.1X53 before 14.1X53-D18 or 14.1X53-D30, 14.1X55 before 14.1X55-D25, 14.2 before 14.2R4, 15.1 before 15.1R2, and 15.1X49 before 15.1X49-D10 allow remote attackers to cause a denial of service via a malformed IGMPv3 packet, aka a "multicast denial of service." Additional Analyst Notes: - CVE Program
of service via a malformed IGMPv3 packet, aka a "multicast denial of service." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035107 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10714
CVE ID: CVE-2016-1257 State: PUBLISHED Published: 2016-01-15T19:00:00 Last Updated: 2024-08-05T22:48:13.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Routing Engine in Juniper Junos OS 13.2R5 through 13.2R8, 13.3R1 before 13.3R8, 13.3R7 before 13.3R7-S3, 14.1R1 before 14.1R6, 14.1R3 before 14.1R3-S9, 14.1R4 before 14.1R4-S7, 14.1X51 before 14.1X51-D65, 14.1X53 before 14.1X53-D12, 14.1X53 before 14.1X53-D28, 14.1X53 before 4.1X53-D35, 14.2R1 before 14.2R5, 14.2R3 before 14.2R3-S4, 14.2R4 before 14.2R4-S1, 15.1 before 15.1R3, 15.1F2 before 15.1F2-S2, and 15.1X49 before 15.1X49-D40, when LDP is enabled, allows remote attackers to cause a denial of service (RPD routing proc
15.1X49 before 15.1X49-D40, when LDP is enabled, allows remote attackers to cause a denial of service (RPD routing process crash) via a crafted LDP packet. Additional Analyst Notes: - CVE Program Container: References: - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10715 - http://www.securitytracker.com/id/1035117
CVE ID: CVE-2016-1258 State: PUBLISHED Published: 2016-01-15T19:00:00 Last Updated: 2024-08-05T22:48:13.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Embedthis Appweb, as used in J-Web in Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D20, 13.2X51 before 13.2X51-D20, 13.3 before 13.3R8, 14.1 before 14.1R6, and 14.2 before 14.2R5, allows remote attackers to cause a denial of service (J-Web crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035116 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA1
r: References: - http://www.securitytracker.com/id/1035116 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10720
CVE ID: CVE-2016-1260 State: PUBLISHED Published: 2016-01-15T19:00:00 Last Updated: 2024-08-05T22:48:13.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos OS before 13.2X51-D36, 14.1X53 before 14.1X53-D25, and 15.2 before 15.2R1 on EX4300 series switches allow remote attackers to cause a denial of service (network loop and bandwidth consumption) via unspecified vectors related to Spanning Tree Protocol (STP) traffic. Additional Analyst Notes: - CVE Program Container: References: - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10719 - http://www.securitytracker.com/id/1035106
CVE ID: CVE-2016-1261 State: PUBLISHED Published: 2017-10-13T17:00:00Z Last Updated: 2024-09-16T23:22:09.228Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Juniper Networks Products: Junos OS Problem Types: failure to validate input Description: J-Web does not validate certain input that may lead to cross-site request forgery (CSRF) issues or cause a denial of J-Web service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10723
CVE ID: CVE-2016-1262 State: PUBLISHED Published: 2016-01-15T19:00:00 Last Updated: 2024-08-05T22:48:13.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos OS before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.1X48 before 12.3X48-D20, and 15.1X49 before 15.1X49-D30 on SRX series devices, when the Real Time Streaming Protocol Application Layer Gateway (RTSP ALG) is enabled, allow remote attackers to cause a denial of service (flowd crash) via a crafted RTSP packet. Additional Analyst Notes: - CVE Program Container: References: - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10721 - http://www.securitytracker.com/id/1035108
CVE ID: CVE-2016-1263 State: PUBLISHED Published: 2016-09-09T14:00:00 Last Updated: 2024-08-05T22:48:13.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos OS before 12.1X46-D45, 12.1X46-D50, 12.1X47 before 12.1X47-D35, 12.3X48 before 12.3X48-D30, 13.3 before 13.3R9-S1, 14.1 before 14.1R7, 14.2 before 14.2R6, 15.1 before 15.1F2-S5, 15.1F4 before 15.1F4-S2, 15.1R before 15.1R2-S3, 15.1 before 15.1R3, and 15.1X49 before 15.1X49-D40 allow remote attackers to cause a denial of service (kernel crash) via a crafted UDP packet destined to the interface IP address of a 64-bit OS device. Additional Analyst Notes: - CVE Program Container: References: - http://kb.juniper.net/I
address of a 64-bit OS device. Additional Analyst Notes: - CVE Program Container: References: - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10758 - http://www.securitytracker.com/id/1036304
CVE ID: CVE-2016-1264 State: PUBLISHED Published: 2016-04-15T14:00:00 Last Updated: 2024-08-05T22:48:13.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the Op command in Juniper Junos OS before 12.1X44-D55, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R11, 12.3X48 before 12.3X48-D20, 12.3X50 before 12.3X50-D50, 13.2 before 13.2R8, 13.2X51 before 13.2X51-D39, 13.2X52 before 13.2X52-D30, 13.3 before 13.3R7, 14.1 before 14.1R6, 14.1X53 before 14.1X53-D30, 14.2 before 14.2R4, 15.1 before 15.1F2 or 15.1R2, 15.1X49 before 15.1X49-D10 or 15.1X49-D20, and 16.1 before 16.1R1 allows remote authenticated users to gain privileges via the URL o
re 15.1X49-D10 or 15.1X49-D20, and 16.1 before 16.1R1 allows remote authenticated users to gain privileges via the URL option. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035669 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10725
CVE ID: CVE-2016-1265 State: PUBLISHED Published: 2017-10-13T17:00:00Z Last Updated: 2024-09-17T02:20:41.614Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Juniper Networks Products: Junos OS Problem Types: Privilege escalation Description: A remote unauthenticated network based attacker with access to Junos Space may execute arbitrary code on Junos Space or gain access to devices managed by Junos Space using cross site request forgery (CSRF), default authentication credentials, information leak and command injection attack vectors. All versions of Juniper Networks Junos Space prior to 15.1R3 are affected. Additional Analyst Notes: - CVE Program Containe
versions of Juniper Networks Junos Space prior to 15.1R3 are affected. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10727
CVE ID: CVE-2016-1267 State: PUBLISHED Published: 2016-04-15T14:00:00 Last Updated: 2024-08-05T22:48:13.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the RPC functionality in Juniper Junos OS before 12.1X44-D55, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R11, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R8, 13.2X51 before 13.2X51-D39, 13.3 before 13.3R7, 14.1 before 14.1R6, 14.1X53 before 14.1X53-D30, 14.2 before 14.2R3-S4, 15.1 before 15.1F2, or 15.1R2, 15.1X49 before 15.1X49-D20, and 16.1 before 16.1R1 allows local users to read, delete, or modify arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program
local users to read, delete, or modify arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10730 - http://www.securitytracker.com/id/1035668
CVE ID: CVE-2016-1268 State: PUBLISHED Published: 2016-04-15T14:00:00 Last Updated: 2024-08-05T22:48:13.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administrative web services interface in Juniper ScreenOS before 6.3.0r21 allows remote attackers to cause a denial of service (reboot) via a crafted SSL packet. Additional Analyst Notes: - CVE Program Container: References: - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10732 - http://www.securitytracker.com/id/1035666
CVE ID: CVE-2016-1269 State: PUBLISHED Published: 2016-04-15T14:00:00 Last Updated: 2024-08-05T22:48:13.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R11, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R9, 13.2X51 before 13.2X51-D39, 13.3 before 13.3R8, 14.1 before 14.1R6, 14.1X53 before 14.1X53-D30, 14.2 before 14.2R4-S1, 15.1 before 15.1R2, 15.1X49 before 15.1X49-D30, and 16.1 before 16.1R1 allow remote attackers to cause a denial of service (socket consumption) via crafted TCP timestamps. Additional Analyst Notes: - CVE Program Container: References: - http://kb.juni
consumption) via crafted TCP timestamps. Additional Analyst Notes: - CVE Program Container: References: - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10736
CVE ID: CVE-2016-1270 State: PUBLISHED Published: 2016-04-15T14:00:00 Last Updated: 2024-08-05T22:48:13.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rpd daemon in Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R7, 13.2X51 before 13.2X51-D40, 13.3 before 13.3R6, 14.1 before 14.1R4, and 14.2 before 14.2R2, when configured with BGP-based L2VPN or VPLS, allows remote attackers to cause a denial of service (daemon restart) via a crafted L2VPN family BGP update. Additional Analyst Notes: - CVE Program Container: References: - http://kb.juniper.net/InfoCenter/index?pa
y BGP update. Additional Analyst Notes: - CVE Program Container: References: - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10737
CVE ID: CVE-2016-1271 State: PUBLISHED Published: 2016-04-15T14:00:00 Last Updated: 2024-08-05T22:48:13.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos OS before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R11, 12.3X48 before 12.3X48-D25, 13.2 before 13.2R8, 13.3 before 13.3R7, 14.1 before 14.1R6, 14.2 before 14.2R4, 15.1 before 15.1R1 or 15.1F2, and 15.1X49 before 15.1X49-D15 allow local users to gain privileges via crafted combinations of CLI commands and arguments, a different vulnerability than CVE-2015-3003, CVE-2014-3816, and CVE-2014-0615. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/10356
CVE-2014-0615. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035667 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10739
CVE ID: CVE-2016-1273 State: PUBLISHED Published: 2016-04-15T14:00:00 Last Updated: 2024-08-05T22:48:13.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos OS before 13.2X51-D40, 14.x before 14.1X53-D30, and 15.x before 15.1X53-D20 on QFX5100 and QFX10002 switches do not have sufficient entropy, which makes it easier for remote attackers to defeat cryptographic encryption and authentication protection mechanisms via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10746
CVE ID: CVE-2016-1274 State: PUBLISHED Published: 2016-04-15T14:00:00 Last Updated: 2024-08-05T22:48:13.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos OS 14.1X53 before 14.1X53-D30 on QFX Series switches allows remote attackers to cause a denial of service (PFE panic) via a high rate of unspecified VXLAN packets. Additional Analyst Notes: - CVE Program Container: References: - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10747
CVE ID: CVE-2016-1275 State: PUBLISHED Published: 2016-09-09T14:00:00 Last Updated: 2024-08-05T22:48:13.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos OS before 13.3R9, 14.1R6 before 14.1R6-S1, and 14.1 before 14.1R7, when configured with VPLS routing-instances, allows remote attackers to obtain sensitive mbuf information by injecting a flood of Ethernet frames with IPv6 MAC addresses directly into a connected interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036301 - http://www.securityfocus.com/bid/91758 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10750
CVE ID: CVE-2016-1276 State: PUBLISHED Published: 2016-08-05T15:00:00 Last Updated: 2024-08-05T22:48:13.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos OS before 12.1X46-D50, 12.1X47 before 12.1X47-D23, 12.3X48 before 12.3X48-D25, and 15.1X49 before 15.1X49-D40 on a High-End SRX-Series chassis system with one or more Application Layer Gateways (ALGs) enabled allow remote attackers to cause a denial of service (CPU consumption, fab link failure, or flip-flop failovers) via vectors related to in-transit traffic matching ALG rules. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91764 - http://www.securitytracker.co
yst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91764 - http://www.securitytracker.com/id/1036305 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10751
CVE ID: CVE-2016-1277 State: PUBLISHED Published: 2016-09-09T14:00:00 Last Updated: 2024-08-05T22:48:13.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos OS before 12.1X46-D50, 12.1X47 before 12.1X47-D40, 12.3X48 before 12.3X48-D30, 13.3 before 13.3R9, 14.1 before 14.1R8, 14.1X53 before 14.1X53-D40, 14.2 before 14.2R6, 15.1 before 15.1F6 or 15.1R3, and 15.1X49 before 15.1X49-D40, when configured with a GRE or IPIP tunnel, allow remote attackers to cause a denial of service (kernel panic) via a crafted ICMP packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91755 - http://www.securitytracker.com/id/1036306 - ht
Program Container: References: - http://www.securityfocus.com/bid/91755 - http://www.securitytracker.com/id/1036306 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10752
CVE ID: CVE-2016-1278 State: PUBLISHED Published: 2016-08-05T15:00:00 Last Updated: 2024-08-05T22:48:13.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos OS before 12.1X46-D50 on SRX Series devices reverts to "safe mode" authentication and allows root CLI logins without a password after a failed upgrade to 12.1X46, which might allow local users to gain privileges by leveraging use of the "request system software" command with the "partition" option. Additional Analyst Notes: - CVE Program Container: References: - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10753 - http://www.securitytracker.com/id/1036307 - http://www.securityfocus.com/bid/91757
CVE ID: CVE-2016-1279 State: PUBLISHED Published: 2016-09-09T14:00:00 Last Updated: 2024-08-05T22:48:13.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: J-Web in Juniper Junos OS before 12.1X46-D45, 12.1X46-D50, 12.1X47 before 12.1X47-D35, 12.3 before 12.3R12, 12.3X48 before 12.3X48-D25, 13.3 before 13.3R10, 13.3R9 before 13.3R9-S1, 14.1 before 14.1R7, 14.1X53 before 14.1X53-D35, 14.2 before 14.2R6, 15.1 before 15.1A2 or 15.1F4, 15.1X49 before 15.1X49-D30, and 15.1R before 15.1R3 might allow remote attackers to obtain sensitive information and consequently gain administrative privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - h
in administrative privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10754 - http://www.securityfocus.com/bid/91759 - http://www.securitytracker.com/id/1036302
CVE ID: CVE-2016-1280 State: PUBLISHED Published: 2016-09-09T14:00:00 Last Updated: 2024-08-05T22:48:13.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: PKId in Juniper Junos OS before 12.1X44-D52, 12.1X46 before 12.1X46-D37, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R12, 12.3X48 before 12.3X48-D20, 13.3 before 13.3R10, 14.1 before 14.1R8, 14.1X53 before 14.1X53-D40, 14.2 before 14.2R7, 15.1 before 15.1R4, 15.1X49 before 15.1X49-D20, 15.1X53 before 15.1X53-D60, and 16.1 before 16.1R1 allow remote attackers to bypass an intended certificate validation mechanism via a self-signed certificate with an Issuer name that matches a valid CA certificate enrolled in Junos. Additional
ism via a self-signed certificate with an Issuer name that matches a valid CA certificate enrolled in Junos. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91761 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10755 - http://www.securitytracker.com/id/1036303