https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 17:07:06 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-00391 bdu:2024-00391 https://cve.radiocsirt.org/vuln/bdu:2024-00391 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0027 certfr-2024-avi-0027 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0027 https://cve.radiocsirt.org/vuln/euvd-2026-244851 EUVD-2026-244851 https://cve.radiocsirt.org/vuln/euvd-2026-244851 https://cve.radiocsirt.org/vuln/fkie_cve-2024-21607 <p>An Unsupported Feature in the UI vulnerability in Juniper Networks Junos OS on MX Series and EX9200 Series allows an unauthenticated, network-based attacker to cause partial impact to the integrity of the device.</p> <p>If the &#34;tcp-reset&#34; option is added to the &#34;reject&#34; action in an IPv6 filter which matches on &#34;payload-protocol&#34;, packets are permitted instead of rejected. This happens because the payload-protocol match criteria is not supported in the kernel filter causing it to accept all packets without taking any other action. As a fix the payload-protocol match will be treated the same as a &#34;next-header&#34; match to avoid this filter bypass.</p> <p>This issue doesn&#39;t affect IPv4 firewall filters.</p> <p>This issue affects Juniper Networks Junos OS on MX Series and EX9200 Series:</p> <p>* All versions earlier than 20.4R3-S7; * 21.1 versions earlier than 21.1R3-S5; * 21.2 versions earlier than 21.2R3-S5; * 21.3 versions earlier than 21.3R3-S4; * 21.4 versions earlier than 21.4R3-S4; * 22.1 versions earlier than 22.1R3-S2; * 22.2 versions earlier than 22.2R3-S2; * 22.3 versions earlier than 22.3R2-S2, 22.3R3; * 22.4 versions earlier than 22.4R1-S2, 22.4R2-S2, 22.4R3.</p> <p>An Unsupported Feature in the UI vulnerability in Juniper Networks Junos OS on MX Series and EX9200 Series allows an unauthenticated, network-based attacker to cause partial impact to the integrity of the device.</p> <p>If the &#34;tcp-reset&#34; option is added to the &#34;reject&#34; action in an IPv6 filter which matches on &#34;payload-protocol&#34;, packets are permitted instead of rejected. This happens because the payload-protocol match criteria is not supported in the kernel filter causing it to accept all packets without taking any other action. As a fix the payload-protocol match will be treated the same as a &#34;next-header&#34; match to avoid this filter bypass.</p> <p>This issue doesn&#39;t affect IPv4 firewall filters.</p> <p>This issue affects Juniper Networks Junos OS on MX Series and EX9200 Series:</p> <p>* All versions earlier than 20.4R3-S7; * 21.1 versions earlier than 21.1R3-S5; * 21.2 versions earlier than 21.2R3-S5; * 21.3 versions earlier than 21.3R3-S4; * 21.4 versions earlier than 21.4R3-S4; * 22.1 versions earlier than 22.1R3-S2; * 22.2 versions earlier than 22.2R3-S2; * 22.3 versions earlier than 22.3R2-S2, 22.3R3; * 22.4 versions earlier than 22.4R1-S2, 22.4R2-S2, 22.4R3.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-21607 https://cve.radiocsirt.org/vuln/ghsa-84c9-gp6c-qg45 <p>An Unsupported Feature in the UI vulnerability in Juniper Networks Junos OS on MX Series and EX9200 Series allows an unauthenticated, network-based attacker to cause partial impact to the integrity of the device.</p> <p>If the &#34;tcp-reset&#34; option is added to the &#34;reject&#34; action in an IPv6 filter which matches on &#34;payload-protocol&#34;, packets are permitted instead of rejected. This happens because the payload-protocol match criteria is not supported in the kernel filter causing it to accept all packets without taking any other action. As a fix the payload-protocol match will be treated the same as a &#34;next-header&#34; match to avoid this filter bypass.</p> <p>This issue doesn&#39;t affect IPv4 firewall filters.</p> <p>This issue affects Juniper Networks Junos OS on MX Series and EX9200 Series:</p> <p>* All versions earlier than 20.4R3-S7; * 21.1 versions earlier than 21.1R3-S5; * 21.2 versions earlier than 21.2R3-S5; * 21.3 versions earlier than 21.3R3-S4; * 21.4 versions earlier than 21.4R3-S4; * 22.1 versions earlier than 22.1R3-S2; * 22.2 versions earlier than 22.2R3-S2; * 22.3 versions earlier than 22.3R2-S2, 22.3R3; * 22.4 versions earlier than 22.4R1-S2, 22.4R2-S2, 22.4R3.</p> <p>An Unsupported Feature in the UI vulnerability in Juniper Networks Junos OS on MX Series and EX9200 Series allows an unauthenticated, network-based attacker to cause partial impact to the integrity of the device.</p> <p>If the &#34;tcp-reset&#34; option is added to the &#34;reject&#34; action in an IPv6 filter which matches on &#34;payload-protocol&#34;, packets are permitted instead of rejected. This happens because the payload-protocol match criteria is not supported in the kernel filter causing it to accept all packets without taking any other action. As a fix the payload-protocol match will be treated the same as a &#34;next-header&#34; match to avoid this filter bypass.</p> <p>This issue doesn&#39;t affect IPv4 firewall filters.</p> <p>This issue affects Juniper Networks Junos OS on MX Series and EX9200 Series:</p> <p>* All versions earlier than 20.4R3-S7; * 21.1 versions earlier than 21.1R3-S5; * 21.2 versions earlier than 21.2R3-S5; * 21.3 versions earlier than 21.3R3-S4; * 21.4 versions earlier than 21.4R3-S4; * 22.1 versions earlier than 22.1R3-S2; * 22.2 versions earlier than 22.2R3-S2; * 22.3 versions earlier than 22.3R2-S2, 22.3R3; * 22.4 versions earlier than 22.4R1-S2, 22.4R2-S2, 22.4R3.</p> https://cve.radiocsirt.org/vuln/ghsa-84c9-gp6c-qg45 https://cve.radiocsirt.org/vuln/gsd-2024-21607 gsd-2024-21607 https://cve.radiocsirt.org/vuln/gsd-2024-21607 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0064 <p>Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter, anonymer, authentisierter, lokaler oder physischer Angreifer kann mehrere Schwachstellen in Juniper JUNOS, Juniper JUNOS Evolved, Juniper SRX Series, Juniper EX Series, Juniper QFX Series, Juniper ACX Series, Juniper PTX Series und Juniper MX Series ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen und seine Berechtigungen zu erweitern.</p> <p>Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter, anonymer, authentisierter, lokaler oder physischer Angreifer kann mehrere Schwachstellen in Juniper JUNOS, Juniper JUNOS Evolved, Juniper SRX Series, Juniper EX Series, Juniper QFX Series, Juniper ACX Series, Juniper PTX Series und Juniper MX Series ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen und seine Berechtigungen zu erweitern.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0064