https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 00:21:29 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-03713 bdu:2025-03713 https://cve.radiocsirt.org/vuln/bdu:2025-03713 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0575 certfr-2024-avi-0575 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0575 https://cve.radiocsirt.org/vuln/euvd-2026-6220 EUVD-2026-6220 https://cve.radiocsirt.org/vuln/euvd-2026-6220 https://cve.radiocsirt.org/vuln/fkie_cve-2024-39565 <p>An Improper Neutralization of Data within XPath Expressions (&#39;XPath Injection&#39;) vulnerability in J-Web shipped with Juniper Networks Junos OS allows an unauthenticated, network-based attacker to execute remote commands on the target device.</p> <p>While an administrator is logged into a J-Web session or has previously logged in and subsequently logged out of their J-Web session, the attacker can arbitrarily execute commands on the target device with the other user&#39;s credentials. In the worst case, the attacker will have full control over the device. This issue affects Junos OS:</p> <p>* All versions before 21.2R3-S8,  * from 21.4 before 21.4R3-S7, * from 22.2 before 22.2R3-S4, * from 22.3 before 22.3R3-S3, * from 22.4 before 22.4R3-S2, * from 23.2 before 23.2R2, * from 23.4 before 23.4R1-S1, 23.4R2.</p> <p>An Improper Neutralization of Data within XPath Expressions (&#39;XPath Injection&#39;) vulnerability in J-Web shipped with Juniper Networks Junos OS allows an unauthenticated, network-based attacker to execute remote commands on the target device.</p> <p>While an administrator is logged into a J-Web session or has previously logged in and subsequently logged out of their J-Web session, the attacker can arbitrarily execute commands on the target device with the other user&#39;s credentials. In the worst case, the attacker will have full control over the device. This issue affects Junos OS:</p> <p>* All versions before 21.2R3-S8,  * from 21.4 before 21.4R3-S7, * from 22.2 before 22.2R3-S4, * from 22.3 before 22.3R3-S3, * from 22.4 before 22.4R3-S2, * from 23.2 before 23.2R2, * from 23.4 before 23.4R1-S1, 23.4R2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-39565 https://cve.radiocsirt.org/vuln/ghsa-9xg8-vx2w-7c89 <p>An Improper Neutralization of Data within XPath Expressions (&#39;XPath Injection&#39;) vulnerability in J-Web shipped with Juniper Networks Junos OS allows an unauthenticated, network-based attacker to execute remote commands on the target device.</p> <p>While an administrator is logged into a J-Web session or has previously logged in and subsequently logged out of their J-Web session, the attacker can arbitrarily execute commands on the target device with the other user&#39;s credentials. In the worst case, the attacker will have full control over the device. This issue affects Junos OS:</p> <p>* All versions before 21.2R3-S8,  * from 21.4 before 21.4R3-S7, * from 22.2 before 22.2R3-S4, * from 22.3 before 22.3R3-S3, * from 22.4 before 22.4R3-S2, * from 23.2 before 23.2R2, * from 23.4 before 23.4R1-S1, 23.4R2.</p> <p>An Improper Neutralization of Data within XPath Expressions (&#39;XPath Injection&#39;) vulnerability in J-Web shipped with Juniper Networks Junos OS allows an unauthenticated, network-based attacker to execute remote commands on the target device.</p> <p>While an administrator is logged into a J-Web session or has previously logged in and subsequently logged out of their J-Web session, the attacker can arbitrarily execute commands on the target device with the other user&#39;s credentials. In the worst case, the attacker will have full control over the device. This issue affects Junos OS:</p> <p>* All versions before 21.2R3-S8,  * from 21.4 before 21.4R3-S7, * from 22.2 before 22.2R3-S4, * from 22.3 before 22.3R3-S3, * from 22.4 before 22.4R3-S2, * from 23.2 before 23.2R2, * from 23.4 before 23.4R1-S1, 23.4R2.</p> https://cve.radiocsirt.org/vuln/ghsa-9xg8-vx2w-7c89 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1591 <p>Ein Angreifer kann mehrere Schwachstellen in Juniper JUNOS ausnutzen, um einen Denial of Service zu verursachen, Informationen offenzulegen, Privilegien zu erweitern und Sicherheitsmechanismen inklusive zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Juniper JUNOS ausnutzen, um einen Denial of Service zu verursachen, Informationen offenzulegen, Privilegien zu erweitern und Sicherheitsmechanismen inklusive zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1591