Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 22:26:55 +0000 CVE-2023-36845 — Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment… https://cve.radiocsirt.org/vuln/cve-2023-36845 <p><strong>Affected:</strong> Juniper Networks Junos OS</p> <p>A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series</p> <p>and SRX Series</p> <p>allows an unauthenticated, network-based attacker to remotely execute code.</p> <p>Using a crafted request which sets the variable PHPRC an attacker is able to modify the PHP execution environment allowing the injection und execution of code.</p> <p>This issue affects Juniper Networks Junos OS on EX Series</p> <p>and</p> <p>SRX Series:</p> <p>* All versions prior to</p> <p>20.4R3-S9; * 21.1 versions 21.1R1 and later; * 21.2 versions prior to 21.2R3-S7; * 21.3 versions prior to 21.3R3-S5; * 21.4 versions prior to 21.4R3-S5; * 22.1 versions</p> <p>prior to</p> <p>22.1R3-S4; * 22.2 versions</p> <p>prior to</p> <p>22.2R3-S2; * 22.3 versions</p> <p>prior to</p> <p>22.3R2-S2, 22.3R3-S1; * 22.4 versions</p> <p>prior to</p> <p>22.4R2-S1, 22.4R3; * 23.2 versions prior to 23.2R1-S1, 23.2R2.</p> <p><strong>Affected:</strong> Juniper Networks Junos OS</p> <p>A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series</p> <p>and SRX Series</p> <p>allows an unauthenticated, network-based attacker to remotely execute code.</p> <p>Using a crafted request which sets the variable PHPRC an attacker is able to modify the PHP execution environment allowing the injection und execution of code.</p> <p>This issue affects Juniper Networks Junos OS on EX Series</p> <p>and</p> <p>SRX Series:</p> <p>* All versions prior to</p> <p>20.4R3-S9; * 21.1 versions 21.1R1 and later; * 21.2 versions prior to 21.2R3-S7; * 21.3 versions prior to 21.3R3-S5; * 21.4 versions prior to 21.4R3-S5; * 22.1 versions</p> <p>prior to</p> <p>22.1R3-S4; * 22.2 versions</p> <p>prior to</p> <p>22.2R3-S2; * 22.3 versions</p> <p>prior to</p> <p>22.3R2-S2, 22.3R3-S1; * 22.4 versions</p> <p>prior to</p> <p>22.4R2-S1, 22.4R3; * 23.2 versions prior to 23.2R1-S1, 23.2R2.</p> https://cve.radiocsirt.org/vuln/cve-2023-36845