Vulnerabilities published in 2018
16,257 vulnerabilities were published in 2018: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 163 of 163.
- CVE-2018-0060 Junos OS: Invalid IP/mask learned from DHCP server might cause device control daemon (dcd) process crash
- CVE-2018-0059 ScreenOS: Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2018-0058 MX Series: In BBE configurations, receipt of a crafted IPv6 exception packet causes a Denial of Service
- CVE-2018-0057 Business logic in Junos OS
- CVE-2018-0056 MX Series: L2ALD daemon may crash if a duplicate MAC is learned by two different interfaces
- CVE-2018-0055 Junos OS: jdhcpd process crash during processing of specially crafted DHCPv6 message
- CVE-2018-0054 QFX5000/EX4600 Series: Routing protocol flap upon receipt of high rate of Ethernet frames
- CVE-2018-0053 Auth bypass in Junos OS
- CVE-2018-0052 Junos OS: Unauthenticated remote root access possible when RSH service is enabled
- CVE-2018-0051 Denial of service in Junos OS
- CVE-2018-0050 Junos OS: Receipt of a malformed MPLS RSVP packet leads to a Routing Protocols Daemon (RPD) crash.
- CVE-2018-0049 Junos OS: Receipt of a specifically crafted malicious MPLS packet leads to a Junos kernel crash.
- CVE-2018-0048 Denial of service in Junos OS
- CVE-2018-0047 Junos Space Security Director: XSS vulnerability in web administration
- CVE-2018-0046 Junos Space: Reflected Cross-site Scripting vulnerability in OpenNMS
- CVE-2018-0045 Denial of service in Junos OS
- CVE-2018-0044 NFX Series: Insecure sshd configuration in Juniper Device Manager (JDM) and host OS
- CVE-2018-0043 Junos OS: RPD daemon crashes upon receipt of specific MPLS packet
- CVE-2018-0042 Information disclosure in juniper:contrail service orchestration
- CVE-2018-0041 Contrail Service Orchestration: Hardcoded credentials for Keystone service.
- CVE-2018-0040 Contrail Service Orchestration: hardcoded cryptographic certificates and keys
- CVE-2018-0039 Contrail Service Orchestration: Hardcoded credentials for Grafana service
- CVE-2018-0038 Hardcoded credentials in juniper:contrail service orchestration
- CVE-2018-0037 Junos OS: RPD daemon crashes due to receipt of crafted BGP NOTIFICATION messages
- CVE-2018-0035 Junos OS: QFX5200 and QFX10002: Unintended ONIE partition was shipped with certain Junos OS .bin and .iso images
- CVE-2018-0034 Junos OS: A malicious crafted IPv6 DHCP packet may cause the JDHCPD daemon to core
- CVE-2018-0032 Junos OS: RPD crash when receiving a crafted BGP UPDATE
- CVE-2018-0031 Junos OS: Receipt of specially crafted UDP packets over MPLS may bypass stateless IP firewall rules
- CVE-2018-0030 Junos OS: MPC7/8/9, PTX-FPC3 (FPC-P1, FPC-P2) and PTX1K: Line card may crash upon receipt of specific MPLS packet.
- CVE-2018-0029 Junos OS: Kernel crash (vmcore) during broadcast storm after enabling 'monitor traffic interface fxp0'
- CVE-2018-0027 Junos OS: Receipt of malformed RSVP packet may lead to RPD denial of service
- CVE-2018-0026 Junos OS: Stateless IP firewall filter rules stop working as expected after reboot or upgrade
- CVE-2018-0025 Junos OS: SRX Series: Credentials exposed when using HTTP and HTTPS Firewall Pass-through User Authentication
- CVE-2018-0024 Junos OS: A privilege escalation vulnerability exists where authenticated users with shell access can become root
- CVE-2018-0023 Junos Snapshot Administrator (JSNAPy) world writeable default configuration file permission
- CVE-2018-0022 Junos OS: Mbuf leak due to processing MPLS packets in VPLS network.
- CVE-2018-0021 Junos OS: Short MacSec keys may allow man-in-the-middle attacks.
- CVE-2018-0020 Junos OS: rpd daemon cores due to malformed BGP UPDATE packet
- CVE-2018-0019 Junos: Denial of service vulnerability in SNMP MIB-II subagent daemon (mib2d).
- CVE-2018-0018 Security feature bypass in Junos OS
- CVE-2018-0017 SRX Series: Denial of service vulnerability in flowd daemon on devices configured with NAT-PT
- CVE-2018-0016 Junos OS: Kernel crash upon receipt of crafted CLNP datagrams
- CVE-2018-0015 AppFormix: Debug Shell Command Execution in AppFormix Agent
- CVE-2018-0014 ScreenOS: Etherleak vulnerability found on ScreenOS device
- CVE-2018-0013 Junos Space: Local File Inclusion Vulnerability
- CVE-2018-0012 Junos Space: Local privilege escalation vulnerability in Junos Space
- CVE-2018-0011 Junos Space: Reflected XSS vulnerability in Junos Space management interface
- CVE-2018-0010 Privilege escalation in juniper:junos space
- CVE-2018-0009 SRX Series: Firewall bypass vulnerability when UUID with leading zeros is configured.
- CVE-2018-0008 Junos OS: commit script may allow unauthenticated root login upon reboot
- CVE-2018-0007 Memory corruption in juniper:junos
- CVE-2018-0006 Junos OS: bbe-smgd process denial of service while processing VLAN authentication requests/rejects
- CVE-2018-0005 Security Bulletin: Junos OS: MAC move limit configured to drop traffic may forward traffic.
- CVE-2018-0004 Junos OS: Kernel Denial of Service Vulnerability
- CVE-2018-0003 Junos OS: A crafted MPLS packet may lead to a kernel crash
- CVE-2018-0002 MX series, SRX series: Junos OS: Denial of service vulnerability in Flowd on devices with ALG enabled.
- CVE-2018-0001 Junos: Unauthenticated Remote Code Execution through J-Web interface