Input Validation and Logic

Every one of the 301 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Juniper J-Web - Remote Code ExecutionCVE-2023-36845Juniper Networks · CVSS 9.8 · 95% likely

   CWE-4731 bounty report

2. Juniper Devices - Remote Code ExecutionCVE-2023-36844Juniper Networks · CVSS 5.3 · 90% likely

   CWE-473

3. Junos OS and Junos OS Evolved: A crafted BGP UPDATE message allows a remote attacker to de-peer (reset) BGP sessions (CVE-2023-4481)CVE-2023-4481Juniper Networks, Inc. · CVSS 7.5 · 18% likely

   CWE-20

4. jsdm/ajax/port.php in J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1 before 12.1R5, 12.2 before 12.2R3, and 12.3 before 12.3R1 allows remote authenticated users t…CVE-2013-6618Juniper · 11% likely

   CWE-20

5. Juniper ScreenOS before 6.3.0r21, when ssh-pka is configured and enabled, allows remote attackers to cause a denial of service (system crash) or execute arbitrary code via crafted…CVE-2015-7754Juniper · 3.9% likely

   CWE-20

6. Unspecified vulnerability in Juniper JUNOS 7.3 through 8.4 allows remote attackers to cause a denial of service (crash) via malformed BGP packets, possibly BGP UPDATE packets that…CVE-2007-6372Juniper · 3.7% likely

   CWE-20

7. Junos OS: RPD daemon crashes due to receipt of crafted BGP NOTIFICATION messagesCVE-2018-0037Juniper Networks · CVSS 9.8 · 3.7% likely

   CWE-20

8. Junos: snmpd denial of service upon receipt of crafted SNMP packetCVE-2017-2345Juniper Networks · CVSS 9.8 · 3.6% likely

   CWE-20

9. Juniper Junos 11.4 before 11.4R12, 12.1X44 before 12.1X44-D32, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, and 12.1X47 before 12.1X47-D10 on SRX Series devices, when N…CVE-2014-3817Juniper · 3.4% likely

   CWE-20

10. Juniper chassis with Trio (Trinity) chipset line cards and Junos OS 13.3 before 13.3R8, 14.1 before 14.1R6, 14.2 before 14.2R5, and 15.1 before 15.1R2 allow remote attackers to ca…CVE-2015-7748Juniper · 2.8% likely

    CWE-20

11. Juniper Junos 11.4 before 11.4R12, 12.1 before 12.1R10, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, 12.1X47 before 12.1X47-D10, 12.2 before…CVE-2014-3819Juniper · 2.7% likely

    CWE-20

12. Junos: Potential remote code execution vulnerability in PAMCVE-2017-10615Juniper Networks · CVSS 9.8 · 2.5% likely

    CWE-20

13. Junos OS: Receipt of malformed RSVP packet may lead to RPD denial of serviceCVE-2018-0027Juniper Networks · CVSS 7.5 · 2.4% likely

    CWE-20

14. The Enhanced Web Filtering (EWF) in Juniper Junos before 10.4R15, 11.4 before 11.4R9, 12.1 before 12.1R7, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D10, and 12.1X46 befor…CVE-2014-2714Juniper · 2.4% likely

    CWE-20

15. JSI Virtual Lightweight Collector: Shell escape allows privilege escalation to rootCVE-2026-21915Juniper Networks · CVSS 6.7 · 2.3% likely

    CWE-183

16. Junos OS: Receipt of a malformed MPLS RSVP packet leads to a Routing Protocols Daemon (RPD) crash.CVE-2018-0050Juniper Networks · CVSS 7.5 · 2.3% likely

    CWE-20

17. Junos OS: Denial of Service in J-WebCVE-2018-0062Juniper Networks · CVSS 5.3 · 2.3% likely

    CWE-20

18. Juniper Networks devices running affected Junos OS versions may be impacted by the receipt of a crafted BGP UPDATE which can lead to an rpd (routing process daemon) crash and rest…CVE-2017-2313Juniper Networks · 2.3% likely

    CWE-20

19. On Juniper Networks Junos OS 15.1 releases from 15.1R3 to 15.1R4, 16.1 prior to 16.1R3, on M/MX platforms where Enhanced Subscriber Management for DHCPv6 subscribers is configured…CVE-2017-2340Juniper Networks · 2.2% likely

    CWE-20

20. The PFE daemon in Juniper vSRX virtual firewalls with Junos OS before 15.1X49-D20 allows remote attackers to cause a denial of service via an unspecified connection request to the…CVE-2015-7749Juniper · 2.2% likely

    CWE-20

21. Junos OS: A malicious crafted IPv6 DHCP packet may cause the JDHCPD daemon to coreCVE-2018-0034Juniper Networks · CVSS 5.3 · 2.1% likely

    CWE-20

22. The Juniper SRX Series devices with Junos 11.4 before 11.4R12-S4, 12.1X44 before 12.1X44-D40, 12.1X45 before 12.1X45-D30, 12.1X46 before 12.1X46-D25, and 12.1X47 before 12.1X47-D1…CVE-2014-3825Juniper · 2.0% likely

    CWE-20

23. Juniper Junos 10.0 before 10.0S28, 10.4 before 10.4R7, 11.1 before 11.1R5, 11.2 before 11.2R2, and 11.4 before 11.4R1, when in a Next-Generation Multicast VPN (NGEN MVPN) environm…CVE-2013-6170Juniper · 2.0% likely

    CWE-20

24. Juniper Junos before 10.4S14, 11.4 before 11.4R5-S2, 12.1R before 12.1R3, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D15 on SRX Series services gateways, when a plugin…CVE-2013-6015Juniper · 2.0% likely

    CWE-20

25. The L2TP packet processing functionality in Juniper Netscreen and ScreenOS Firewall products with ScreenOS before 6.3.0r13-dnd1, 6.3.0r14 through 6.3.0r18 before 6.3.0r18-dnc1, an…CVE-2015-7750Juniper · 2.0% likely

    CWE-20

26. Junos: Denial of Service vulnerability in rpd daemonCVE-2017-2347Juniper Networks · CVSS 6.5 · 1.9% likely

    CWE-20

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.