CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.23)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
On Junos OS devices with SNMP enabled, a network-based attacker with unfiltered access to the RE can cause the snmpd daemon to crash and restart by sending a crafted SNMP packet. Repeated crashes can lead to a partial denial of service condition and may allow for remote code execution.
An internal Junos OS sockets library is vulnerable to a buffer overflow, which may lead to a denial of service (kernel panic) or privilege escalation through local code execution. The routines are only accessible via programs running on the device.
The Integrated User Firewall (UserFW) feature in Junos OS version 12.1X47-D10 on Juniper SRX devices introduced integration of user profiles with existing firewall policies. During a security review, hardcoded credentials were identified and removed, which can impact both SRX devices and integrated LDAP and Active Directory points.
The MACsec feature on Junos OS 15.1X49 prior to 15.1X49-D100 on SRX300 series does not report errors when a secure link cannot be established, falling back to an unencrypted link.
There is an insufficient authentication vulnerability on platforms where Junos OS instances run in a virtualized environment, potentially allowing unprivileged users to access the host operating environment and escalate privileges.
A persistent cross site scripting vulnerability in NetScreen WebUI of Juniper Networks allows a user with the 'security' role to inject HTML/JavaScript content into the management session of other users, including the administrator.
A persistent cross site scripting vulnerability in NetScreen WebUI of Juniper Networks allows a user with the 'security' role to inject HTML/JavaScript content into the management session of other users, including the administrator.
A persistent cross site scripting vulnerability in NetScreen WebUI of Juniper Networks allows a user with the 'security' role to inject HTML/JavaScript content into the management session of other users, including the administrator.
A reflected cross site scripting vulnerability in the NetScreen WebUI of Juniper Networks Juniper NetScreen Firewall+VPN allows an attacker to inject HTML/JavaScript content into the management session of other users, including the administrator.
A persistent cross site scripting vulnerability in NetScreen WebUI of Juniper Networks allows a user with the 'security' role to inject HTML/JavaScript content into the management session of other users, including the administrator.
Receipt of a malformed BGP OPEN message may cause the routing protocol daemon (rpd) process to crash and restart. An attacker can repeatedly crash the rpd process, causing prolonged denial of service.
CVE-2017-2272 describes an untrusted search path vulnerability in self-extracting encrypted files created by AttacheCase version 3.2.2.6 and earlier. This allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVE-2017-2271 describes an untrusted search path vulnerability in self-extracting encrypted files created by AttacheCase version 2.8.3.0 and earlier. This allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVE-2017-2270 describes an untrusted search path vulnerability in encrypted files in self-decryption format created by FileCapsule Deluxe Portable version 2.0.9 and earlier. This allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
The vulnerability in FileCapsule Deluxe Portable version 2.0.9 and earlier allows an attacker to gain privileges via a malicious DLL in an unspecified directory.
The vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable version 1.0.5.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVE-2017-2267 describes an untrusted search path vulnerability in FileCapsule Deluxe Portable version 1.0.5.1 and earlier, allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVE-2017-2266 describes an untrusted search path vulnerability in encrypted files in self-decrypting format created by FileCapsule Deluxe Portable version 1.0.4.1 and earlier. This allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVE-2017-2265 describes an untrusted search path vulnerability in FileCapsule Deluxe Portable version 1.0.4.1 and earlier, allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVE-2017-2253 describes an untrusted search path vulnerability in the installer of Yahoo! Toolbar (for Internet Explorer) version 8.0.0.6 and earlier, with a timestamp prior to June 13, 2017. This allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.