JSA10999 – 2020-04 Security Bulletin: JATP Series: JATP Is susceptible to slow brute force attacks on the SSH service. (CVE-2020-1616)
More info:
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10999&actp=RSS
JSA10998 – 2020-04 Security Bulletin: Junos OS: vMX: Default credentials supplied in vMX configuration (CVE-2020-1615)
More info:
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10998&actp=RSS
JSA10996 – 2020-04 Security Bulletin: Junos OS: BGP session termination upon receipt of specific BGP FlowSpec advertisement. (CVE-2020-1613)
More info:
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10996&actp=RSS
JSA11014 – 2020-04 Security Bulletin: Junos OS: High-End SRX Series: Multicast traffic might cause all FPCs to reset. (CVE-2020-1634)
More info:
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA11014&actp=RSS
JSA10994 – 2020-04 Security Bulletin: Junos OS: SRX Branch Series and vSRX Series: Multiple vulnerabilities in ISC BIND named.
More info:
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10994&actp=RSS
ICU vulnerability CVE-2020-10531
ICU vulnerability CVE-2020-10531 Security Advisory Security Advisory Description An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, ...
More info:
https://support.f5.com/csp/article/K51197241?utm_source=f5support&utm_medium=RSS
JSA11000 – 2020-04 Security Bulletin: Junos OS: non-AFT architectures: A specific genuine packet inspected by sFlow will cause a reboot. A second packet received and inspected by sFlow will cause a co
More info:
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA11000&actp=RSS
JSA11000 – 2020-04 Security Bulletin: Junos OS: non-AFT architectures: A specific genuine packet inspected by sFlow will cause a reboot. A second packet received and inspected by sFlow will cause a co
More info:
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA11000&actp=RSS
Critical Vulnerabilities in the WP Lead Plus X WordPress Plugin
On March 3, 2020, our Threat intelligence team discovered a number of vulnerabilities in WP Lead Plus X, a WordPress plugin with over 70,000 installations designed to allow site owners to create landing and squeeze pages on their sites. These vulnerabilities allowed an authenticated attacker with minimal permissions, such as a subscriber, to create or […]
More info:
https://www.wordfence.com/blog/2020/04/critical-vulnerabilities-in-the-wp-lead-plus-x-wordpress-plugin/
Critical Vulnerabilities in the WP Lead Plus X WordPress Plugin
On March 3, 2020, our Threat intelligence team discovered a number of vulnerabilities in WP Lead Plus X, a WordPress plugin with over 70,000 installations designed to allow site owners to create landing and squeeze pages on their sites. These vulnerabilities allowed an authenticated attacker with minimal permissions, such as a subscriber, to create or […]
More info:
https://www.wordfence.com/blog/2020/04/critical-vulnerabilities-in-the-wp-lead-plus-x-wordpress-plugin/