broadcom Vulnerability Advisory Catalog

Total 576 security vulnerabilities recorded for broadcom software and firmware.

← Back to All Vendors
Component: sannav

Brocade SANnav before version 2.1.1 contains an Improper Authentication vulnerability that allows cleartext transmission of authentication credentials...

📅 2021-06-09
CVSS 7.5 Dossier →
Component: rabbitmq_server

RabbitMQ installers on Windows prior to version 3.8.16 do not harden plugin directory permissions, potentially allowing attackers with sufficient loca...

📅 2021-05-18
CVSS 7.8 Dossier →
Component: vmware_nsx-t_data_center

VMware NSX-T contains a privilege escalation vulnerability due to an issue with RBAC (Role based access control) role assignment. Successful exploitat...

📅 2021-04-19
CVSS 7.8 Dossier →
Component: ehealth

CA eHealth Performance Manager through 6.3.2.12 is affected by Improper Restriction of Excessive Authentication Attempts. An attacker is able to perfo...

📅 2021-03-26
CVSS 7.5 Dossier →
Component: ehealth

CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a Dynamically Linked Shared Object Library. A regular user mus...

📅 2021-03-26
CVSS 7.8 Dossier →
Component: ca_service_catalog

CA Service Catalog 17.2 and 17.3 contain a vulnerability in the default configuration of the Setup Utility that may allow a remote attacker to cause a...

📅 2021-01-05
CVSS 7.5 Dossier →
Component: fabric_operating_system

Brocade Fabric OS versions before v9.0.0 and after version v8.1.0, configured in Virtual Fabric mode contain a weakness in the ldap implementation tha...

📅 2020-12-11
CVSS 4.3 Dossier →
Component: fabric_operating_system

Brocade Fabric OS versions before v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0_CBN3, v7.4.2g contain an improper input validation weakness in the command...

📅 2020-12-11
CVSS 6.7 Dossier →
Component: symantec_messaging_gateway

An information disclosure flaw allows a malicious, authenticated, privileged web UI user to obtain a password for a remote SCP backup server that they...

📅 2020-12-10
CVSS 4.9 Dossier →
Component: symantec_messaging_gateway

A privilege escalation flaw allows a malicious, authenticated, privileged CLI user to escalate their privileges on the system and gain full control ov...

📅 2020-12-10
CVSS 7.2 Dossier →
Component: unified_infrastructure_management

CA Unified Infrastructure Management 20.1 and earlier contains a vulnerability in the robot (controller) component that allows local attackers to elev...

📅 2020-11-23
CVSS 7.8 Dossier →
CVE-2020-3993 MEDIUM
Component: vmware_nsx-t_data_center

VMware NSX-T (3.x before 3.0.2, 2.5.x before 2.5.2.2.0) contains a security vulnerability that exists in the way it allows a KVM host to download and ...

📅 2020-10-20
CVSS 5.9 Dossier →
Component: tcpreplay

An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow vulnerability in get_l2len() that can make tcpprep crash and caus...

📅 2020-10-19
CVSS 7.5 Dossier →
Component: tcpreplay

An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow vulnerability in MemcmpInterceptorCommon() that can make tcpprep ...

📅 2020-10-19
CVSS 7.5 Dossier →
CVE-2020-15374 CRITICAL
Component: fabric_operating_system

Rest API in Brocade Fabric OS v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c is vulnerable to multiple instances of reflected input....

📅 2020-09-25
CVSS 9.8 Dossier →
CVE-2020-15373 CRITICAL
Component: fabric_operating_system

Multiple buffer overflow vulnerabilities in REST API in Brocade Fabric OS versions v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c could all...

📅 2020-09-25
CVSS 9.8 Dossier →
Component: fabric_operating_system

A vulnerability in the command-line interface in Brocade Fabric OS before Brocade Fabric OS v8.2.2a1, 8.2.2c, v7.4.2g, v8.2.0_CBN3, v8.2.1e, v8.1.2k, ...

📅 2020-09-25
CVSS 5.5 Dossier →
CVE-2020-15371 CRITICAL
Component: fabric_operating_system

Brocade Fabric OS versions before Brocade Fabric OS v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0_CBN3, contains code injection and privilege escalation v...

📅 2020-09-25
CVSS 9.8 Dossier →
Component: fabric_operating_system

Brocade Fabric OS versions before Brocade Fabric OS v7.4.2g could allow an authenticated, remote attacker to view a user password in cleartext. The vu...

📅 2020-09-25
CVSS 6.5 Dossier →
Component: fabric_operating_system

Supportlink CLI in Brocade Fabric OS Versions v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c does not obfuscate the password field, which c...

📅 2020-09-25
CVSS 8.8 Dossier →
Component: brocade_sannav

A vulnerability in Brocade SANnav versions before v2.1.0 could allow a remote authenticated attacker to conduct an LDAP injection. The vulnerability c...

📅 2020-09-25
CVSS 8.8 Dossier →
CVE-2019-16211 CRITICAL
Component: brocade_sannav

Brocade SANnav versions before v2.1.0, contain a Plaintext Password Storage vulnerability....

📅 2020-09-25
CVSS 9.8 Dossier →
CVE-2018-6449 MEDIUM
Component: fabric_operating_system

Host Header Injection vulnerability in the http management interface in Brocade Fabric OS versions before v9.0.0 could allow a remote attacker to expl...

📅 2020-09-25
CVSS 6.1 Dossier →
Component: fabric_operating_system

A vulnerability in the management interface in Brocade Fabric OS Versions before Brocade Fabric OS v9.0.0 could allow a remote attacker to perform a d...

📅 2020-09-25
CVSS 7.5 Dossier →
Page 12 of 24 (576 Total Records)