broadcom Vulnerability Advisory Catalog

Total 576 security vulnerabilities recorded for broadcom software and firmware.

← Back to All Vendors
Component: tcpreplay

Tcpreplay before 4.3.1 has a heap-based buffer over-read in packet2tree in tree.c....

📅 2018-12-28
CVSS 7.8 Dossier →
CVE-2018-6440 CRITICAL
Component: fabric_operating_system

A vulnerability in the proxy service of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow remote unauthenticated attackers t...

📅 2018-12-03
CVSS 9.1 Dossier →
Component: fabric_operating_system

A Vulnerability in the configdownload command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could al...

📅 2018-12-03
CVSS 7.8 Dossier →
Component: fabric_operating_system

A Vulnerability in the supportsave command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow...

📅 2018-11-08
CVSS 7.8 Dossier →
Component: fabric_operating_system

A Vulnerability in the help command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a loca...

📅 2018-11-08
CVSS 7.8 Dossier →
Component: fabric_operating_system

A Vulnerability in the firmwaredownload command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could ...

📅 2018-11-08
CVSS 7.8 Dossier →
Component: fabric_operating_system

A vulnerability in the Brocade Webtools firmware update section of Brocade Fabric OS before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow remote authentic...

📅 2018-11-08
CVSS 8.8 Dossier →
Component: fabric_operating_system

A vulnerability in Secure Shell implementation of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to prov...

📅 2018-11-08
CVSS 7.8 Dossier →
Component: fabric_operating_system

A Vulnerability in the secryptocfg command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow...

📅 2018-11-08
CVSS 7.8 Dossier →
Component: fabric_operating_system

A vulnerability in the web management interface of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow attackers to intercept ...

📅 2018-11-08
CVSS 7.5 Dossier →
CVE-2018-6433 MEDIUM
Component: fabric_operating_system

A vulnerability in the secryptocfg export command of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to b...

📅 2018-11-08
CVSS 5.5 Dossier →
Component: ca_identity_governance

CA Technologies Identity Governance 12.6, 14.0, 14.1, and 14.2 and CA Identity Suite Virtual Appliance 14.0, 14.1, and 14.2 provide telling error mess...

📅 2018-10-17
CVSS 5.3 Dossier →
CVE-2018-18408 CRITICAL
Component: tcpreplay

A use-after-free was discovered in the tcpbridge binary of Tcpreplay 4.3.0 beta1. The issue gets triggered in the function post_args() at tcpbridge.c,...

📅 2018-10-17
CVSS 9.8 Dossier →
Component: tcpreplay

A heap-based buffer over-read was discovered in the tcpreplay-edit binary of Tcpreplay 4.3.0 beta1, during the incremental checksum operation. The iss...

📅 2018-10-17
CVSS 5.5 Dossier →
Component: tcpreplay

An issue was discovered in Tcpreplay 4.3.0 beta1. A heap-based buffer over-read was triggered in the function dlt_en10mb_encode() of the file plugins/...

📅 2018-10-03
CVSS 5.5 Dossier →
Component: tcpreplay

Tcpreplay v4.3.0 beta1 contains a heap-based buffer over-read. The get_next_packet() function in the send_packets.c file uses the memcpy() function un...

📅 2018-09-28
CVSS 7.1 Dossier →
Component: tcpreplay

A heap-based buffer over-read exists in the function fast_edit_packet() in the file send_packets.c of Tcpreplay v4.3.0 beta1. This can lead to Denial ...

📅 2018-09-28
CVSS 7.1 Dossier →
CVE-2018-15691 CRITICAL
Component: release_automation

Insecure deserialization of a specially crafted serialized object, in CA Release Automation 6.5 and earlier, allows attackers to potentially execute a...

📅 2018-08-30
CVSS 9.8 Dossier →
CVE-2018-13826 CRITICAL
Component: project_portfolio_management

An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allow...

📅 2018-08-30
CVSS 9.1 Dossier →
Component: project_portfolio_management

Insufficient input validation in the gridExcelExport functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, ...

📅 2018-08-30
CVSS 6.1 Dossier →
CVE-2018-13824 CRITICAL
Component: project_portfolio_management

Insufficient input sanitization of two parameters in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote atta...

📅 2018-08-30
CVSS 9.8 Dossier →
Component: project_portfolio_management

An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allow...

📅 2018-08-30
CVSS 7.5 Dossier →
Component: project_portfolio_management

Unprotected storage of credentials in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows attackers to access sensit...

📅 2018-08-30
CVSS 7.5 Dossier →
CVE-2018-6590 MEDIUM
Component: ca_api_developer_portal

CA API Developer Portal 4.x, prior to v4.2.5.3 and v4.2.7.1, has an unspecified reflected cross-site scripting vulnerability....

📅 2018-08-03
CVSS 6.1 Dossier →
Page 15 of 24 (576 Total Records)