broadcom Vulnerability Advisory Catalog

Total 576 security vulnerabilities recorded for broadcom software and firmware.

← Back to All Vendors
Component: tcpreplay

get_l2len in common/get.c in Tcpreplay 4.3.0 beta1 allows remote attackers to cause a denial of service (heap-based buffer over-read and application c...

📅 2018-07-03
CVSS 7.5 Dossier →
CVE-2018-9029 CRITICAL
Component: privileged_access_manager

An improper input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to conduct SQL injection attacks....

📅 2018-06-18
CVSS 9.8 Dossier →
Component: privileged_access_manager

Weak cryptography used for passwords in CA Privileged Access Manager 2.x reduces the complexity for password cracking....

📅 2018-06-18
CVSS 7.5 Dossier →
Component: privileged_access_manager

A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions with a specially crafted request....

📅 2018-06-18
CVSS 7.5 Dossier →
Component: privileged_access_manager

An input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to poison log files with specially crafted input....

📅 2018-06-18
CVSS 7.5 Dossier →
CVE-2018-9024 MEDIUM
Component: privileged_access_manager

An improper authentication vulnerability in CA Privileged Access Manager 2.x allows attackers to spoof IP addresses in a log file....

📅 2018-06-18
CVSS 5.3 Dossier →
Component: privileged_access_manager

An input validation vulnerability in CA Privileged Access Manager 2.x allows unprivileged users to execute arbitrary commands by passing specially cra...

📅 2018-06-18
CVSS 8.8 Dossier →
CVE-2018-9022 CRITICAL
Component: privileged_access_manager

An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary code or commands...

📅 2018-06-18
CVSS 9.8 Dossier →
CVE-2018-9021 CRITICAL
Component: privileged_access_manager

An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary commands with sp...

📅 2018-06-18
CVSS 9.8 Dossier →
CVE-2015-4664 CRITICAL
Component: privileged_access_manager

An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers to execute arbitrary commands....

📅 2018-06-18
CVSS 9.8 Dossier →
CVE-2018-5241 CRITICAL
Component: advanced_secure_gateway

Symantec Advanced Secure Gateway (ASG) 6.6 and 6.7, and ProxySG 6.5, 6.6, and 6.7 are susceptible to a SAML authentication bypass vulnerability. The p...

📅 2018-05-29
CVSS 9.8 Dossier →
Component: symantec_intelligencecenter

Symantec IntelligenceCenter 3.3 is vulnerable to the Return of the Bleichenbacher Oracle Threat (ROBOT) attack. A remote attacker, who has captured a ...

📅 2018-05-17
CVSS 5.9 Dossier →
Component: ssl_visibility_appliance

Symantec SSL Visibility (SSLV) 3.8.4FC, 3.10 prior to 3.10.4.1, 3.11, and 3.12 prior to 3.12.2.1 are vulnerable to the Return of the Bleichenbacher Or...

📅 2018-05-17
CVSS 5.9 Dossier →
Component: spring_data_commons

Spring Data Commons, versions 1.13 prior to 1.13.12 and 2.0 prior to 2.0.7, used in combination with XMLBeam 1.4.14 or earlier versions, contains a pr...

📅 2018-05-11
CVSS 7.5 Dossier →
Component: spring_data_commons

Spring Data Commons, versions 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property path parser vulnerability caused by un...

📅 2018-04-18
CVSS 7.5 Dossier →
Component: advanced_secure_gateway

Stored XSS vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A malicious appliance administrator can inject...

📅 2018-04-11
CVSS 4.8 Dossier →
Component: advanced_secure_gateway

Denial-of-service (DoS) vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A remote attacker can use crafted...

📅 2018-04-11
CVSS 7.5 Dossier →
Component: advanced_secure_gateway

Unrestricted file upload vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A malicious appliance administra...

📅 2018-04-11
CVSS 6.8 Dossier →
CVE-2018-1273 CRITICAL
Component: spring_data_commons

Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused b...

📅 2018-04-11
CVSS 9.8 Dossier →
CVE-2017-6227 MEDIUM
Component: fabric_operating_system

A vulnerability in the IPv6 stack on Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) versions before 7.4.2b, 8.1.2 and 8.2.0 could ...

📅 2018-02-08
CVSS 6.5 Dossier →
CVE-2017-6225 MEDIUM
Component: fabric_operating_system

Cross-site scripting (XSS) vulnerability in the web-based management interface of Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) v...

📅 2018-02-08
CVSS 6.1 Dossier →
Component: advanced_secure_gateway

The Symantec Advanced Secure Gateway (ASG) 6.6, ASG 6.7 (prior to 6.7.2.1), ProxySG 6.5 (prior to 6.5.10.6), ProxySG 6.6, and ProxySG 6.7 (prior to 6....

📅 2018-01-10
CVSS 6.1 Dossier →
Component: symantec_proxysg

The Symantec ProxySG 6.5 (prior to 6.5.10.6), 6.6, and 6.7 (prior to 6.7.2.1) management console is susceptible to a reflected XSS vulnerability. A re...

📅 2018-01-10
CVSS 6.1 Dossier →
Component: bcm4355c0_firmware

On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56, an attacker can trigger an information leak due to insufficient length validation, related to ICM...

📅 2017-10-04
CVSS 7.5 Dossier →
Page 16 of 24 (576 Total Records)