broadcom Vulnerability Advisory Catalog

Total 576 security vulnerabilities recorded for broadcom software and firmware.

← Back to All Vendors
CVE-2025-9386 MEDIUM
Component: tcpreplay

A vulnerability has been found in appneta tcpreplay up to 4.5.1. The impacted element is the function get_l2len_protocol of the file get.c of the comp...

๐Ÿ“… 2025-08-24
CVSS 5.3 Dossier →
CVE-2025-9385 MEDIUM
Component: tcpreplay

A flaw has been found in appneta tcpreplay up to 4.5.1. The affected element is the function fix_ipv6_checksums of the file edit_packet.c of the compo...

๐Ÿ“… 2025-08-24
CVSS 5.3 Dossier →
Component: tcpreplay

A vulnerability was detected in appneta tcpreplay up to 4.5.1. Impacted is the function tcpedit_post_args of the file /src/tcpedit/parse_args.c. The m...

๐Ÿ“… 2025-08-24
CVSS 3.3 Dossier →
Component: tcpreplay

A vulnerability has been found in tcpreplay 4.5.1. This vulnerability affects the function mask_cidr6 of the file cidr.c of the component tcpprep. The...

๐Ÿ“… 2025-08-15
CVSS 3.1 Dossier →
CVE-2025-8661 MEDIUM
Component: symantec_pgp_encryption

A stored Cross-Site Scripting vulnerability (XSS) occurs when the server does not properly validate or encode the data entered by the user....

๐Ÿ“… 2025-08-11
CVSS 6.1 Dossier →
CVE-2025-8660 CRITICAL
Component: symantec_pgp_encryption

Privilege escalation occurs when a user gets access to more resources or functionality than they are normally allowed....

๐Ÿ“… 2025-08-11
CVSS 9.8 Dossier →
CVE-2025-7398 CRITICAL
Component: brocade_active_support_connectivity_gateway

Brocade ASCG before 3.3.0 allows for the use of medium strength cryptography algorithms on internal ports ports 9000 and 8036....

๐Ÿ“… 2025-07-17
CVSS 9.1 Dossier →
CVE-2025-6391 CRITICAL
Component: brocade_active_support_connectivity_gateway

Brocade ASCG before 3.3.0 logs JSON Web Tokens (JWT) in log files. An attacker with access to the log files can withdraw the unencrypted tokens wit...

๐Ÿ“… 2025-07-17
CVSS 9.1 Dossier →
CVE-2025-6392 MEDIUM
Component: brocade_sannav

Brocade SANnav before Brocade SANnav 2.4.0a could log database passwords in clear text in audit logs when the daily data dump collector invokes docker...

๐Ÿ“… 2025-07-10
CVSS 4.4 Dossier →
CVE-2025-6390 MEDIUM
Component: brocade_sannav

Brocade SANnav before SANnav 2.4.0a logs passwords and pbe keys in the Brocade SANnav server audit logs after installation and under specific conditio...

๐Ÿ“… 2025-07-10
CVSS 4.4 Dossier →
CVE-2025-4662 MEDIUM
Component: brocade_sannav

Brocade SANnav before SANnav 2.4.0a logs plaintext passphrases in the Brocade SANnav host server audit logs while executing OpenSSL command using a pa...

๐Ÿ“… 2025-07-10
CVSS 4.4 Dossier →
CVE-2025-4663 MEDIUM
Component: fabric_operating_system

An Improper Check for Unusual or Exceptional Conditions vulnerability in Brocade Fabric OS before 9.2.2.a could allow an authenticated, network-base...

๐Ÿ“… 2025-07-08
CVSS 4.9 Dossier →
Component: rabbitmq_server

RabbitMQ is a messaging and streaming broker. In versions 3.13.7 and prior, RabbitMQ is logging authorization headers in plaintext encoded in base64. ...

๐Ÿ“… 2025-06-19
CVSS 5.5 Dossier →
Component: fabric_operating_system

A path transversal vulnerability in Brocade Fabric OS 9.1.0 through 9.2.2 could allow a local admin user to gain access to files outside the intende...

๐Ÿ“… 2025-06-19
CVSS 2.3 Dossier →
Component: vmware_nsx

VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the router port due to improper input validation....

๐Ÿ“… 2025-06-04
CVSS 5.9 Dossier →
Component: vmware_nsx

VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the gateway firewall due to improper input validation....

๐Ÿ“… 2025-06-04
CVSS 6.9 Dossier →
Component: vmware_nsx

VMware NSX Manager UI is vulnerable to a stored Cross-Site Scripting (XSS) attack due to improper input validation....

๐Ÿ“… 2025-06-04
CVSS 7.5 Dossier →
Component: tcpreplay

tcpreplay v4.4.4 was discovered to contain an infinite loop via the tcprewrite function at get.c....

๐Ÿ“… 2025-05-29
CVSS 7.5 Dossier →
Component: bitnami

The bitnami/pgpoolย Docker image, and the bitnami/postgres-haย k8s chart, under default configurations, comes with an 'repmgr' user that allows unauthen...

๐Ÿ“… 2025-05-13
CVSS 7.5 Dossier →
CVE-2025-3599 MEDIUM
Component: symantec_eraser_engine

Symantec Endpoint Protection Windows Agent, running an ERASER Engine prior to 119.1.7.8, may be susceptible to an Elevation of Privilege vulnerability...

๐Ÿ“… 2025-04-30
CVSS 6.5 Dossier →
CVE-2025-1976 MEDIUM
Component: fabric_operating_system

Brocade Fabric OS versions starting with 9.1.0 have root access removed, however, a local user with admin privilege can potentially execute arbitrary ...

๐Ÿ“… 2025-04-24
CVSS 6.7 Dossier →
CVE-2024-1509 CRITICAL
Component: brocade_active_support_connectivity_gateway

Brocade ASCG before 3.2.0 Web Interface is not enforcing HSTS, as defined by RFC 6797. HSTS is an optional response header that can be configured o...

๐Ÿ“… 2025-02-28
CVSS 9.1 Dossier →
Component: fabric_operating_system

If Brocade Fabric OS before Fabric OS 9.2.0 configuration settings are not set to encrypt SNMP passwords, then the SNMP privsecret / authsecret fields...

๐Ÿ“… 2025-02-15
CVSS 7.5 Dossier →
Component: fabric_operating_system

Implementation of the Simple Network Management Protocol (SNMP) operating on the Brocade 6547 (FC5022) embedded switch blade, makes internal script ...

๐Ÿ“… 2025-02-15
CVSS 8.0 Dossier →
Page 3 of 24 (576 Total Records)