broadcom Vulnerability Advisory Catalog

Total 576 security vulnerabilities recorded for broadcom software and firmware.

← Back to All Vendors
CVE-2024-23613 CRITICAL
Component: symantec_deployment_solutions

A buffer overflow vulnerability exists in Symantec Deployment Solution version 7.9 when parsing UpdateComputer tokens. A remote, anonymous attacker ca...

๐Ÿ“… 2024-01-26
CVSS 10.0 Dossier →
CVE-2023-4256 MEDIUM
Component: tcpreplay

Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the tcpedit_dlt_cleanup() function within plugins/dlt_plugins.c. Thi...

๐Ÿ“… 2023-12-21
CVSS 5.5 Dossier →
Component: fabric_operating_system

Brocade Fabric OS (FOS) hardware platforms running any version of Brocade Fabric OS software, which supports the license string format; contain cryp...

๐Ÿ“… 2023-12-06
CVSS 6.4 Dossier →
Component: clarity

Jaspersoft Clarity PPM version 14.3.0.298 was discovered to contain an arbitrary file upload vulnerability via the Profile Picture Upload function....

๐Ÿ“… 2023-11-09
CVSS 5.4 Dossier →
Component: lsi_pci-sv92ex_firmware

An issue was discovered in Broadcom) LSI PCI-SV92EX Soft Modem Kernel Driver through 2.2.100.1 (aka AGRSM64.sys). There is Local Privilege Escalation ...

๐Ÿ“… 2023-10-10
CVSS 7.8 Dossier →
CVE-2023-4163 MEDIUM
Component: fabric_operating_system

In Brocade Fabric OS before v9.2.0a, a local authenticated privileged user can trigger a buffer overflow condition, leading to a kernel panic with ...

๐Ÿ“… 2023-08-31
CVSS 4.4 Dossier →
CVE-2023-4162 MEDIUM
Component: fabric_operating_system

A segmentation fault can occur in Brocade Fabric OS after Brocade Fabric OS v9.0 and before Brocade Fabric OS v9.2.0a through the passwdcfg command...

๐Ÿ“… 2023-08-31
CVSS 4.4 Dossier →
Component: brocade_sannav

Brocade SANnav before v2.3.0 and v2.2.2a stores SNMPv3 Authentication passwords in plaintext. A privileged user could retrieve these credentials wit...

๐Ÿ“… 2023-08-31
CVSS 5.4 Dossier →
Component: brocade_sannav

Brocade SANnav Web interface before Brocade SANnav v2.3.0 and v2.2.2a allows remote unauthenticated users to bypass web authentication and authoriza...

๐Ÿ“… 2023-08-31
CVSS 8.1 Dossier →
Component: brocade_sannav

Possible information exposure through log file vulnerability where sensitive fields are recorded in the configuration log without masking on Brocade...

๐Ÿ“… 2023-08-31
CVSS 5.7 Dossier →
Component: fabric_operating_system

The firmwaredownload command on Brocade Fabric OS v9.2.0 could log the FTP/SFTP/SCP server password in clear text in the SupportSave file when perf...

๐Ÿ“… 2023-08-31
CVSS 8.6 Dossier →
CVE-2023-4344 CRITICAL
Component: raid_controller_web_interface

Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection...

๐Ÿ“… 2023-08-15
CVSS 9.8 Dossier →
Component: raid_controller_web_interface

Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameter...

๐Ÿ“… 2023-08-15
CVSS 7.5 Dossier →
CVE-2023-4342 CRITICAL
Component: raid_controller_web_interface

Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security policy...

๐Ÿ“… 2023-08-15
CVSS 9.8 Dossier →
CVE-2023-4341 CRITICAL
Component: raid_controller_web_interface

Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI...

๐Ÿ“… 2023-08-15
CVSS 9.8 Dossier →
CVE-2023-4340 CRITICAL
Component: raid_controller_web_interface

Broadcom RAID Controller is vulnerable to Privilege escalation by taking advantage of the Session prints in the log file...

๐Ÿ“… 2023-08-15
CVSS 9.8 Dossier →
Component: raid_controller_web_interface

Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions...

๐Ÿ“… 2023-08-15
CVSS 7.5 Dossier →
CVE-2023-4338 CRITICAL
Component: raid_controller_web_interface

Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not provide X-Content-Type-Options Header...

๐Ÿ“… 2023-08-15
CVSS 9.8 Dossier →
CVE-2023-4337 CRITICAL
Component: raid_controller_web_interface

Broadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation...

๐Ÿ“… 2023-08-15
CVSS 9.8 Dossier →
CVE-2023-4336 CRITICAL
Component: raid_controller_web_interface

Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribu...

๐Ÿ“… 2023-08-15
CVSS 9.8 Dossier →
Component: raid_controller_web_interface

Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux...

๐Ÿ“… 2023-08-15
CVSS 7.5 Dossier →
Component: raid_controller_web_interface

Broadcom RAID Controller Web server (nginx) is serving private files without any authentication...

๐Ÿ“… 2023-08-15
CVSS 7.5 Dossier →
CVE-2023-4333 MEDIUM
Component: raid_controller_web_interface

Broadcom RAID Controller web interface doesnโ€™t enforce SSL cipher ordering by server...

๐Ÿ“… 2023-08-15
CVSS 5.5 Dossier →
Component: raid_controller_web_interface

Broadcom RAID Controller web interface is vulnerable due to Improper permissions on the log file...

๐Ÿ“… 2023-08-15
CVSS 7.5 Dossier →
Page 6 of 24 (576 Total Records)