broadcom Vulnerability Advisory Catalog

Total 576 security vulnerabilities recorded for broadcom software and firmware.

← Back to All Vendors
Component: fabric_operating_system

An information disclosure vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, 7.4.2.j could allow a loc...

📅 2022-10-25
CVSS 5.5 Dossier →
Component: fabric_operating_system

A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5 could allow a local authenticated attacker to expo...

📅 2022-10-25
CVSS 5.5 Dossier →
Component: fabric_operating_system

A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, and 7.4.2j could allow a local authenticated user to break o...

📅 2022-10-25
CVSS 8.8 Dossier →
Component: fabric_operating_system

A vulnerability in the radius authentication system of Brocade Fabric OS before Brocade Fabric OS 9.0 could allow a remote attacker to execute arbitra...

📅 2022-10-25
CVSS 7.2 Dossier →
Component: fabric_operating_system

Brocade Fabric OS Web Application services before Brocade Fabric v9.1.0, v9.0.1e, v8.2.3c, v7.4.2j store server and user passwords in the debug statem...

📅 2022-10-25
CVSS 6.5 Dossier →
Component: fabric_operating_system

Brocade Webtools in Brocade Fabric OS versions before Brocade Fabric OS versions v9.1.1, v9.0.1e, and v8.2.3c could allow a low privilege webtools, us...

📅 2022-10-25
CVSS 8.8 Dossier →
Component: rabbitmq_server

RabbitMQ is a multi-protocol messaging and streaming broker. In affected versions the shovel and federation plugins perform URI obfuscation in their w...

📅 2022-10-06
CVSS 5.5 Dossier →
Component: symantec_privileged_access_management

A malicious unauthorized PAM user can access the administration configuration data and change the values....

📅 2022-08-26
CVSS 8.8 Dossier →
Component: tcpreplay

The component tcpprep in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in parse_mpls at common/get.c:150. NOTE: this is diff...

📅 2022-08-18
CVSS 7.8 Dossier →
Component: tcpreplay

The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in get_l2len_protocol at common/get.c:344. NOTE: t...

📅 2022-08-18
CVSS 7.8 Dossier →
Component: tcpreplay

The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in get_ipv6_next at common/get.c:713. NOTE: this i...

📅 2022-08-18
CVSS 7.8 Dossier →
Component: fabric_operating_system

A vulnerability in Brocade Fabric OS versions 7.4.1b and 7.3.1d could allow local users to conduct privileged directory transversal. Brocade Fabric OS...

📅 2022-08-05
CVSS 5.5 Dossier →
CVE-2021-46825 CRITICAL
Component: advanced_secure_gateway

Symantec Advanced Secure Gateway (ASG) and ProxySG are susceptible to an HTTP desync vulnerability. When a remote unauthenticated attacker and other w...

📅 2022-07-07
CVSS 9.1 Dossier →
Component: sannav

In Brocade SANnav before Brocade SANnav v2.2.0.2 and Brocade SANnav2.1.1.8, encoded scp-server passwords are stored using Base64 encoding, which could...

📅 2022-06-27
CVSS 7.5 Dossier →
Component: sannav

Brocade SANnav before Brocade SANvav v. 2.2.0.2 and Brocade SANanv v.2.1.1.8 logs the Brocade Fabric OS switch password in plain text in asyncjobsched...

📅 2022-06-27
CVSS 6.5 Dossier →
Component: sannav

In Brocade SANnav version before SANN2.2.0.2 and Brocade SANNav before 2.1.1.8, the implementation of TLS/SSL Server Supports the Use of Static Key Ci...

📅 2022-06-27
CVSS 7.5 Dossier →
Component: symantec_messaging_gateway

A malicious authenticated SMG administrator user can obtain passwords for external LDAP/Active Directory servers that they might not otherwise be auth...

📅 2022-06-24
CVSS 4.9 Dossier →
Component: ca_automic_automation

CA Automic Automation 12.2 and 12.3 contain an entropy weakness vulnerability in the Automic AutomationEngine that could allow a remote attacker to po...

📅 2022-06-16
CVSS 7.5 Dossier →
Component: ca_automic_automation

CA Automic Automation 12.2 and 12.3 contain an insecure input handling vulnerability in the Automic Agent that could allow a remote attacker to potent...

📅 2022-06-16
CVSS 5.3 Dossier →
CVE-2022-33754 CRITICAL
Component: ca_automic_automation

CA Automic Automation 12.2 and 12.3 contain an insufficient input validation vulnerability in the Automic agent that could allow a remote attacker to ...

📅 2022-06-16
CVSS 9.8 Dossier →
Component: ca_automic_automation

CA Automic Automation 12.2 and 12.3 contain an insecure file creation and handling vulnerability in the Automic agent that could allow a user to poten...

📅 2022-06-16
CVSS 8.8 Dossier →
CVE-2022-33752 CRITICAL
Component: ca_automic_automation

CA Automic Automation 12.2 and 12.3 contain an insufficient input validation vulnerability in the Automic agent that could allow a remote attacker to ...

📅 2022-06-16
CVSS 9.8 Dossier →
Component: ca_automic_automation

CA Automic Automation 12.2 and 12.3 contain an insecure memory handling vulnerability in the Automic agent that could allow a remote attacker to poten...

📅 2022-06-16
CVSS 7.5 Dossier →
CVE-2022-33750 CRITICAL
Component: ca_automic_automation

CA Automic Automation 12.2 and 12.3 contain an authentication error vulnerability in the Automic agent that could allow a remote attacker to potential...

📅 2022-06-16
CVSS 9.8 Dossier →
Page 9 of 24 (576 Total Records)