Skip to contentBroadcom vulnerabilities
Products
Show 75 moreShow less
Newest
- broadcom brocade sannav, brocade sannav +1 moreThe PostgreSQL implementation in Brocade SANnav versions before 2.3.0a is vulnerable to an...CVE-2024-28607.8 High
- brocade sannav, broadcom brocade sannav +1 moreBy default, SANnav OVA is shipped with root user login enabled (CVE-2024-2859)CVE-2024-28596.8 Medium
- broadcom brocade sannav, brocade sannav +1 moreSANnav versions exposes Kafka in the wan interface.CVE-2024-41737.6 High
- broadcom brocade sannav, brocade sannav +1 moreSyslog traffic sent in clear-textCVE-2024-41618.6 High
- broadcom brocade sannav, brocade sannav +1 moreProtection mechanismsCVE-2024-41594.3 Medium
- broadcom brocade sannav, brocade sannav +1 moreTLS/SSL weak message authentication code ciphers are added by default for port 18082CVE-2024-299697.5 High
- broadcom brocade sannav, brocade sannav +1 moreSQL Table names, column names, and SQL queries are collected in DR standby SupportsaveCVE-2024-299687.7 High
- broadcom brocade sannav, brocade sannav +1 moreIn Brocade SANnav before v2.31 and v2.3.0a, it was observed that Docker instances inside the appliance have insecure mount pointsCVE-2024-299674.4 Medium
- broadcom brocade sannav, brocade sannav +1 morehard-coded credentials in the documentation that appear as the appliance root passwordCVE-2024-299667.5 High
- broadcom brocade sannav, brocade sannav +1 moreInsecure backupCVE-2024-299656.8 Medium
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker filesCVE-2024-299645.7 Medium
- broadcom brocade sannav, brocade sannav +1 moreInsecure file permission setting that makes files world-readableCVE-2024-299625.5 Medium
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav contains hardcoded TLS keys used by DockerCVE-2024-299631.9 Low
- broadcom brocade sannav, brocade sannav +1 moresupply-chain attack riskCVE-2024-299618.2 High
- broadcom brocade sannav, brocade sannav +1 moreIdentical SSH keys utilized inside the OVA image (CVE-2024-29960)CVE-2024-299606.8 Medium
- broadcom brocade sannav, brocade sannav +1 moreBrocade Fabric OS switch encrypted passwords in the Brocade SANnav Standby node's support saveCVE-2024-299598.6 High
- broadcom brocade sannav, brocade sannav +1 moreEncryption key in the console when a privileged user executes the script to replace the Brocade SANnav Management Portal standby node.CVE-2024-299587.5 High
- broadcom brocade sannav, brocade sannav +1 moreEncryption key is stored in the DR log filesCVE-2024-299577.5 High
- broadcom brocade sannav, brocade sannav +1 morecleartext password in supportsave logs when a user schedules a switch Supportsave from Brocade SANnavCVE-2024-299566.5 Medium
- broadcom brocade sannav, brocade sannav +1 moreInsertion of Sensitive Information into Brocade SANnav Log FileCVE-2024-299555.0 Medium
- broadcom brocade sannav, brocade sannav +1 moreClear text storage of sensistive information by manipulating command variablesCVE-2024-299525.5 Medium
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav has weak encryption in internal SSH portsCVE-2024-299515.7 Medium
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav before v2.3.1, v2.3.0a uses weak encryptionCVE-2024-299507.5 High
- brocade fabric os, broadcom fabric operating system +1 moreTruncated port nameCVE-2023-59734.3 Medium
- apache http server, apple macos, broadcom fabric operating system +4 more +6 moreApache HTTP Server: HTTP Response Splitting in multiple modulesCVE-2024-24795Fix available6.3 Medium
- apache http server, apple macos, broadcom fabric operating system +4 more +6 moreApache HTTP Server: HTTP response splittingCVE-2023-38709Public exploitFix available7.3 High
- brocade fabric os, broadcom brocade fabric operating system, fabric operating system +2 moreRemote code execution (RCE) vulnerability in Brocade Fabric OS after v9.0 and before v9.2.0 could...CVE-2023-34548.6 High
- appneta tcpreplayappneta tcpreplay get.c get_layer4_v6 heap-based overflowCVE-2024-3024Fix available5.3 Medium
- broadcom tcpreplay, fedoraproject fedora +1 moreNull Pointer Dereference in mask_cidr6 component at cidr.c in Tcpreplay 4.4.4 allows attackers to...CVE-2023-43279Fix available6.5 Medium
- vmware esxi, broadcom vmware cloud foundation, vmware cloud foundation +2 moreOut-of-bounds write vulnerabilityCVE-2024-222547.9 High
- broadcom data loss prevention, symantec data center security server +1 moreSymantec Data Loss Prevention Buffer OverflowCVE-2024-236179.6 Critical
- broadcom symantec server management suite, symantec server management suite +1 moreSymantec Server Management Suite Buffer OverflowCVE-2024-2361610.0 Critical
- broadcom symantec messaging gateway, symantec messaging gateway +1 moreSymantec Messaging Gateway Buffer OverflowCVE-2024-2361510.0 Critical
- broadcom symantec messaging gateway, symantec messaging gateway +1 moreSymantec Messaging Gateway Buffer OverflowCVE-2024-2361410.0 Critical
- symantec deployment solution, broadcom symantec deployment solutions +1 moreSymantec Deployment Solution Remote Code ExecutionCVE-2024-2361310.0 Critical
- broadcom tcpreplay, fedora extra packages for enterprise linux, fedora +2 moreTcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.cCVE-2023-4256Fix available5.5 Medium
- broadcom fabric operating system, brocade switches +1 moreLicense forgery in Brocade Fabric OS (FOS) hardware platforms running any version of Brocade Fabric OS software,CVE-2021-277956.4 Medium
- broadcom reactor nettyReactor Netty HTTP Server Metrics DoS VulnerabilityCVE-2023-34054Fix available5.3 Medium
- broadcom reactor netty, reactor netty netty +1 moreIn Reactor Netty HTTP Server a malicious user can send a request using a specially crafted URL that can lead to a directory traversal attackCVE-2023-34062Fix available7.5 High
- broadcom clarityJaspersoft Clarity PPM version 14.3.0.298 was discovered to contain an arbitrary file upload...CVE-2023-37790Public exploit5.4 Medium
- broadcom lsi pci-sv92ex firmwareAn issue was discovered in Broadcom) LSI PCI-SV92EX Soft Modem Kernel Driver through 2.2.100.1 ...CVE-2023-310967.8 High
- broadcom brocade sannav, brocade sannav +1 moreWeb authentication and authorization bypassCVE-2023-314248.1 High
- broadcom brocade sannav, brocade sannav +1 morePossible information exposure through log file vulnerabilityCVE-2023-314235.7 Medium
- broadcom brocade sannav, brocade sannav +1 moreStorage of clear text password in Brocade SANnavCVE-2023-319255.4 Medium
- brocade fabric os, broadcom fabric operating system +1 moreSegmentation fault in Brocade Fabric OS after Brocade Fabric OS v9.0CVE-2023-41624.4 Medium
- brocade fabric os, broadcom fabric operating system +1 morePossible buffer overflow in portcfgfportbuffers in Brocade Fabric OSCVE-2023-41634.4 Medium
- brocade fabric os, broadcom fabric operating system +1 morefirmwaredownload command could log servers passwords in clear textCVE-2023-34898.6 High
- broadcom raid controller web interface, lsi storage authority (lsa), lsi storage authority +2 more +4 moreBroadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attributeCVE-2023-43299.8 Critical
- broadcom raid controller web interface, lsi storage authority (lsa) +1 moreBroadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on LinuxCVE-2023-43285.5 Medium
- broadcom raid controller web interface, lsi storage authority (lsa) +1 moreBroadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on LinuxCVE-2023-43275.5 Medium
- Show moreLoading…