Browse CVEs

MEDIUM 6.1 CVE-2018-13825 Insufficient input validation in the gridExcelExport functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below,… Project Portfolio Management after 14.3 Fix from $1,6002018-08-30 HIGH 7.5 CVE-2018-13822 Unprotected storage of credentials in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows attackers to access sensi… Project Portfolio Management after 14.3 Fix from $1,9502018-08-30 MEDIUM 6.1 CVE-2018-6590 CA API Developer Portal 4.x, prior to v4.2.5.3 and v4.2.7.1, has an unspecified reflected cross-site scripting vulnerability. Ca Api Developer Portal 4.2.5.3+ Fix from $1,6002018-08-03 HIGH 7.5 CVE-2018-13112 get_l2len in common/get.c in Tcpreplay 4.3.0 beta1 allows remote attackers to cause a denial of service (heap-based buffer over-read and application … Tcpreplay No fix yet Fix from $1,9502018-07-03 CRITICAL 9.8 CVE-2015-4664EPSS 21% An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers to execute arbitrary commands. Privileged Access Manager after 2.4.4.4 Fix from $2,3002018-06-18 CRITICAL 9.8 CVE-2018-9021EPSS 10% An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary commands with s… Privileged Access Manager after 2.8.2 Fix from $2,3002018-06-18 CRITICAL 9.8 CVE-2018-9022EPSS 13% An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary code or command… Privileged Access Manager after 2.8.2 Fix from $2,3002018-06-18 CRITICAL 9.8 CVE-2018-9029 An improper input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to conduct SQL injection attacks. Privileged Access Manager 3.0.0+ Fix from $2,3002018-06-18 HIGH 8.8 CVE-2018-9023 An input validation vulnerability in CA Privileged Access Manager 2.x allows unprivileged users to execute arbitrary commands by passing specially cr… Privileged Access Manager 3.0.0+ Fix from $1,9502018-06-18 HIGH 7.5 CVE-2018-9025 An input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to poison log files with specially crafted input. Privileged Access Manager 3.0.0+ Fix from $1,9502018-06-18 HIGH 7.5 CVE-2018-9026 A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions with a specially crafted request. Privileged Access Manager 3.0.0+ Fix from $1,9502018-06-18 HIGH 7.5 CVE-2018-9028 Weak cryptography used for passwords in CA Privileged Access Manager 2.x reduces the complexity for password cracking. Privileged Access Manager 3.0.0+ Fix from $1,9502018-06-18 MEDIUM 5.3 CVE-2018-9024 An improper authentication vulnerability in CA Privileged Access Manager 2.x allows attackers to spoof IP addresses in a log file. Privileged Access Manager 3.0.0+ Fix from $1,6002018-06-18 CRITICAL 9.8 CVE-2018-5241 Symantec Advanced Secure Gateway (ASG) 6.6 and 6.7, and ProxySG 6.5, 6.6, and 6.7 are susceptible to a SAML authentication bypass vulnerability. The … Advanced Secure Gateway Mitigation only Fix from $2,3002018-05-29 MEDIUM 5.9 CVE-2017-15533 Symantec SSL Visibility (SSLV) 3.8.4FC, 3.10 prior to 3.10.4.1, 3.11, and 3.12 prior to 3.12.2.1 are vulnerable to the Return of the Bleichenbacher O… Ssl Visibility Appliance Mitigation only Fix from $1,6002018-05-17 MEDIUM 5.9 CVE-2017-18268 Symantec IntelligenceCenter 3.3 is vulnerable to the Return of the Bleichenbacher Oracle Threat (ROBOT) attack. A remote attacker, who has captured a… Symantec Intelligencecenter Mitigation only Fix from $1,6002018-05-17 HIGH 7.5 CVE-2017-13677EPSS 5% Denial-of-service (DoS) vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A remote attacker can use crafte… Advanced Secure Gateway 6.5.10.8 / 6.6.5.14+ Fix from $1,9502018-04-11 MEDIUM 6.8 CVE-2016-10258 Unrestricted file upload vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A malicious appliance administr… Advanced Secure Gateway 6.5.10.8 / 6.6.5.14+ Fix from $1,6002018-04-11 MEDIUM 6.5 CVE-2017-6227 A vulnerability in the IPv6 stack on Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) versions before 7.4.2b, 8.1.2 and 8.2.0 could… Fabric Operating System 7.4.2b+ Fix from $1,6002018-02-08 MEDIUM 6.1 CVE-2017-6225 Cross-site scripting (XSS) vulnerability in the web-based management interface of Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) … Fabric Operating System 7.4.2b+ Fix from $1,6002018-02-08 MEDIUM 6.1 CVE-2016-10256 The Symantec ProxySG 6.5 (prior to 6.5.10.6), 6.6, and 6.7 (prior to 6.7.2.1) management console is susceptible to a reflected XSS vulnerability. A r… Symantec Proxysg 6.5.10.6 / 6.7.2.1+ Fix from $1,6002018-01-10 MEDIUM 6.1 CVE-2016-10257 The Symantec Advanced Secure Gateway (ASG) 6.6, ASG 6.7 (prior to 6.7.2.1), ProxySG 6.5 (prior to 6.5.10.6), ProxySG 6.6, and ProxySG 6.7 (prior to 6… Advanced Secure Gateway 6.5.10.6 / 6.7.2.1+ Fix from $1,6002018-01-10 HIGH 7.5 CVE-2017-11122 On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56, an attacker can trigger an information leak due to insufficient length validation, related to IC… Bcm4355c0 Firmware after 10.3.3 Fix from $1,9502017-10-04 CRITICAL 9.8 CVE-2017-11120EPSS 9% On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, an attacker can craft a malformed RRM neighbor report frame to trigger an intern… Bcm4355c0 Firmware 11.0+ Fix from $2,3002017-09-28 CRITICAL 9.8 CVE-2017-11121 On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, properly crafted malicious over-the-air Fast Transition frames can potentially t… Bcm4355c0 Firmware 11.0+ Fix from $2,3002017-09-28 HIGH 7.8 CVE-2017-14266 tcprewrite in Tcpreplay 3.4.4 has a Heap-Based Buffer Overflow vulnerability triggered by a crafted PCAP file, a related issue to CVE-2016-6160. Tcpreplay No fix yet Fix from $1,9502017-09-12 CRITICAL 9.8 CVE-2017-9417EPSS 48% Broadcom BCM43xx Wi-Fi chips allow remote attackers to execute arbitrary code via unspecified vectors, aka the "Broadpwn" issue. Bcm43xx Wi Fi Chipset Firmware Mitigation only Fix from $2,3002017-06-04 HIGH 7.8 CVE-2016-9100 Symantec Advanced Secure Gateway (ASG) 6.6 prior to 6.6.5.13, ASG 6.7 prior to 6.7.3.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6 prior to 6.6.5.13,… Advanced Secure Gateway 6.5.10.6 / 6.6.5.13+ Fix from $1,9502017-05-11 HIGH 7.2 CVE-2016-9097 The Symantec Advanced Secure Gateway (ASG) 6.6 prior to 6.6.5.8, ProxySG 6.5 prior 6.5.10.6, ProxySG 6.6 prior to 6.6.5.8, and ProxySG 6.7 prior to 6… Advanced Secure Gateway Mitigation only Fix from $1,9502017-05-11 MEDIUM 6.1 CVE-2016-9099 Symantec Advanced Secure Gateway (ASG) 6.6, ASG 6.7 prior to 6.7.2.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6, and ProxySG 6.7 prior to 6.7.2.1 ar… Advanced Secure Gateway 6.5.10.6 / 6.7.2.1+ Fix from $1,6002017-05-11