Browse CVEs

HIGH 7.8 CVE-2024-3024 A vulnerability was found in appneta tcpreplay up to 4.4.4. It has been classified as problematic. This affects the function get_layer4_v6 of the fil… Tcpreplay 4.4.4+ Fix from $1,9502024-03-28 HIGH 8.8 CVE-2024-23617 A buffer overflow vulnerability exists in Symantec Data Loss Prevention version 14.0.2 and before. A remote, unauthenticated attacker can exploit thi… Symantec Data Center Security Server after 14.0.2 Fix from $1,9502024-01-26 CRITICAL 9.8 CVE-2024-23613 A buffer overflow vulnerability exists in Symantec Deployment Solution version 7.9 when parsing UpdateComputer tokens. A remote, anonymous attacker c… Symantec Deployment Solutions Mitigation only Fix from $2,3002024-01-26 CRITICAL 9.8 CVE-2024-23614 A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 9.5 and before. A remote, anonymous attacker can exploit this vulnerabi… Symantec Messaging Gateway after 9.5 Fix from $2,3002024-01-26 CRITICAL 9.8 CVE-2024-23615 A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 10.5 and before. A remote, anonymous attacker can exploit this vulnerab… Symantec Messaging Gateway after 10.5 Fix from $2,3002024-01-26 CRITICAL 9.8 CVE-2024-23616 A buffer overflow vulnerability exists in Symantec Server Management Suite version 7.9 and before. A remote, anonymous attacker can exploit this vuln… Symantec Server Management Suite after 7.9 Fix from $2,3002024-01-26 HIGH 8.1 CVE-2021-27795 Brocade Fabric OS (FOS) hardware platforms running any version of Brocade Fabric OS software, which supports the license string format; contain cry… Fabric Operating System Mitigation only Fix from $1,9502023-12-06 MEDIUM 5.4 CVE-2023-37790 Jaspersoft Clarity PPM version 14.3.0.298 was discovered to contain an arbitrary file upload vulnerability via the Profile Picture Upload function. Clarity No fix yet Fix from $1,6002023-11-09 HIGH 7.8 CVE-2023-31096 An issue was discovered in Broadcom) LSI PCI-SV92EX Soft Modem Kernel Driver through 2.2.100.1 (aka AGRSM64.sys). There is Local Privilege Escalation… Lsi Pci Sv92ex Firmware after 2.2.100.1 Fix from $1,9502023-10-10 CRITICAL 9.8 CVE-2023-31424 Brocade SANnav Web interface before Brocade SANnav v2.3.0 and v2.2.2a allows remote unauthenticated users to bypass web authentication and authoriz… Brocade Sannav 2.2.2a+ Fix from $2,3002023-08-31 MEDIUM 6.5 CVE-2023-31925 Brocade SANnav before v2.3.0 and v2.2.2a stores SNMPv3 Authentication passwords in plaintext. A privileged user could retrieve these credentials wi… Brocade Sannav 2.2.2a+ Fix from $1,6002023-08-31 MEDIUM 5.5 CVE-2023-31423 Possible information exposure through log file vulnerability where sensitive fields are recorded in the configuration log without masking on Brocad… Brocade Sannav 2.2.2a+ Fix from $1,6002023-08-31 HIGH 7.5 CVE-2023-3489 The firmwaredownload command on Brocade Fabric OS v9.2.0 could log the FTP/SFTP/SCP server password in clear text in the SupportSave file when per… Fabric Operating System Mitigation only Fix from $1,9502023-08-31 CRITICAL 9.8 CVE-2023-4329 Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with Same… Raid Controller Web Interface Mitigation only Fix from $2,3002023-08-15 CRITICAL 9.8 CVE-2023-4336 Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attrib… Raid Controller Web Interface Mitigation only Fix from $2,3002023-08-15 CRITICAL 9.8 CVE-2023-4337 Broadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation Raid Controller Web Interface No fix yet Fix from $2,3002023-08-15 CRITICAL 9.8 CVE-2023-4338 Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not provide X-Content-Type-Options Heade… Raid Controller Web Interface Mitigation only Fix from $2,3002023-08-15 CRITICAL 9.8 CVE-2023-4340 Broadcom RAID Controller is vulnerable to Privilege escalation by taking advantage of the Session prints in the log file Raid Controller Web Interface No fix yet Fix from $2,3002023-08-15 CRITICAL 9.8 CVE-2023-4341 Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI Raid Controller Web Interface Mitigation only Fix from $2,3002023-08-15 CRITICAL 9.8 CVE-2023-4342 Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security policy Raid Controller Web Interface No fix yet Fix from $2,3002023-08-15 CRITICAL 9.8 CVE-2023-4344 Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection Raid Controller Web Interface Mitigation only Fix from $2,3002023-08-15 HIGH 7.5 CVE-2023-4331 Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols Raid Controller Web Interface Mitigation only Fix from $1,9502023-08-15 HIGH 7.5 CVE-2023-4332 Broadcom RAID Controller web interface is vulnerable due to Improper permissions on the log file Raid Controller Web Interface Mitigation only Fix from $1,9502023-08-15 HIGH 7.5 CVE-2023-4334 Broadcom RAID Controller Web server (nginx) is serving private files without any authentication Raid Controller Web Interface Mitigation only Fix from $1,9502023-08-15 HIGH 7.5 CVE-2023-4335 Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux Raid Controller Web Interface Mitigation only Fix from $1,9502023-08-15 HIGH 7.5 CVE-2023-4339 Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions Raid Controller Web Interface Mitigation only Fix from $1,9502023-08-15 HIGH 7.5 CVE-2023-4343 Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameter Raid Controller Web Interface Mitigation only Fix from $1,9502023-08-15 MEDIUM 5.5 CVE-2023-4327 Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user … Raid Controller Web Interface Mitigation only Fix from $1,6002023-08-15 MEDIUM 5.5 CVE-2023-4328 Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user… Raid Controller Web Interface Mitigation only Fix from $1,6002023-08-15 MEDIUM 5.5 CVE-2023-4333 Broadcom RAID Controller web interface doesn’t enforce SSL cipher ordering by server Raid Controller Web Interface Mitigation only Fix from $1,6002023-08-15