VYPR
← Broadcom Corporation

Vendor CVEs

Broadcom Corporation

All CVEs

490 total · sorted by risk
  • CVE-2006-5143Oct 10, 2006
    Ca
    Brightstor ARCserve Backup
    risk 0.09cvss —epss 0.78

    Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve Backup for Windows r11; BrightStor Enterprise Backup 10.5; Server Protection Suite r2; and Business Protection Suite r2 allow remote attackers to execute…

  • CVE-2005-2668Aug 23, 2005
    Ca
    Message Queuing
    risk 0.09cvss —epss 0.75

    Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allow remote attackers to execute arbitrary code via unknown vectors.

  • CVE-2005-2535Aug 10, 2005
    Broadcom Corporation
    Brightstor Arcserve Backup
    risk 0.09cvss —epss 0.81

    Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to execute arbitrary commands via a large packet to TCP port 41523, a different vulnerability than CVE-2005-0260.

  • CVE-2005-0260May 2, 2005
    Ca
    Brightstor ARCserve Backup
    risk 0.09cvss —epss 0.70

    Stack-based buffer overflow in the Discovery Service for BrightStor ARCserve Backup 11.1 and earlier allows remote attackers to execute arbitrary code via a long packet to UDP port 41524, which is not properly handled in a recvfrom call.

  • CVE-2007-5082Oct 1, 2007
    Ca
    BrightStor Hierarchical Storage Manager
    risk 0.08cvss —epss 0.63

    Multiple stack-based buffer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary code via unspecified CsAgent service commands with certain opcodes, related to missing validation of a length…

  • CVE-2007-5003Oct 1, 2007
    Ca
    Arcserve Backup For Laptops And Desktops
    risk 0.08cvss —epss 0.67

    Multiple stack-based buffer overflows in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allow remote attackers to execute arbitrary code via a long (1) username or (2) password to the rxrLogin command in rxRPC.dll, or a long (3)…

  • CVE-2007-3216Jun 14, 2007
    Broadcom Corporation
    Brightstor Arcserve Backup
    risk 0.08cvss —epss 0.59

    Multiple buffer overflows in the LGServer component of CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.1 allow remote attackers to execute arbitrary code via crafted arguments to the (1) rxsAddNewUser, (2) rxsSetUserInfo, (3) rxsRenameUser, (4)…

  • CVE-2005-3190Oct 13, 2005
    Broadcom Corporation
    Igateway
    risk 0.08cvss —epss 0.66

    Buffer overflow in Computer Associates (CA) iGateway 3.0 and 4.0 before 4.0.050623, when running in debug mode, allows remote attackers to execute arbitrary code via HTTP GET requests.

  • CVE-2005-1272Aug 5, 2005
    Ca
    Brightstor ARCserve Backup
    risk 0.08cvss —epss 0.66

    Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Server 11.0 allows remote attackers to execute arbitrary code via a long string sent to port (1) 6070 or (2) 6050.

  • CVE-2004-0932Jan 27, 2005
    McAfee
    Antivirus Engine
    risk 0.08cvss —epss 0.66

    McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the…

  • CVE-2007-4620Apr 7, 2008
    Ca
    Threat Manager For The Enterprise
    risk 0.07cvss —epss 0.52

    Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products including Anti-Virus for the Enterprise 7.1 through r11.1 and Threat Manager for the Enterprise 8.1 and…

  • CVE-2007-2864Jun 6, 2007
    Ca
    Anti-Virus Engine
    risk 0.07cvss —epss 0.50

    Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a large invalid value of the coffFiles field in a .CAB file.

  • CVE-2005-0581May 2, 2005
    Ca
    License Client and Server
    risk 0.07cvss —epss 0.46

    Multiple buffer overflows in Computer Associates (CA) License Client and Server 0.1.0.15 allow remote attackers to execute arbitrary code via (1) certain long fields in the Checksum item in a GCR request, (2) a long IP address, hostname, or netmask values in a GCR request, (3) a…

  • CVE-2005-0582May 2, 2005
    Ca
    License Client
    risk 0.06cvss —epss 0.37

    Buffer overflow in Computer Associates (CA) License Client 0.1.0.15 allows remote attackers to execute arbitrary code via a long filename in a PUTOLF request.

  • CVE-2009-4225Dec 8, 2009
    Broadcom Corporation
    Etrust Pestpatrol
    risk 0.05cvss —epss 0.31

    Stack-based buffer overflow in the PestPatrol ActiveX control (ppctl.dll) 5.6.7.9 in CA eTrust PestPatrol allows remote attackers to execute arbitrary code via a long argument to the Initialize method.

  • CVE-2007-0168Jan 11, 2007
    Ca
    Brightstor ARCserve Backup
    risk 0.05cvss —epss 0.20

    The Tape Engine service in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allows remote attackers to execute arbitrary code via certain data in opnum 0xBF in an RPC request, which is…

  • CVE-2006-6917Dec 31, 2006
    Ca
    Brightstor ARCserve Backup
    risk 0.05cvss —epss 0.29

    Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup R11.5 Server before SP2 allows remote attackers to execute arbitrary code in the Tape Engine (tapeeng.exe) via a crafted RPC request with (1) opnum 38, which is not properly handled in TAPEUTIL.dll…

  • CVE-2006-6379Dec 10, 2006
    Broadcom Corporation
    Server Protection Suite
    risk 0.05cvss —epss 0.21

    Buffer overflow in the BrightStor Backup Discovery Service in multiple CA products, including ARCserve Backup r11.5 SP1 and earlier, ARCserve Backup 9.01 up to 11.1, Enterprise Backup 10.5, and CA Server Protection Suite r2, allows remote attackers to execute arbitrary code via…

  • CVE-2004-0933Jan 27, 2005
    Ca
    eTrust Antivirus
    risk 0.05cvss —epss 0.21

    Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, EZ-Armor 2.0 through 2.4, and EZ-Antivirus 6.1 through 6.3 allow remote attackers to bypass…

  • CVE-2019-15126Feb 5, 2020
    Broadcom Corporation
    Wi-Fi client devices
    risk 0.04cvss —epss 0.08

    An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure…

  • CVE-2018-6443Jan 22, 2019
    Brocade
    Network Advisor
    risk 0.04cvss —epss 0.07

    A vulnerability in Brocade Network Advisor Versions before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using an undocumented user credentials and install additional JEE applications. A remote…

  • CVE-2014-9225Jan 21, 2015
    Symantec
    Data Center Security
    risk 0.04cvss —epss 0.09

    The ajaxswing webui in the management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x through 6.0 MP1 allows remote authenticated users to obtain sensitive server information via…

  • CVE-2012-2619Nov 14, 2012
    Broadcom Corporation
    Bcm4325
    risk 0.04cvss —epss 0.13

    The Broadcom BCM4325 and BCM4329 Wi-Fi chips, as used in certain Acer, Apple, Asus, Ford, HTC, Kyocera, LG, Malata, Motorola, Nokia, Pantech, Samsung, and Sony products, allow remote attackers to cause a denial of service (out-of-bounds read and Wi-Fi outage) via an RSN 802.11i…

  • CVE-2007-1785Mar 31, 2007
    Ca
    Brightstor ARCserve Backup
    risk 0.04cvss —epss 0.15

    The RPC service in mediasvr.exe in CA BrightStor ARCserve Backup 11.5 SP2 build 4237 allows remote attackers to execute arbitrary code via crafted xdr_handle_t data in RPC packets, which is used in calculating an address for a function call, as demonstrated using the 191 (0xbf)…

  • CVE-2007-0816Feb 7, 2007
    Ca
    Brightstor ARCserve Backup
    risk 0.04cvss —epss 0.11

    The RPC Server service (catirpc.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 SP2 and earlier allows remote attackers to cause a denial of service (service crash) via a crafted TADDR2UADDR that triggers a null pointer dereference in catirpc.dll,…

  • CVE-2006-5882Nov 14, 2006
    Linksys
    WPC300N
    risk 0.04cvss —epss 0.13

    Stack-based buffer overflow in the Broadcom BCMWL5.SYS wireless device driver 3.50.21.10, as used in Cisco Linksys WPC300N Wireless-N Notebook Adapter before 4.100.15.5 and other products, allows remote attackers to execute arbitrary code via an 802.11 response frame containing…

  • CVE-2006-4899Sep 22, 2006
    Ca
    eTrust Security Command Center
    risk 0.04cvss —epss 0.10

    The ePPIServlet script in Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, when running on Windows, allows remote attackers to obtain the web server path via a "'" (single quote) in the PIProfile function, which leaks the path in an error message.

  • CVE-2006-4901Sep 22, 2006
    Ca
    eTrust Audit
    risk 0.04cvss —epss 0.10

    Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, and eTrust Audit 1.5 and r8, allows remote attackers to spoof alerts and conduct replay attacks by invoking eTSAPISend.exe with the desired arguments.

  • CVE-2006-4900Sep 22, 2006
    Ca
    eTrust Security Command Center
    risk 0.04cvss —epss 0.08

    Directory traversal vulnerability in Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, allows remote authenticated users to read and delete arbitrary files via ".." sequences in the eSCCAdHocHtmlFile parameter to eSMPAuditServlet, which is not…

  • CVE-2006-0306Jan 19, 2006
    Ca
    Unicenter Remote Control
    risk 0.04cvss —epss 0.12

    The DM Primer (dmprimer.exe) in the DM Deployment Common Component in Computer Associates (CA) BrightStor Mobile Backup r4.0, BrightStor ARCserve Backup for Laptops & Desktops r11.0, r11.1, r11.1 SP1, Unicenter Remote Control 6.0, 6.0 SP1, CA Desktop Protection Suite r2, CA…

  • CVE-2004-0937Feb 9, 2005
    Sophos
    Small Business Suite
    risk 0.04cvss —epss 0.15

    Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being…

  • CVE-2004-0934Jan 27, 2005
    Kaspersky Lab
    Kaspersky
    risk 0.04cvss —epss 0.15

    Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

  • CVE-2004-0936Jan 27, 2005
    RAV
    antivirus
    risk 0.04cvss —epss 0.15

    RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

  • CVE-2004-0935Jan 27, 2005
    Eset
    Anti-Virus
    risk 0.04cvss —epss 0.15

    Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

  • CVE-2004-1096Jan 10, 2005
    Perl Foundation
    Archive::Zip
    risk 0.04cvss —epss 0.17

    Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on…

  • CVE-2004-1812Dec 31, 2004
    Broadcom Corporation
    Unicenter Tng
    risk 0.04cvss —epss 0.46

    Multiple stack-based buffer overflows in Agent Common Services (1) cam.exe and (2) awservices.exe in Unicenter TNG 2.4 allow remote attackers to execute arbitrary code.

  • CVE-2014-9226Jan 21, 2015
    Symantec
    Data Center Security
    risk 0.03cvss —epss 0.02

    The management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x through 6.0 MP1 allows local users to bypass intended Protection Policies via unspecified vectors.

  • CVE-2014-9224Jan 21, 2015
    Symantec
    Data Center Security
    risk 0.03cvss —epss 0.05

    Cross-site scripting (XSS) vulnerability in the ajaxswing webui in the Management Console server in the management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x through 6.0 MP1 allows…

  • CVE-2014-7289Jan 21, 2015
    Symantec
    Data Center Security
    risk 0.03cvss —epss 0.05

    SQL injection vulnerability in the management server in Symantec Critical System Protection (SCSP) 5.2.9 before MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x before 6.0 MP1 allows remote authenticated users to execute arbitrary SQL commands via a crafted…

  • CVE-2014-2046May 14, 2014
    Broadcom Corporation
    Pipa C211
    risk 0.03cvss —epss 0.04

    cgi-bin/rpcBridge in the web interface 1.1 on Broadcom Ltd PIPA C211 rev2 does not properly restrict access, which allows remote attackers to (1) obtain credentials and other sensitive information via a certain request to the config.getValuesHashExcludePaths method or (2) modify…

  • CVE-2014-1219Feb 14, 2014
    Ca
    2E Web Option
    risk 0.03cvss —epss 0.05

    CA 2E Web Option r8.1.2 accepts a predictable substring of a W2E_SSNID session token in place of the entire token, which allows remote attackers to hijack sessions by changing characters at the end of this substring, as demonstrated by terminating a session via a modified SSNID…

  • CVE-2009-2705Aug 11, 2009
    Ca
    Siteminder
    risk 0.03cvss —epss 0.04

    CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a request containing non-canonical, "overlong Unicode" in place of blacklisted characters.

  • CVE-2008-1979Apr 27, 2008
    Ca
    ARCserve Backup
    risk 0.03cvss —epss 0.04

    The Discovery Service (casdscvc) in CA ARCserve Backup 12.0.5454.0 and earlier allows remote attackers to cause a denial of service (crash) via a packet with a large integer value used in an increment to TCP port 41523, which triggers a buffer over-read.

  • CVE-2007-5923Nov 10, 2007
    Ca
    eTrust SiteMinder Agent
    risk 0.03cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in forms/smpwservices.fcc in CA (formerly Computer Associates) eTrust SiteMinder Agent allows remote attackers to inject arbitrary web script or HTML via the SMAUTHREASON parameter, a different vector than CVE-2005-2204.

  • CVE-2007-5332Oct 13, 2007
    Ca
    Brightstor ARCserve Backup
    risk 0.03cvss —epss 0.05

    Multiple unspecified vulnerabilities in (1) mediasvr and (2) caloggerd in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, have unknown impact and attack vectors related to memory corruption.

  • CVE-2007-2523May 11, 2007
    Ca
    Threat Manager
    risk 0.03cvss —epss 0.01

    CA Anti-Virus for the Enterprise r8 and Threat Manager r8 before 20070510 use weak permissions (NULL security descriptor) for the Task Service shared file mapping, which allows local users to modify this mapping and gain privileges by triggering a stack-based buffer overflow in…

  • CVE-2006-6952Jan 24, 2007
    Ca
    Host Based Intrusion Prevention System
    risk 0.03cvss —epss 0.01

    Computer Associates Host Intrusion Prevention System (HIPS) drivers (1) Core kmxstart.sys 6.5.4.31 and (2) Firewall kmxfw.sys 6.5.4.10 allow local users to gain privileges by using certain privileged IOCTLs to modify callback function pointers.

  • CVE-2001-1346May 18, 2001
    Ca
    ARCserveIT
    risk 0.03cvss —epss 0.01

    Computer Associates ARCserveIT 6.61 and 6.63 (also called ARCservIT) allows local users to overwrite arbitrary files via a symlink attack on the temporary files (1) asagent.tmp or (2) inetd.tmp.

  • CVE-2000-1244Dec 31, 2000
    Broadcom Corporation
    Inoculateit Agent For Exchange
    risk 0.03cvss —epss 0.02

    Computer Associates InoculateIT Agent for Exchange Server does not recognize an e-mail virus attachment if the SMTP header is missing the "From" field, which allows remote attackers to bypass virus protection.

  • CVE-2000-0559Jun 7, 2000
    Broadcom Corporation
    Etrust Intrusion Detection
    risk 0.03cvss —epss 0.01

    eTrust Intrusion Detection System (formerly SessionWall-3) uses weak encryption (XOR) to store administrative passwords in the registry, which allows local users to easily decrypt the passwords.

Page 4 of 10