VYPR
← Ca

Vendor CVEs

Ca

All CVEs

274 total · sorted by risk
  • CVE-2008-2241May 21, 2008
    Ca
    Brightstor ARCserve Backup
    risk 0.01cvss —epss 0.12

    Directory traversal vulnerability in caloggerd in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allows remote attackers to append arbitrary data to arbitrary files via directory traversal sequences in unspecified input fields, which are used in log messages. NOTE: this can…

  • CVE-2008-2242May 21, 2008
    Ca
    Brightstor ARCserve Backup
    risk 0.01cvss —epss 0.15

    Multiple buffer overflows in xdr functions in the server in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allow remote attackers to execute arbitrary code, as demonstrated by a stack-based buffer overflow via a long parameter to the xdr_rwsstring function.

  • CVE-2008-1786Apr 16, 2008
    Ca
    Desktop Management Suite
    risk 0.01cvss —epss 0.07

    The DSM gui_cm_ctrls ActiveX control (gui_cm_ctrls.ocx), as used in multiple CA products including BrightStor ARCServe Backup for Laptops and Desktops r11.5, Desktop Management Suite r11.1 through r11.2 C2; Unicenter r11.1 through r11.2 C2; and Desktop and Server Management…

  • CVE-2007-5326Oct 13, 2007
    Ca
    Brightstor ARCserve Backup
    risk 0.01cvss —epss 0.12

    Multiple buffer overflows in (1) RPC and (2) rpcx.dll in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allow remote attackers to execute arbitrary code via unspecified vectors.

  • CVE-2007-5328Oct 13, 2007
    Ca
    Brightstor ARCserve Backup
    risk 0.01cvss —epss 0.07

    The Message Engine RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows attackers to execute arbitrary code by using certain "insecure method calls" to modify the file system and registry, aka "Privileged function exposure."

  • CVE-2007-5327Oct 13, 2007
    Ca
    Brightstor ARCserve Backup
    risk 0.01cvss —epss 0.16

    Stack-based buffer overflow in the RPC interface for the Message Engine (mediasvr.exe) in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to execute arbitrary code via a long argument in the 0x10d opnum.

  • CVE-2007-5331Oct 13, 2007
    Ca
    Brightstor ARCserve Backup
    risk 0.01cvss —epss 0.10

    Queue.dll for the message queuing service (LQserver.exe) in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to execute arbitrary code via a malformed ONRPC protocol request for operation 0x76, which causes ARCserve Backup…

  • CVE-2007-5330Oct 13, 2007
    Ca
    Brightstor ARCserve Backup
    risk 0.01cvss —epss 0.13

    The cadbd RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to (1) execute arbitrary code via stack-based buffer overflows in unspecified RPC procedures, and (2) trigger memory corruption related to the use of…

  • CVE-2007-5325Oct 13, 2007
    Ca
    Brightstor ARCserve Backup
    risk 0.01cvss —epss 0.12

    Multiple buffer overflows in (1) the Message Engine and (2) AScore.dll in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allow remote attackers to execute arbitrary code via unspecified vectors.

  • CVE-2007-5004Oct 1, 2007
    Ca
    Arcserve Backup For Laptops And Desktops
    risk 0.01cvss —epss 0.09

    Integer overflow in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers to execute arbitrary code via a long username and a certain "useless" password.

  • CVE-2007-5083Oct 1, 2007
    Ca
    BrightStor Hierarchical Storage Manager
    risk 0.01cvss —epss 0.19

    Multiple integer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary code via unspecified CsAgent service commands that trigger a heap-based buffer overflow.

  • CVE-2007-3302Jul 26, 2007
    Ca
    eTrust Intrusion Detection
    risk 0.01cvss —epss 0.11

    The CallCode ActiveX control in caller.dll 3.0 before 20070713, and 3.0 SP1 before 3.0.5.81, in CA (formerly Computer Associates) eTrust Intrusion Detection allows remote attackers to load arbitrary DLLs on a client system, and execute code from these DLLs, via unspecified…

  • CVE-2007-3825Jul 18, 2007
    Ca
    Protection Suites
    risk 0.01cvss —epss 0.14

    Multiple stack-based buffer overflows in the RPC implementation in alert.exe before 8.0.255.0 in CA (formerly Computer Associates) Alert Notification Server, as used in Threat Manager for the Enterprise, Protection Suites, certain BrightStor ARCserve products, and BrightStor…

  • CVE-2007-3338Jun 22, 2007
    Ca
    Ingres database server
    risk 0.01cvss —epss 0.07

    Multiple stack-based buffer overflows in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (Computer Associates) products, allow remote attackers to execute arbitrary code via the (1) uuid_from_char or (2) duve_get_args functions.

  • CVE-2007-1447Mar 16, 2007
    Ca
    Brightstor ARCserve Backup
    risk 0.01cvss —epss 0.14

    The Tape Engine in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC procedure arguments, which result in memory corruption, a different…

  • CVE-2007-1005Mar 2, 2007
    Ca
    eTrust Intrusion Detection
    risk 0.01cvss —epss 0.07

    Heap-based buffer overflow in SW3eng.exe in the eID Engine service in CA (formerly Computer Associates) eTrust Intrusion Detection 3.0.5.57 and earlier allows remote attackers to cause a denial of service (application crash) via a long key length value to the remote…

  • CVE-2006-5172Jan 16, 2007
    Ca
    Protection Suites
    risk 0.01cvss —epss 0.15

    Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates (CA) Brightstor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Protection Suites r2 allows remote attackers to execute arbitrary code via crafted SUNRPC packets, aka the…

  • CVE-2006-5171Jan 16, 2007
    Ca
    Protection Suites
    risk 0.01cvss —epss 0.17

    Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates (CA) Brightstor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Protection Suites r2 allows remote attackers to execute arbitrary code via crafted SUNRPC packets, aka the…

  • CVE-2006-5142Oct 10, 2006
    Ca
    Brightstor ARCserve Backup
    risk 0.01cvss —epss 0.13

    Stack-based buffer overflow in CA BrightStor ARCserve Backup R11.5 client and server allows remote attackers to execute arbitrary code via long messages to the CheyenneDS Mailslot.

  • CVE-2005-3653Dec 31, 2005
    Ca
    iGateway
    risk 0.01cvss —epss 0.19

    Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary code via an HTTP request with a negative Content-Length field.

  • CVE-2005-2669Aug 23, 2005
    Ca
    Message Queuing
    risk 0.01cvss —epss 0.07

    Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allows remote attackers to execute arbitrary commands via spoofed CAFT packets.

  • CVE-2005-1693May 24, 2005
    Zonelabs
    Zonealarm
    risk 0.01cvss —epss 0.07

    Integer overflow in Computer Associates Vet Antivirus library, as used by CA InoculateIT 6.0, eTrust Antivirus r6.0 through 7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, BrightStor ARCserve Backup (BAB) r11.1, Vet…

  • CVE-2015-3318Jun 17, 2015
    Ca
    Client Automation
    risk 0.00cvss —epss 0.00

    CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers…

  • CVE-2015-3317Jun 17, 2015
    Ca
    Client Automation
    risk 0.00cvss —epss 0.00

    CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers…

  • CVE-2015-3316Jun 17, 2015
    Ca
    Client Automation
    risk 0.00cvss —epss 0.00

    CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers…

  • CVE-2015-2828Apr 8, 2015
    Ca
    Spectrum
    risk 0.00cvss —epss 0.03

    CA Spectrum 9.2.x and 9.3.x before 9.3 H02 does not properly validate serialized Java objects, which allows remote authenticated users to obtain administrative privileges via crafted object data.

  • CVE-2014-8248Dec 16, 2014
    Ca
    Release Automation
    risk 0.00cvss —epss 0.02

    SQL injection vulnerability in CA Release Automation (formerly iTKO LISA Release Automation) before 4.7.1 b448 allows remote authenticated users to execute arbitrary SQL commands via a crafted query.

  • CVE-2014-8247Dec 16, 2014
    Ca
    Release Automation
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in CA Release Automation (formerly iTKO LISA Release Automation) before 4.7.1 b448 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2014-8246Dec 16, 2014
    Ca
    Release Automation
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in CA Release Automation (formerly iTKO LISA Release Automation) before 4.7.1 b448 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

  • CVE-2014-8474Nov 4, 2014
    Ca
    Cloud Service Management
    risk 0.00cvss —epss 0.03

    CA Cloud Service Management (CSM) before Summer 2014 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML document containing an external entity declaration in conjunction…

  • CVE-2014-8473Nov 4, 2014
    Ca
    Cloud Service Management
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in CA Cloud Service Management (CSM) before Summer 2014 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

  • CVE-2014-8472Nov 4, 2014
    Ca
    Cloud Service Management
    risk 0.00cvss —epss 0.02

    CA Cloud Service Management (CSM) before Summer 2014 does not properly verify authentication tokens from an Identity Provider, which allows user-assisted remote attackers to bypass intended access restrictions via unspecified vectors.

  • CVE-2014-8471Nov 4, 2014
    Ca
    Cloud Service Management
    risk 0.00cvss —epss 0.02

    CA Cloud Service Management (CSM) before Summer 2014 allows remote attackers to conduct replay attacks via unspecified vectors.

  • CVE-2014-2210Apr 4, 2014
    Ca
    Erwin Web Portal
    risk 0.00cvss —epss 0.05

    Multiple directory traversal vulnerabilities in CA ERwin Web Portal 9.5 allow remote attackers to obtain sensitive information, bypass intended access restrictions, cause a denial of service, or possibly execute arbitrary code via unspecified vectors.

  • CVE-2013-5968Oct 29, 2013
    Ca
    Web Agents
    risk 0.00cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in CA SiteMinder 12.0 through 12.51, and SiteMinder 6 Web Agents, allows remote attackers to inject arbitrary web script or HTML via vectors involving a " (double quote) character.

  • CVE-2013-2630Jul 31, 2013
    Ca
    Service Desk Manager
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in CA Service Desk Manager 12.5 through 12.7 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

  • CVE-2012-6299Dec 26, 2012
    Ca
    Identityminder
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in CA IdentityMinder r12.0 through CR16, r12.5 before SP15, and r12.6 GA allows remote attackers to bypass intended access restrictions via unknown vectors.

  • CVE-2012-6298Dec 26, 2012
    Ca
    Identityminder
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in CA IdentityMinder r12.0 through CR16, r12.5 before SP15, and r12.6 GA allows remote attackers to execute arbitrary commands or modify data via unknown vectors.

  • CVE-2012-5973Dec 10, 2012
    Ca
    Xcom Data Transport
    risk 0.00cvss —epss 0.04

    CA XCOM Data Transport r11.0 and r11.5 on UNIX and Linux allows remote attackers to execute arbitrary commands via a crafted request.

  • CVE-2012-2972Oct 20, 2012
    Ca
    ARCserve Backup
    risk 0.00cvss —epss 0.03

    The (1) server and (2) agent components in CA ARCserve Backup r12.5, r15, and r16 on Windows do not properly validate RPC requests, which allows remote attackers to cause a denial of service (service crash) via a crafted request.

  • CVE-2012-0691Oct 2, 2012
    Ca
    License
    risk 0.00cvss —epss 0.00

    CA License (aka CA Licensing) before 1.90.03 does not properly restrict system commands, which allows local users to gain privileges via unspecified vectors.

  • CVE-2010-5156Aug 25, 2012
    Ca
    Internet Security Suite 2008
    risk 0.00cvss —epss 0.00

    Race condition in CA Internet Security Suite Plus 2010 6.0.0.272 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain…

  • CVE-2012-1662Mar 22, 2012
    Ca
    ARCserve Backup
    risk 0.00cvss —epss 0.02

    CA ARCserve Backup r12.0 through SP2, r12.5 before SP2, r15 through SP1, and r16 before SP1 on Windows allows remote attackers to cause a denial of service (service shutdown) via a crafted network request.

  • CVE-2011-4054Dec 8, 2011
    Ca
    Siteminder
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in login.fcc in CA SiteMinder R6 SP6 before CR7 and R12 SP3 before CR8 allows remote attackers to inject arbitrary web script or HTML via the postpreservationdata parameter.

  • CVE-2011-3849Nov 19, 2011
    Ca
    CA Directory
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in dxserver before 6279 in CA Directory 8.1 and CA Directory r12 before SP7 CR1 allows remote attackers to cause a denial of service (daemon crash) via a crafted SNMP packet.

  • CVE-2011-1899May 16, 2011
    Ca
    Ehealth
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in CA eHealth 6.0.x, 6.1.x, 6.2.1, and 6.2.2 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters.

  • CVE-2011-1826May 5, 2011
    Ca
    Arcot Webfort Versatile Authentication Server
    risk 0.00cvss —epss 0.01

    Open redirect vulnerability in the Administrative Console in CA Arcot WebFort Versatile Authentication Server (VAS) before 6.2.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

  • CVE-2011-1825May 5, 2011
    Ca
    Arcot Webfort Versatile Authentication Server
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in the Administrative Console in CA Arcot WebFort Versatile Authentication Server (VAS) before 6.2.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2011-1718Apr 27, 2011
    Ca
    Siteminder
    risk 0.00cvss —epss 0.02

    The Web Agents component in CA SiteMinder R6 before SP6 CR2 and R12 before SP3 CR2 does not properly handle multi-line headers, which allows remote authenticated users to conduct impersonation attacks and gain privileges via crafted data.

  • CVE-2011-1036Feb 25, 2011
    Ca Technologies, A Broadcom Company
    Host-Based Intrusion Prevention System
    risk 0.00cvss —epss 0.03

    The XML Security Database Parser class in the XMLSecDB ActiveX control in the HIPSEngine component in the Management Server before 8.1.0.88, and the client before 1.6.450, in CA Host-Based Intrusion Prevention System (HIPS) 8.1, as used in CA Internet Security Suite (ISS) 2010,…

Page 4 of 6