VYPR
← Ca

Vendor CVEs

Ca

All CVEs

280 total · sorted by risk
  • CVE-2011-3849Nov 19, 2011
    Ca
    CA Directory
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in dxserver before 6279 in CA Directory 8.1 and CA Directory r12 before SP7 CR1 allows remote attackers to cause a denial of service (daemon crash) via a crafted SNMP packet.

  • CVE-2011-1899May 16, 2011
    Ca
    Ehealth
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in CA eHealth 6.0.x, 6.1.x, 6.2.1, and 6.2.2 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters.

  • CVE-2011-1826May 5, 2011
    Ca
    Arcot Webfort Versatile Authentication Server
    risk 0.00cvss —epss 0.01

    Open redirect vulnerability in the Administrative Console in CA Arcot WebFort Versatile Authentication Server (VAS) before 6.2.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

  • CVE-2011-1825May 5, 2011
    Ca
    Arcot Webfort Versatile Authentication Server
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in the Administrative Console in CA Arcot WebFort Versatile Authentication Server (VAS) before 6.2.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2011-1718Apr 27, 2011
    Ca
    Siteminder
    risk 0.00cvss —epss 0.02

    The Web Agents component in CA SiteMinder R6 before SP6 CR2 and R12 before SP3 CR2 does not properly handle multi-line headers, which allows remote authenticated users to conduct impersonation attacks and gain privileges via crafted data.

  • CVE-2011-1036Feb 25, 2011
    Ca Technologies, A Broadcom Company
    Host-Based Intrusion Prevention System
    risk 0.00cvss —epss 0.03

    The XML Security Database Parser class in the XMLSecDB ActiveX control in the HIPSEngine component in the Management Server before 8.1.0.88, and the client before 1.6.450, in CA Host-Based Intrusion Prevention System (HIPS) 8.1, as used in CA Internet Security Suite (ISS) 2010,…

  • CVE-2010-3984Jan 7, 2011
    Ca
    Xosoft Content Distribution
    risk 0.00cvss —epss 0.05

    Buffer overflow in mng_core_com.dll in CA XOsoft Replication r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft High Availability r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft Content Distribution r12.0 SP1 and r12.5 SP2 rollup, and CA ARCserve Replication and High Availability (RHA) r15.0…

  • CVE-2010-2193Jun 10, 2010
    Ca
    PSFormX
    risk 0.00cvss —epss 0.06

    Multiple unspecified vulnerabilities in the CA (1) PSFormX and (2) WebScan ActiveX controls, as distributed on the CA Global Advisor web site until May 2009, allow remote attackers to execute arbitrary code via unknown vectors.

  • CVE-2010-1222Apr 7, 2010
    Ca
    XOsoft
    risk 0.00cvss —epss 0.02

    CA XOsoft r12.5 does not properly perform authentication, which allows remote attackers to obtain potentially sensitive information via a SOAP request.

  • CVE-2010-1221Apr 7, 2010
    Ca
    XOsoft
    risk 0.00cvss —epss 0.02

    CA XOsoft r12.0 and r12.5 does not properly perform authentication, which allows remote attackers to enumerate usernames via a SOAP request.

  • CVE-2010-0640Feb 24, 2010
    Ca
    Ehealth Performance Manager
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in CA eHealth Performance Manager 6.0.x through 6.2.x, when malicious HTML detection is disabled, allows remote attackers to inject arbitrary web script or HTML via a crafted request.

  • CVE-2009-4149Dec 9, 2009
    Ca
    Service Desk
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the web interface in CA Service Desk 12.1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter.

  • CVE-2009-3588Oct 13, 2009
    Ca
    eTrust Antivirus
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and…

  • CVE-2009-2740Aug 19, 2009
    Ca
    Host Based Intrusion Prevention System
    risk 0.00cvss —epss 0.02

    kmxIds.sys before 7.3.1.18 in CA Host-Based Intrusion Prevention System (HIPS) 8.1 allows remote attackers to cause a denial of service (system crash) via a malformed packet.

  • CVE-2009-0682Aug 19, 2009
    Ca
    Internet Security Suite Plus 2008
    risk 0.00cvss —epss 0.00

    vetmonnt.sys in CA Internet Security Suite r3, vetmonnt.sys before 9.0.0.184 in Internet Security Suite r4, and vetmonnt.sys before 10.0.0.217 in Internet Security Suite r5 do not properly verify IOCTL calls, which allows local users to cause a denial of service (system crash)…

  • CVE-2009-1761Jun 16, 2009
    Ca
    ARCserve Backup
    risk 0.00cvss —epss 0.02

    The message engine in CA ARCserve Backup r12.0 and r12.0 SP1 for Windows allows remote attackers to cause a denial of service (crash) via (1) an invalid 0x13 message, which is not properly handled in the ASCORE module, or (2) a 0x3B message with invalid stub data that triggers…

  • CVE-2009-0042Jan 28, 2009
    Ca
    Anti-Virus Engine
    risk 0.00cvss —epss 0.04

    Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterprise 7.1, r8, and r8.1; Anti-Virus 2007 v8 and 2008; Internet Security Suite 2007 v3 and 2008; and other CA products allow remote…

  • CVE-2008-5529Dec 12, 2008
    Ca
    eTrust Antivirus
    risk 0.00cvss —epss 0.03

    CA eTrust Antivirus 31.6.6086, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension,…

  • CVE-2008-4400Oct 14, 2008
    Ca
    Brightstor ARCserve Backup
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of service (crash of multiple services) via crafted authentication credentials, related to "insufficient validation."

  • CVE-2008-4119Sep 27, 2008
    Ca
    Cmdb
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in CA Service Desk 11.2 and CMDB 11.0 through 11.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "multiple web forms."

  • CVE-2008-3174Aug 12, 2008
    Ca
    Personal Firewall
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Suite and Personal Firewall, allows remote attackers to cause a denial of service via unknown vectors, related to "insufficient validation."

  • CVE-2008-2926Aug 12, 2008
    Ca
    Personal Firewall
    risk 0.00cvss —epss 0.00

    The kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Suite and Personal Firewall, does not properly verify IOCTL requests, which allows local users to cause a denial of service (system crash) or possibly gain privileges via…

  • CVE-2008-1984Apr 27, 2008
    Ca
    Etrust Secure Content Manager
    risk 0.00cvss —epss 0.03

    The eTrust Common Services (Transport) Daemon (eCSqdmn) in CA Secure Content Manager 8.0.28000.511 and earlier allows remote attackers to cause a denial of service (crash or CPU consumption) via a malformed packet to TCP port 1882.

  • CVE-2008-1329Apr 7, 2008
    Ca
    Arcserve Backup For Laptops And Desktops
    risk 0.00cvss —epss 0.06

    Unspecified vulnerability in the NetBackup service in CA ARCserve Backup for Laptops and Desktops r11.0 through r11.5, and Suite 11.1 and 11.2, allows remote attackers to execute arbitrary commands, related to "insufficient verification of file uploads."

  • CVE-2007-6406Dec 17, 2007
    Ca
    eTrust Threat Management Console
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in CA (formerly Computer Associates) eTrust Threat Management Console allow remote attackers to inject arbitrary web script or HTML via the IP Address field and other unspecified fields.

  • CVE-2007-5472Oct 22, 2007
    Ca
    Host Based Intrusion Prevention System
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the Server component in CA Host-Based Intrusion Prevention System (HIPS) before 8.0.0.93 allows remote attackers to inject arbitrary web script or HTML via requests that are written to logs for later display in the log viewer.

  • CVE-2007-5439Oct 13, 2007
    Ca
    eTrust ITM
    risk 0.00cvss —epss 0.02

    CA (formerly Computer Associates) eTrust ITM (Threat Manager) 8.1 stores sensitive user information in log files with predictable names, which allows remote attackers to obtain this information via unspecified vectors.

  • CVE-2007-5435Oct 13, 2007
    Ca
    ERwin Process Modeler
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in CA ERwin Process Modeler (formerly AllFusion Process Modeler) 7.2 might allow user-assisted remote attackers to cause a denial of service via a crafted Data Standards File (Datatype Standards File).

  • CVE-2007-5437Oct 13, 2007
    Ca
    Threat Manager
    risk 0.00cvss —epss 0.03

    The web console in CA (formerly Computer Associates) eTrust ITM (Threat Manager) 8.1 allows remote attackers to redirect users to arbitrary web sites via a crafted HTTP URL on port 6689.

  • CVE-2007-5329Oct 13, 2007
    Ca
    Brightstor ARCserve Backup
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in dbasvr in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, has unknown impact and attack vectors related to memory corruption.

  • CVE-2007-5084Oct 1, 2007
    Ca
    BrightStor Hierarchical Storage Manager
    risk 0.00cvss —epss 0.02

    Multiple SQL injection vulnerabilities in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary SQL commands via CsAgent service commands with opcodes (1) 0x07, (2) 0x08, (3) 0x09, (4) 0x1E, (5) 0x32, (6)…

  • CVE-2007-5005Oct 1, 2007
    Ca
    Arcserve Backup For Laptops And Desktops
    risk 0.00cvss —epss 0.05

    Directory traversal vulnerability in rxRPC.dll in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers to upload and overwrite arbitrary files via a ..\ (dot dot backslash) sequence in the destination filename…

  • CVE-2007-3875Jul 26, 2007
    Broadcom Corporation
    Etrust Antivirus
    risk 0.00cvss —epss 0.04

    arclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote attackers to cause a denial of service (infinite loop and loss of antivirus functionality) via an invalid "previous listing chunk number" field in a CHM file.

  • CVE-2007-3695Jul 11, 2007
    Ca
    ERwin Process Modeler
    risk 0.00cvss —epss 0.04

    Buffer overflow in LICRCMD.EXE in CA ERwin Process Modeler (formerly AllFusion Process Modeler) 7.1 allows attackers to execute arbitrary code via a long filename. NOTE: the researcher does not suggest any circumstances in which the filename would come from an untrusted source,…

  • CVE-2007-3696Jul 11, 2007
    Ca
    AllFusion Data Model Validator
    risk 0.00cvss —epss 0.02

    CA ERwin Data Model Validator (formerly AllFusion Data Model Validator) allows remote attackers to (1) cause a denial of service (application hang) via a malformed .EXP database file and (2) cause a denial of service (aaplication crash) via a crafted .EXP database file, which…

  • CVE-2007-2230Apr 25, 2007
    Ca
    CleverPath Portal
    risk 0.00cvss —epss 0.02

    SQL injection vulnerability in CA Clever Path Portal allows remote authenticated users to execute limited SQL commands and retrieve arbitrary database contents via (1) the ofinterest parameter in a light search query, (2) description parameter in the advanced search query, and…

  • CVE-2007-1448Mar 16, 2007
    Ca
    Brightstor ARCserve Backup
    risk 0.00cvss —epss 0.01

    The Tape Engine in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to cause a denial of service (disabled interface) by calling an unspecified RPC function.

  • CVE-2007-1345Mar 10, 2007
    Ca
    Etrust Admin
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in cube.exe in the GINA component for CA (Computer Associates) eTrust Admin 8.1.0 through 8.1.2 allows attackers with physical interactive or Remote Desktop access to bypass authentication and gain privileges via the password reset interface.

  • CVE-2007-0672Feb 3, 2007
    Ca
    BrightStor Mobile Backup
    risk 0.00cvss —epss 0.03

    LGSERVER.EXE in BrightStor Mobile Backup 4.0 allows remote attackers to cause a denial of service (disk consumption and daemon hang) via a value of 0xFFFFFF7F at a certain point in an authentication negotiation packet, which writes a large amount of data to a .USX file in…

  • CVE-2007-0673Feb 3, 2007
    Broadcom Corporation
    Brightstor Arcserve Backup
    risk 0.00cvss —epss 0.03

    LGSERVER.EXE in BrightStor ARCserve Backup for Laptops & Desktops r11.1 allows remote attackers to cause a denial of service (daemon crash) via a value of 0xFFFFFFFF at a certain point in an authentication negotiation packet, which results in an out-of-bounds read.

  • CVE-2006-6641Dec 20, 2006
    Cleverpath
    Aion Bpm
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in CA CleverPath Portal before maintenance version 4.71.001_179_060830, as used in multiple products including BrightStor Portal r11.1, CleverPath Aion BPM r10 through r10.2, eTrust Security Command Center r1 and r8, and Unicenter, does not properly…

  • CVE-2006-6496Dec 13, 2006
    Ca
    Anti-Virus 2007
    risk 0.00cvss —epss 0.00

    The (1) VetMONNT.sys and (2) VetFDDNT.sys drivers in CA Anti-Virus 2007 8.1, Anti-Virus for Vista Beta 8.2, and CA Internet Security Suite 2007 v3.0 do not properly handle NULL buffers, which allows local users with administrative access to cause a denial of service (system…

  • CVE-2006-3976Aug 4, 2006
    Ca
    eTrust Antivirus WebScan
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in CA eTrust Antivirus WebScan before 1.1.0.1048 allows remote attackers to install arbitrary files.

  • CVE-2006-3977Aug 4, 2006
    Ca
    eTrust Antivirus WebScan
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in CA eTrust Antivirus WebScan before 1.1.0.1048 has unknown impact and remote attackers related to "improper processing of outdated WebScan components."

  • CVE-2006-3975Aug 4, 2006
    Ca
    eTrust Antivirus WebScan
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in CA eTrust Antivirus WebScan allows remote attackers to execute arbitrary code due to "improper bounds checking when processing certain user input."

  • CVE-2006-3725Jul 21, 2006
    Ca
    Personal Firewall
    risk 0.00cvss —epss 0.00

    Norton Personal Firewall 2006 9.1.0.33 allows local users to cause a denial of service (crash) via certain RegSaveKey, RegRestoreKey and RegDeleteKey operations on the (1) HKLM\SYSTEM\CurrentControlSet\Services\SNDSrvc and (2) HKLM\SYSTEM\CurrentControlSet\Services\SymEvent…

  • CVE-2006-2201May 4, 2006
    Ca
    Resource Initialization Manager
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in CA Resource Initialization Manager (CAIRIM) 1.x before 20060502, as used in z/OS Common Services and the LMP component in multiple products, allows attackers to violate integrity via a certain "problem state program" that uses SVC to gain access to…

  • CVE-2006-0529Feb 2, 2006
    Ca
    Message Queuing
    risk 0.00cvss —epss 0.03

    Computer Associates (CA) Message Queuing (CAM / CAFT) before 1.07 Build 220_16 and 1.11 Build 29_20, as used in multiple CA products, allows remote attackers to cause a denial of service via a crafted message to TCP port 4105.

  • CVE-2006-0530Feb 2, 2006
    Ca
    Message Queuing
    risk 0.00cvss —epss 0.03

    Computer Associates (CA) Message Queuing (CAM / CAFT) before 1.07 Build 220_16 and 1.11 Build 29_20, as used in multiple CA products, allows remote attackers to cause a denial of service via spoofed CAM control messages.

  • CVE-2006-0307Jan 19, 2006
    Ca
    Unicenter Remote Control
    risk 0.00cvss —epss 0.04

    The DM Primer in the DM Deployment Common Component in Computer Associates (CA) BrightStor Mobile Backup r4.0, BrightStor ARCserve Backup for Laptops & Desktops r11.0, r11.1, r11.1 SP1, Unicenter Remote Control 6.0, 6.0 SP1, CA Desktop Protection Suite r2, CA Server Protection…

Page 5 of 6