Broadcom vulnerabilities
Published CVEs affecting Broadcom products: 219 record(s), with severity, exploitation and fixes.
Fabric Operating System 66Rabbitmq Server 35Brocade Active Support Connectivity Gateway 15Brocade Fabric Operating System Firmware 13Dx Netops Spectrum 10BCM5820X 8Vmware Avi Load Balancer 7Spring Web Services 7Sannav 6Spring Tools 6Brocade Sannav 5Spring Data Commons 5Spring Authorization Server 4Reactor Netty 4Spring Batch 3Symantec Endpoint Protection Windows Client 2Brocade Fabric Operating System 2Spring Web Flow 2Reactor Core 2Symantec Management Suite 1Symantec IT Management Suite 1Symantec Messaging Gateway 1Spring Rest Docs 1Symantec Endpoint Detection and Response 1SiteMinder 1Data Loss Prevention 1Spring Cloud Commons 1Unified Infrastructure Management 1Symantec Web Security Services Agent 1Symantec Endpoint Protection CleanWipe Removal Tool 1Layer 7 API Gateway 1Symantec Siteminder 1Automic Automation 1Spring Statemachine 1Spring Cloud Sleuth 1Spring Retry 1Spring Data Redis 1Spring Data Keyvalue 1Spring Data Relational 1
CVE-2021-22876
Medium · 5.3
CWE-200 Apr 1, 2021
curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information...
curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP Referer: header. libcurl does not strip off user credentials from the URL when automatically populating the Referer: HTTP request header field in outgoing HTTP requests, and therefore risks leaking sensitive data to the server that is the target of the second HTTP request.
CVE-2021-28153
Medium · 5.3
CWE-59 Mar 11, 2021
An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with...
An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is attacker-controlled. (If the path is a symlink to a file that already exists, then the contents of that file correctly remain unchanged.)
CVE-2021-27219
High · 7.5
CWE-681 Feb 15, 2021
An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function...
An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption.
CVE-2021-27218
High · 7.5
CWE-681 Feb 15, 2021
An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If...
An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If g_byte_array_new_take() was called with a buffer of 4GB or more on a 64-bit platform, the length would be truncated modulo 2**32, causing unintended length truncation.
CVE-2019-25013
Medium · 5.9
CWE-125 Jan 4, 2021
The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid...
The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read.
CVE-2020-35507
Medium · 5.5
CWE-476 Jan 4, 2021
NULL Pointer Dereference in Gnu Binutils
There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application availability.
CVE-2020-35496
Medium · 5.5
CWE-476 Jan 4, 2021
NULL Pointer Dereference in Gnu Binutils
There's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application availability. This flaw affects binutils versions prior to 2.34.
CVE-2020-35495
Medium · 5.5
CWE-476 Jan 4, 2021
NULL Pointer Dereference in Gnu Binutils
There's a flaw in binutils /bfd/pef.c. An attacker who is able to submit a crafted input file to be processed by the objdump program could cause a null pointer dereference. The greatest threat from this flaw is to application availability. This flaw affects binutils versions prior to 2.34.
CVE-2020-35494
Medium · 6.1
CWE-908 Jan 4, 2021
Use of Uninitialized Resource in Gnu Binutils
There's a flaw in binutils /opcodes/tic4x-dis.c. An attacker who is able to submit a crafted input file to be processed by binutils could cause usage of uninitialized memory. The highest threat is to application availability with a lower threat to data confidentiality. This flaw affects binutils versions prior to 2.34.
CVE-2020-35493
Medium · 5.5
CWE-20 Jan 4, 2021
Improper Input Validation in Gnu Binutils
A flaw exists in binutils in bfd/pef.c. An attacker who is able to submit a crafted PEF file to be parsed by objdump could cause a heap buffer overflow -> out-of-bounds read that could lead to an impact to application availability. This flaw affects binutils versions prior to 2.34.
CVE-2020-15778
High · 7.4
CWE-78 Jul 24, 2020
scp in OpenSSH through 8.3p1 allows command injection in scp.c remote function, as demonstrated...
scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows."
CVE-2020-13632
Medium · 5.5
CWE-476 May 27, 2020
ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted...
ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.
CVE-2020-13631
Medium · 5.5
May 27, 2020
SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables...
SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.
CVE-2020-13630
High · 7.0
CWE-416 May 27, 2020
ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the...
ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.
CVE-2020-12243
High · 7.5
CWE-674 Apr 28, 2020
In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean...
In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).
CVE-2020-1967
High · 7.5
CWE-476 Apr 21, 2020
Segmentation fault in SSL_check_chain
Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).
CVE-2019-19054
Medium · 4.7
CWE-401 Nov 18, 2019
Missing Release of Memory after Effective Lifetime in Linux Linux Kernel
A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering kfifo_alloc() failures, aka CID-a7b2df76b42b.
CVE-2018-1273
Critical · 9.8
KEV Urgent · 83 Public exploit Ransomware CWE-94 Apr 11, 2018
VMware Tanzu Spring Data Commons Property Binder Vulnerability
Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can supply specially crafted request parameters against Spring Data REST backed HTTP resources or using Spring Data's projection-based request payload binding hat can lead to a remote code execution attack.
CVE-2014-0160
High · 7.5
KEV Urgent · 79 Public exploit CWE-125 Apr 7, 2014
OpenSSL Information Disclosure Vulnerability
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.