broadcom one command manager vulnerabilities and exploits

(subscribe to this query)

9.8

CVSSv3

Broadcom Emulex HBA Manager/One Command Manager versions prior to 11.4.425.0 and 12.8.542.31, if not installed in Strictly Local Management mode, have a buffer overflow vulnerability in the remote GetDumpFile command that could allow a user to attempt various attacks. In non-secu...

Broadcom Emulex Hba Manager Broadcom One Command Manager

7.5

CVSSv3

Broadcom Emulex HBA Manager/One Command Manager versions prior to 11.4.425.0 and 12.8.542.31, if not installed in Strictly Local Management mode, could allow a user to retrieve an arbitrary file from a remote host with the GetDumpFile command. In non-secure mode, the user is unau...

Broadcom Emulex Hba Manager

9.8

CVSSv3

Broadcom Emulex HBA Manager/One Command Manager versions prior to 11.4.425.0 and 12.8.542.31, if not installed in Strictly Local Management mode, have a buffer overflow vulnerability in the remote firmware download feature that could allow remote unauthenticated users to perform ...

Broadcom Emulex Hba Manager

9.1

CVSSv3

Broadcom Emulex HBA Manager/One Command Manager versions prior to 11.4.425.0 and 12.8.542.31, if not installed in Strictly Local Management mode, have a vulnerability in the remote firmware download feature that could allow a user to place or replace an arbitrary file on the remo...

Broadcom Emulex Hba Manager

9.8

CVSSv3

In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" paramete...

1 Github repository1 Article

5.3

CVSSv3

AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of...

Openssl Openssl Fedoraproject Fedora 35 Fedoraproject Fedora 36 Netapp Clustered Data Ontap Antivirus Connector -Netapp Active Iq Unified Manager -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -Netapp H410c Firmware -Siemens Sinec Ins 1.0 Siemens Sinec Ins Debian Debian Linux 10.0 Debian Debian Linux 11.0

5.9

CVSSv3

Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM platform contains a bug that could cause it to read past the input buffer, leading to a crash. Impact summary: Applications that use the AES-XTS algorithm on the 64 bit ARM platform can crash in rare circu...

Openssl Openssl

7.4

CVSSv3

ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated...

2 Github repositories

5.3

CVSSv3

Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA to circumvent certain checks. Invalid certificate policies in leaf certificates are silently ignored by OpenSSL and other certificate policy checks are skippe...

Openssl Openssl

5.3

CVSSv3

The function X509_VERIFY_PARAM_add0_policy() is documented to implicitly enable the certificate policy check when doing certificate verification. However the implementation of the function does not enable the check which allows certificates with invalid or incorrect policies to p...

Openssl Openssl

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook