Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

broadcom threat manager 8 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2007-4620
Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products including Anti-Virus for the Enterprise 7.1 through r11.1 and Threat Manager for the Enterprise 8.1 and r8...
Ca Brightstor Arcserve Backup 11Ca Threat Manager For The Enterprise R8Broadcom Anti-virus For The Enterprise 8Broadcom Anti-virus For The Enterprise 8.1Broadcom Brightstor Arcserve Backup 11.1Broadcom Brightstor Arcserve Backup 11.5Broadcom Anti-virus For The Enterprise 7.1Ca Threat Manager For The Enterprise R8.1
NA
CVE-2007-2523
CA Anti-Virus for the Enterprise r8 and Threat Manager r8 prior to 20070510 use weak permissions (NULL security descriptor) for the Task Service shared file mapping, which allows local users to modify this mapping and gain privileges by triggering a stack-based buffer overflow in...
Broadcom Integrated Threat Management 8.0Ca Anti-virus For The Enterprise 8
NA
CVE-2007-3825
Multiple stack-based buffer overflows in the RPC implementation in alert.exe prior to 8.0.255.0 in CA (formerly Computer Associates) Alert Notification Server, as used in Threat Manager for the Enterprise, Protection Suites, certain BrightStor ARCserve products, and BrightStor En...
Broadcom Brightstor Arcserve Backup 9.01Ca Brightstor Arcserve ClientBroadcom Brightstor Enterprise Backup 10.5Broadcom Brightstor Arcserve Backup 11.5Ca Brightstor Arcserve Backup 11Broadcom Alert Notification ServerCa Protection Suites R3Ca Threat Manager 8Ca Anti-virus For The Enterprise 8Broadcom Brightstor Arcserve Backup 11.1
NA
CVE-2009-3588
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other...
Broadcom Etrust Antivirus 7.1Broadcom Anti-virus For The Enterprise 7.1Broadcom Anti-virus For The Enterprise R8Ca Anti-virus For The Enterprise R8.1Ca Etrust Ez Antivirus R7.1Broadcom Internet Security Suite 3.0Ca Threat Manager R8Broadcom Etrust Integrated Threat Management 8.1Ca Etrust Secure Content Manager 8.0Broadcom Network And Systems Management R3.0Broadcom Unicenter Network And Systems Management 11.1Ca Arcserve For Windows Client AgentBroadcom Common Services 11.1Broadcom Anti-virus SdkBroadcom Etrust Antivirus 8Broadcom Etrust Antivirus 8.1Ca Gateway Security R8.1Broadcom Internet Security SuiteCa Threat Manager Total DefenseCa Protection Suites R2Broadcom Network And Systems Management R3.1Broadcom Network And Systems Management R11.1
NA
CVE-2009-3587
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other...
Broadcom Etrust Antivirus 8Broadcom Etrust Antivirus 8.1Broadcom Internet Security SuiteCa Internet Security Suite 2008Ca Protection Suites R2Ca Protection Suites R3Broadcom Network And Systems Management R3.1Broadcom Network And Systems Management R11.1Ca Etrust Intrusion Detection 2.0Broadcom Anti-virus 2007Broadcom Anti-virus 2008Ca Internet Security Suite Plus 2008Ca Internet Security Suite Plus 2009Ca Protection Suites R3.1Broadcom Secure Content Manager 1.1Broadcom Network And Systems Management R11Broadcom Unicenter Network And Systems Management 3.0Broadcom Unicenter Network And Systems Management 3.1Ca Etrust Intrusion Detection 3.0Ca Common Services 3.1Ca Arcserve Backup R11.5Broadcom Etrust Antivirus 7.1
NA
CVE-2007-3875
arclib.dll prior to 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote malicious users to cause a denial of service (infinite loop and loss of antivirus functionality) via an invalid "previous listing chunk number" field i...
Broadcom Anti-virus For The Enterprise 8Broadcom Anti-virus For The Enterprise 8.1Ca Brightstor Arcserve Backup 11Broadcom Brightstor Arcserve Backup 9.01Broadcom Etrust Ez Antivirus 6.1Broadcom Etrust Ez Antivirus 7Broadcom Etrust Intrusion Detection 3.0Ca Etrust Intrusion Detection 3.0Broadcom Unicenter Network And Systems Management 11Broadcom Unicenter Network And Systems Management 11.1Broadcom Anti-virus For The Enterprise 7.0Broadcom Anti-virus For The Enterprise 7.1Broadcom Brightstor Arcserve Backup 11.1Broadcom Brightstor Arcserve Backup 11.5Broadcom Common Services 11.1Broadcom Etrust Antivirus 8Broadcom Etrust Antivirus Gateway 7.1Broadcom Etrust Internet Security Suite 2Broadcom Etrust Intrusion Detection 2.0Broadcom Secure Content Manager 8.0Broadcom Threat Manager 8Broadcom Anti Virus Sdk
NA
CVE-2007-2864
Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote malicious users to execute arbitrary code via a large invalid value of the coffFiles field in a .CAB file.
Broadcom Brightstor Arcserve Backup 10.5Broadcom Brightstor Arcserve Backup 11Broadcom Common Services 2.2Broadcom Common Services 3.0Broadcom Etrust Ez Armor 1.0Broadcom Etrust Ez Armor 2.0Broadcom Internet Security Suite 3.0Ca Protection Suites R2Ca Protection Suites R3Broadcom Anti-virus For The Enterprise 8Broadcom Common Services 2.0Broadcom Common Services 2.1Broadcom Etrust Ez Antivirus 6.1Broadcom Etrust Ez Antivirus 7.0Broadcom Internet Security Suite 1.0Broadcom Internet Security Suite 2.0Broadcom Common Services 1.0Broadcom Common Services 1.1Broadcom Etrust Antivirus Gateway 7.1Broadcom Etrust Antivirus SdkCa Etrust Secure Content Manager 8.0Broadcom Integrated Threat Management 8.0
8.8
CVSSv3
CVE-2022-23302
JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the configuration references an LDAP service the attacker has access to. The attacker can provide a TopicConnectionFactoryBi...
Apache Log4jNetapp Snapmanager -Broadcom Brocade Sannav -Qos Reload4jOracle Weblogic Server 12.2.1.3.0Oracle Business Intelligence 12.2.1.3.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Jdeveloper 12.2.1.3.0Oracle Identity Management Suite 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0Oracle Weblogic Server 12.2.1.4.0Oracle Weblogic Server 14.1.1.0.0Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Communications Network Integrity 7.3.6Oracle Business Process Management Suite 12.2.1.4.0Oracle Advanced Supply Chain Planning 12.2Oracle Advanced Supply Chain Planning 12.1Oracle Communications Unified Inventory Management 7.4.1Oracle Enterprise Manager Base Platform 13.5.0.0Oracle Communications Messaging Server 8.1Oracle Business Intelligence 5.9.0.0.0Oracle Healthcare Foundation 8.1.0
9.8
CVSSv3
CVE-2022-23305
By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout. The message converter, %m, is likely to always be included. This allows malicious users to manipulate the SQL by ent...
Apache Log4jNetapp Snapmanager -Broadcom Brocade Sannav -Qos Reload4jOracle Weblogic Server 12.2.1.3.0Oracle Business Intelligence 12.2.1.3.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Jdeveloper 12.2.1.3.0Oracle Identity Management Suite 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0Oracle Weblogic Server 12.2.1.4.0Oracle Weblogic Server 14.1.1.0.0Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Communications Network Integrity 7.3.6Oracle Business Process Management Suite 12.2.1.4.0Oracle Advanced Supply Chain Planning 12.2Oracle Advanced Supply Chain Planning 12.1Oracle Communications Unified Inventory Management 7.4.1Oracle Enterprise Manager Base Platform 13.5.0.0Oracle Communications Messaging Server 8.1Oracle Business Intelligence 5.9.0.0.0Oracle Healthcare Foundation 8.1.0
7.5
CVSSv3
CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Ietf Http 2.0Nghttp2 Nghttp2Netty NettyEnvoyproxy Envoy 1.27.0Envoyproxy Envoy 1.26.4Envoyproxy Envoy 1.25.9Envoyproxy Envoy 1.24.10Eclipse JettyCaddyserver CaddyGolang Http2Golang GoGolang NetworkingF5 Big-ip AnalyticsF5 Big-ip Policy Enforcement ManagerF5 Big-ip Local Traffic ManagerF5 Big-ip Link ControllerF5 Big-ip Global Traffic ManagerF5 Big-ip Fraud Protection ServiceF5 Big-ip Domain Name SystemF5 Big-ip Application Security ManagerF5 Big-ip Application Acceleration ManagerF5 Big-ip Advanced Firewall Manager
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook