Skip to content
Noroxi

Broadcom records

698 published records for vendor broadcom.

Researcher profile

Entered KEV
4 · 0.6%
Weaponized
25 · 3.6%
Pre-auth RCE
98
With a fix record
24.8%
Median publish → KEV
760 days

Records by year

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23
  9. 24
  10. 25
  11. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

698 records
  • CVE-2018-1273
    98Now

    Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerabilit

    CriticalCVSS 9.8KEVWeaponizedEPSS 97%

    broadcom · spring data commonsApr 11, 2018

  • CVE-2021-40438
    96Now

    A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user.

    CriticalCVSS 9.0KEVWeaponizedEPSS 100%

    resf · rocky linuxSep 16, 2021

  • CVE-2014-0160
    90Now

    The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows rem

    HighCVSS 7.5KEVWeaponizedEPSS 100%

    openssl · opensslApr 7, 2014

  • CVE-2010-0425
    68This week

    modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7, w

    CriticalCVSS 10.0WeaponizedEPSS 94%

    apache · http serverMar 5, 2010

  • CVE-2011-1653
    67This week

    Multiple SQL injection vulnerabilities in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 allow remote atta

    CriticalCVSS 10.0WeaponizedEPSS 89%

    broadcom · total defenseApr 18, 2011

  • CVE-2008-4397
    64This week

    Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 throu

    CriticalCVSS 10.0WeaponizedEPSS 81%

    ca · arcserve backupOct 14, 2008

  • CVE-2007-0449
    64This week

    Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1 SP1, Mobile Backup r

    CriticalCVSS 10.0WeaponizedEPSS 79%

    broadcom · brightstor arcserve backup laptops desktopsJan 23, 2007

  • CVE-2025-1976
    64This week

    Code injection exposure in Fabric OS 9.1.0 through 9.1.1d6

    HighCVSS 8.6KEVWeaponizedEPSS 1%

    broadcom · fabric operating systemApr 23, 2025

  • CVE-2007-2139
    63This week

    Multiple stack-based buffer overflows in the SUN RPC service in CA (formerly Computer Associates) BrightStor ARCserve Media Server, as used

    CriticalCVSS 10.0WeaponizedEPSS 78%

    ca · brightstor arcserve backupApr 25, 2007

  • CVE-2005-2668
    63This week

    Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_

    CriticalCVSS 10.0WeaponizedEPSS 75%

    ca · etrust adminAug 23, 2005

  • CVE-2020-8012
    62This week

    CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a buffer overflow vulnerability in the robot (c

    CriticalCVSS 9.8WeaponizedEPSS 77%

    broadcom · unified infrastructure managementFeb 18, 2020

  • CVE-2006-6076
    61This week

    Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows rem

    CriticalCVSS 10.0WeaponizedEPSS 71%

    ca · brightstor arcserve backupNov 24, 2006

  • CVE-2005-0260
    61This week

    Stack-based buffer overflow in the Discovery Service for BrightStor ARCserve Backup 11.1 and earlier allows remote attackers to execute arbi

    CriticalCVSS 10.0WeaponizedEPSS 70%

    broadcom · brightstor arcserve backupMay 2, 2005

  • CVE-2007-5003
    60This week

    Multiple stack-based buffer overflows in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 al

    CriticalCVSS 10.0WeaponizedEPSS 67%

    ca · protection suitesOct 1, 2007

  • CVE-2022-23305
    59Plan

    SQL injection in JDBC Appender in Apache Log4j V1

    CriticalCVSS 9.8Proof of conceptEPSS 67%

    apache · log4jJan 18, 2022

  • CVE-2007-5082
    59Plan

    Multiple stack-based buffer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote at

    CriticalCVSS 10.0WeaponizedEPSS 63%

    broadcom · brightstor hierarchical storage managerOct 1, 2007

  • CVE-2022-2068
    58Plan

    The c_rehash script allows command injection

    HighCVSS 7.3No exploitEPSS 95%

    openssl · opensslJun 21, 2022

  • CVE-2017-9417
    58Plan

    Broadcom BCM43xx Wi-Fi chips allow remote attackers to execute arbitrary code via unspecified vectors, aka the "Broadpwn" issue.

    CriticalCVSS 9.8Proof of conceptEPSS 64%

    broadcom · bcm43xx wi-fi chipset firmwareJun 4, 2017

  • CVE-2007-3216
    58Plan

    Multiple buffer overflows in the LGServer component of CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.1 al

    CriticalCVSS 10.0WeaponizedEPSS 59%

    broadcom · brightstor arcserve backup laptops desktopsJun 14, 2007

  • CVE-2005-2535
    54Plan

    Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to execute arbitrary command

    HighCVSS 7.5WeaponizedEPSS 81%

    broadcom · arcserve backup 2000Aug 10, 2005

  • CVE-2006-5143
    54Plan

    Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve Backup for Windows r1

    HighCVSS 7.5WeaponizedEPSS 80%

    ca · brightstor arcserve backupOct 10, 2006

  • CVE-2022-23302
    54Plan

    Deserialization of untrusted data in JMSSink in Apache Log4j 1.x

    HighCVSS 8.8No exploitEPSS 64%

    apache · log4jJan 18, 2022

  • CVE-2020-8010
    54Plan

    CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the r

    CriticalCVSS 9.8WeaponizedEPSS 51%

    broadcom · unified infrastructure managementFeb 18, 2020

  • CVE-2004-1812
    54Plan

    Multiple stack-based buffer overflows in Agent Common Services (1) cam.exe and (2) awservices.exe in Unicenter TNG 2.4 allow remote attacker

    CriticalCVSS 10.0No exploitEPSS 45%

    broadcom · unicenter tngDec 31, 2004

  • CVE-2007-4620
    52Plan

    Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0, and 7.1.758.0

    CriticalCVSS 9.0WeaponizedEPSS 52%

    ca · brightstor arcserve backupApr 7, 2008