Skip to content
Noroxi

Broadcom records

825 published records for vendor Broadcom. 5 of them have been exploited in the wild (listed in CISA KEV) and 26 have a ready-made attack tool.

Filter by product ↓

Researcher profile

Entered KEV
5 · 0.6%
Weaponized
26 · 3.2%
Pre-auth RCE
101
With a fix record
35.9%
Median publish → KEV
1444 days

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23
  9. 24
  10. 25
  11. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

825 records
  • CVE-2018-1273
    98Now

    Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerabilit

    CriticalCVSS 9.8KEVWeaponizedEPSS 96%

    broadcom · spring data commonsApr 11, 2018

  • CVE-2021-40438
    96Now

    A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user.

    CriticalCVSS 9.0KEVWeaponizedEPSS 99%

    resf · rocky linuxSep 16, 2021

  • CVE-2014-0160
    90Now

    The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows rem

    HighCVSS 7.5KEVWeaponizedEPSS 99%

    openssl · opensslApr 7, 2014

  • CVE-2021-22555
    85Now

    Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE

    HighCVSS 7.8KEVWeaponizedEPSS 78%

    linux · linux kernelJul 7, 2021

  • CVE-2010-0425
    68This week

    modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7, w

    CriticalCVSS 10.0WeaponizedEPSS 94%

    apache · http serverMar 5, 2010

  • CVE-2011-1653
    67This week

    Multiple SQL injection vulnerabilities in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 allow remote atta

    CriticalCVSS 10.0WeaponizedEPSS 88%

    broadcom · total defenseApr 18, 2011

  • CVE-2008-4397
    64This week

    Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 throu

    CriticalCVSS 10.0WeaponizedEPSS 80%

    ca · arcserve backupOct 14, 2008

  • CVE-2007-0449
    64This week

    Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1 SP1, Mobile Backup r

    CriticalCVSS 10.0WeaponizedEPSS 79%

    broadcom · brightstor arcserve backup laptops desktopsJan 23, 2007

  • CVE-2025-1976
    64This week

    Code injection exposure in Fabric OS 9.1.0 through 9.1.1d6

    HighCVSS 8.6KEVWeaponizedEPSS 0%

    broadcom · fabric operating systemApr 23, 2025

  • CVE-2007-2139
    63This week

    Multiple stack-based buffer overflows in the SUN RPC service in CA (formerly Computer Associates) BrightStor ARCserve Media Server, as used

    CriticalCVSS 10.0WeaponizedEPSS 77%

    ca · brightstor arcserve backupApr 25, 2007

  • CVE-2005-2668
    63This week

    Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_

    CriticalCVSS 10.0WeaponizedEPSS 75%

    ca · etrust adminAug 23, 2005

  • CVE-2020-8012
    62This week

    CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a buffer overflow vulnerability in the robot (c

    CriticalCVSS 9.8WeaponizedEPSS 77%

    broadcom · unified infrastructure managementFeb 18, 2020

  • CVE-2006-6076
    62This week

    Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows rem

    CriticalCVSS 10.0WeaponizedEPSS 72%

    ca · brightstor arcserve backupNov 24, 2006

  • CVE-2005-0260
    61This week

    Stack-based buffer overflow in the Discovery Service for BrightStor ARCserve Backup 11.1 and earlier allows remote attackers to execute arbi

    CriticalCVSS 10.0WeaponizedEPSS 69%

    broadcom · brightstor arcserve backupMay 2, 2005

  • CVE-2007-5003
    60This week

    Multiple stack-based buffer overflows in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 al

    CriticalCVSS 10.0WeaponizedEPSS 67%

    ca · protection suitesOct 1, 2007

  • CVE-2020-8010
    60This week

    CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the r

    CriticalCVSS 9.8WeaponizedEPSS 50%

    broadcom · unified infrastructure managementFeb 18, 2020

  • CVE-2022-23305
    59Plan

    SQL injection in JDBC Appender in Apache Log4j V1

    CriticalCVSS 9.8Proof of conceptEPSS 66%

    apache · log4jJan 18, 2022

  • CVE-2017-9417
    59Plan

    Broadcom BCM43xx Wi-Fi chips allow remote attackers to execute arbitrary code via unspecified vectors, aka the "Broadpwn" issue.

    CriticalCVSS 9.8Proof of conceptEPSS 66%

    broadcom · bcm43xx wi-fi chipset firmwareJun 4, 2017

  • CVE-2007-5082
    59Plan

    Multiple stack-based buffer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote at

    CriticalCVSS 10.0WeaponizedEPSS 63%

    broadcom · brightstor hierarchical storage managerOct 1, 2007

  • CVE-2022-2068
    58Plan

    The c_rehash script allows command injection

    HighCVSS 7.3No exploitEPSS 96%

    openssl · opensslJun 21, 2022

  • CVE-2007-3216
    58Plan

    Multiple buffer overflows in the LGServer component of CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.1 al

    CriticalCVSS 10.0WeaponizedEPSS 59%

    broadcom · brightstor arcserve backup laptops desktopsJun 14, 2007

  • CVE-2005-2535
    54Plan

    Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to execute arbitrary command

    HighCVSS 7.5WeaponizedEPSS 80%

    broadcom · arcserve backup 2000Aug 10, 2005

  • CVE-2006-5143
    54Plan

    Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve Backup for Windows r1

    HighCVSS 7.5WeaponizedEPSS 79%

    ca · brightstor arcserve backupOct 10, 2006

  • CVE-2022-23302
    54Plan

    Deserialization of untrusted data in JMSSink in Apache Log4j 1.x

    HighCVSS 8.8No exploitEPSS 63%

    apache · log4jJan 18, 2022

  • CVE-2004-1812
    54Plan

    Multiple stack-based buffer overflows in Agent Common Services (1) cam.exe and (2) awservices.exe in Unicenter TNG 2.4 allow remote attacker

    CriticalCVSS 10.0No exploitEPSS 45%

    broadcom · unicenter tngDec 31, 2004