Skip to content
Noroxi

Marvell records

40 published records for vendor marvell.

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 2.5%
Pre-auth RCE
6
With a fix record
2.5%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 20
  3. 21
  4. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

40 records
  • CVE-2025-6793
    60This week

    Marvell QConvergeConsole QLogicDownloadImpl Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability

    CriticalCVSS 9.4WeaponizedEPSS 17%

    marvell · qconvergeconsoleJul 7, 2025

  • CVE-2020-15643
    53Plan

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64.

    HighCVSS 8.8No exploitEPSS 58%

    marvell · qconvergeconsoleAug 25, 2020

  • CVE-2020-15639
    42Plan

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64.

    CriticalCVSS 9.8No exploitEPSS 11%

    marvell · qconvergeconsoleAug 25, 2020

  • CVE-2019-13581
    40Plan

    An issue was discovered in Marvell 88W8688 Wi-Fi firmware before version p52, as used on Tesla Model S/X vehicles manufactured before March

    CriticalCVSS 9.8No exploitEPSS 3%

    marvell · 88w8688 firmwareNov 15, 2019

  • CVE-2019-13582
    40Plan

    An issue was discovered in Marvell 88W8688 Wi-Fi firmware before version p52, as used on Tesla Model S/X vehicles manufactured before March

    CriticalCVSS 9.8No exploitEPSS 2%

    marvell · 88w8688 firmwareNov 15, 2019

  • CVE-2008-4594
    40Plan

    Unspecified vulnerability in the SNMPv3 component in Linksys WAP4400N firmware 1.2.14 on the Marvell Semiconductor 88W8361P-BEM1 chipset has

    CriticalCVSS 10.0No exploitEPSS 1%

    linksys · wap400nOct 17, 2008

  • CVE-2025-6794
    39Monitor

    Marvell QConvergeConsole saveAsText Directory Traversal Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    marvell · qconvergeconsoleJul 7, 2025

  • CVE-2025-6802
    39Monitor

    Marvell QConvergeConsole getFileFromURL Unrestricted File Upload Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    marvell · qconvergeconsoleJul 7, 2025

  • CVE-2020-15645
    38Monitor

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64.

    HighCVSS 8.8No exploitEPSS 10%

    marvell · qconvergeconsoleAug 25, 2020

  • CVE-2020-17387
    38Monitor

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64.

    HighCVSS 8.8No exploitEPSS 10%

    marvell · qconvergeconsoleAug 25, 2020

  • CVE-2020-17389
    38Monitor

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64.

    HighCVSS 8.8No exploitEPSS 10%

    marvell · qconvergeconsoleAug 25, 2020

  • CVE-2020-15644
    38Monitor

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64.

    HighCVSS 8.8No exploitEPSS 9%

    marvell · qconvergeconsoleAug 25, 2020

  • CVE-2020-17388
    37Monitor

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64.

    HighCVSS 8.8No exploitEPSS 7%

    marvell · qconvergeconsoleAug 25, 2020

  • CVE-2020-15642
    37Monitor

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of installations of Marvell QConvergeConsole

    HighCVSS 8.8No exploitEPSS 7%

    marvell · qconvergeconsoleAug 25, 2020

  • CVE-2019-6496
    37Monitor

    The ThreadX-based firmware on Marvell Avastar Wi-Fi devices, models 88W8787, 88W8797, 88W8801, 88W8897, and 88W8997, allows remote attackers

    HighCVSS 8.8No exploitEPSS 6%

    marvell · 88w8787 firmwareJan 20, 2019

  • CVE-2025-8426
    37Monitor

    Marvell QConvergeConsole compressConfigFiles Directory Traversal Information Disclosure and Denial-of-Service Vulnerability

    CriticalCVSS 9.4No exploitEPSS 1%

    marvell · qconvergeconsoleJul 31, 2025

  • CVE-2025-6798
    36Monitor

    Marvell QConvergeConsole deleteAppFile Directory Traversal Arbitrary File Deletion Vulnerability

    CriticalCVSS 9.1No exploitEPSS 1%

    marvell · qconvergeconsoleJul 7, 2025

  • CVE-2025-6805
    36Monitor

    Marvell QConvergeConsole deleteEventLogFile Directory Traversal Arbitrary File Deletion Vulnerability

    CriticalCVSS 9.1No exploitEPSS 1%

    marvell · qconvergeconsoleJul 7, 2025

  • CVE-2020-5805
    35Monitor

    In Marvell QConvergeConsole GUI <= 5.5.0.74, credentials are stored in cleartext in tomcat-users.xml.

    HighCVSS 8.8No exploitEPSS 0%

    marvell · qconvergeconslole guiJan 8, 2021

  • CVE-2020-5803
    33Monitor

    Relative Path Traversal in Marvell QConvergeConsole GUI 5.5.0.74 allows a remote, authenticated attacker to delete arbitrary files on disk a

    HighCVSS 8.1No exploitEPSS 1%

    marvell · qconvergeconsoleDec 18, 2020

  • CVE-2020-5804
    33Monitor

    Marvell QConvergeConsole GUI <= 5.5.0.74 is affected by a path traversal vulnerability.

    HighCVSS 8.1No exploitEPSS 1%

    marvell · qconvergeconslole guiJan 8, 2021

  • CVE-2020-15641
    31Monitor

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Marvell QConvergeConsole 5.5.0.64.

    HighCVSS 7.5No exploitEPSS 3%

    marvell · qconvergeconsoleAug 25, 2020

  • CVE-2020-15640
    31Monitor

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Marvell QConvergeConsole 5.5.0.64.

    HighCVSS 7.5No exploitEPSS 3%

    marvell · qconvergeconsoleAug 25, 2020

  • CVE-2015-5738
    31Monitor

    The RSA-CRT implementation in the Cavium Software Development Kit (SDK) 2.x, when used on OCTEON II CN6xxx Hardware on Linux to support TLS

    HighCVSS 7.5No exploitEPSS 2%

    marvell · software development kitJul 26, 2016

  • CVE-2025-6797
    30Monitor

    Marvell QConvergeConsole getFileUploadBytes Directory Traversal Information Disclosure Vulnerability

    HighCVSS 7.5No exploitEPSS 1%

    marvell · qconvergeconsoleJul 7, 2025