| CVE-2019-16207 | HOCH7.8 | Brocade SANnav versions before v2.0 use a hard-coded password, which could allow local authenticated attackers to access a back-end database and gain privileges. | 08/11/2019 |
| CVE-2019-16206 | MITTEL5.5 | The authentication mechanism, in Brocade SANnav versions before v2.0, logs plaintext account credentials at the ‘trace’ and the 'debug' logging level; which could allow a local authenticated attacker to access sensitive information. | 08/11/2019 |
| CVE-2019-16205 | HOCH8.8 | A vulnerability, in Brocade SANnav versions before v2.0, could allow remote attackers to brute-force a valid session ID. The vulnerability is due to an insufficiently random session ID for several post-authentication actions in the SANnav portal. | 08/11/2019 |
| CVE-2019-13657 | HOCH8.8 | CA Performance Management 3.5.x, 3.6.x before 3.6.9, and 3.7.x before 3.7.4 have a default credential vulnerability that can allow a remote attacker to execute arbitrary commands and compromise system security. | 17/10/2019 |
| CVE-2019-11284 | HOCH8.6 | Pivotal Reactor Netty, versions prior to 0.8.11, passes headers through redirects, including authorization ones. A remote unauthenticated malicious user may gain access to credentials for a different server than they have access to. | 17/10/2019 |
| CVE-2019-13658 | KRITISCH9.8 | CA Network Flow Analysis 9.x and 10.0.x have a default credential vulnerability that can allow a remote attacker to execute arbitrary commands and compromise system security. | 02/10/2019 |
| CVE-2019-13656 | KRITISCH9.8 | An access vulnerability in CA Common Services DIA of CA Technologies Client Automation 14 and Workload Automation AE 11.3.5, 11.3.6 allows a remote attacker to execute arbitrary code. | 06/09/2019 |
| CVE-2018-18371 | MITTEL6.5 | The ASG/ProxySG FTP proxy WebFTP mode allows intercepting FTP connections where a user accesses an FTP server via a ftp:// URL in a web browser. An information disclosure vulnerability in the WebFTP mode allows a malicious user to obtain plaintext authentication credentials for a remote FTP server from the ASG/ProxySG' | 30/08/2019 |
| CVE-2018-18370 | MITTEL6.1 | The ASG/ProxySG FTP proxy WebFTP mode allows intercepting FTP connections where a user accesses an FTP server via a ftp:// URL in a web browser. A stored cross-site scripting (XSS) vulnerability in the WebFTP mode allows a remote attacker to inject malicious JavaScript code in ASG/ProxySG's web listing of a remote FTP | 30/08/2019 |
| CVE-2019-7392 | KRITISCH9.1 | An improper authentication vulnerability in CA Privileged Access Manager 3.x Web-UI jk-manager and jk-status allows a remote attacker to gain sensitive information or alter configuration. | 26/02/2019 |
| CVE-2019-8381 | HOCH7.8 | An issue was discovered in Tcpreplay 4.3.1. An invalid memory access occurs in do_checksum in checksum.c. It can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact. | 17/02/2019 |
| CVE-2019-8377 | HOCH7.8 | An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_ipv6_l4proto() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified oth | 17/02/2019 |
| CVE-2019-8376 | HOCH7.8 | An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_layer4_v6() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other | 17/02/2019 |
| CVE-2019-6504 | MITTEL6.1 | Insufficient output sanitization in the Automic Web Interface (AWI), in CA Automic Workload Automation 12.0 to 12.2, allow attackers to potentially conduct persistent cross site scripting (XSS) attacks via a crafted object. | 06/02/2019 |
| CVE-2018-19635 | KRITISCH9.8 | CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to escalate privileges in the user interface. | 22/01/2019 |
| CVE-2018-19634 | HOCH7.5 | CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to access survey information. | 22/01/2019 |
| CVE-2019-3774 | KRITISCH9.8 | Spring Batch versions 3.0.9, 4.0.1, 4.1.0, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources. | 18/01/2019 |
| CVE-2019-3773 | KRITISCH9.8 | Spring Web Services, versions 2.4.3, 3.0.4, and older unsupported versions of all three projects, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources. | 18/01/2019 |
| CVE-2018-20553 | HOCH7.8 | Tcpreplay before 4.3.1 has a heap-based buffer over-read in get_l2len in common/get.c. | 28/12/2018 |
| CVE-2018-20552 | HOCH7.8 | Tcpreplay before 4.3.1 has a heap-based buffer over-read in packet2tree in tree.c. | 28/12/2018 |