Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.4A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the software binaries to secure sensit…Check if you run itEPSS 0.10%Oct 8, 2026
- Medium5.6A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the server hosti…Check if you run itEPSS 0.07%Oct 8, 2026
- High8.7A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0.Check if you run itEPSS 0.22%Oct 8, 2026
- UnknownMalicious code in kiyoramarkets (npm)Open the advisoryOct 8, 2026
- High7.7An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform.Check if you run itEPSS 0.19%Oct 8, 2026
- High8.5An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an aut…Check if you run itEPSS 1.46%Oct 8, 2026
- Medium5.4An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session termination on Brocade Fabric OS…Check if you run itEPSS 3.10%Oct 8, 2026
- Medium5.4An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.Check if you run itEPSS 0.61%Oct 8, 2026
- High8.5A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1.Check if you run itEPSS 0.12%Oct 8, 2026
- Medium6.5In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL paths, aiding unauthenticated attackers to per…Check if you run itEPSS 0.16%Oct 8, 2026
- High8.5An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.Check if you run itEPSS 0.21%Oct 8, 2026
- High8.4An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.Check if you run itEPSS 0.18%Oct 8, 2026
- High7.3An OS command injection vulnerability exists in the configuration management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.Check if you run itEPSS 0.66%Oct 8, 2026
- High7.0An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.Check if you run itEPSS 1.79%Oct 8, 2026
- High8.4An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.Check if you run itEPSS 0.18%Oct 8, 2026
- High8.6An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.Check if you run itEPSS 2.57%Oct 8, 2026
- Low2.1A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1.Check if you run itEPSS 0.11%Oct 8, 2026
- Medium6.8A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First (FSPF) protocol component…Check if you run itEPSS 0.14%Oct 8, 2026
- High7.5Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and Accounting) integration framework…Check if you run itEPSS 0.39%Oct 8, 2026
- Medium5.3An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1.Check if you run itEPSS 0.18%Oct 8, 2026
- Medium6.5NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom() implementation.Check if you run itEPSS 1.19%Oct 8, 2026
- Medium6.9An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versions before 10.0.1.Check if you run itEPSS 0.20%Oct 8, 2026
- Medium6.9A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1.Check if you run itEPSS 0.12%Oct 8, 2026
- Unknownvisualcomposer visual_composer_website_builder Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 2.87%Oct 8, 2026
- Medium4.1In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the edit_user capability could create a native Splunk username t…Check if you run itEPSS 0.18%Oct 7, 2026