Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote authenticated a…Check if you run itEPSS 0.31%Oct 8, 2026
- Medium5.3An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions before 3.5.0 to enumerate the configuration details…Check if you run itEPSS 0.15%Oct 8, 2026
- High7.6An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0.Check if you run itEPSS 0.10%Oct 8, 2026
- High7.7When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal sequences…Check if you run itEPSS 0.31%Oct 8, 2026
- High7.0Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer.Check if you run itEPSS 0.09%Oct 8, 2026
- High8.6A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0.Check if you run itEPSS 0.24%Oct 8, 2026
- High8.4A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the software binaries to secure sensit…Check if you run itEPSS 0.10%Oct 8, 2026
- Medium5.6A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the server hosti…Check if you run itEPSS 0.07%Oct 8, 2026
- High8.7A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0.Check if you run itEPSS 0.22%Oct 8, 2026
- UnknownMalicious code in kiyoramarkets (npm)Open the advisoryOct 8, 2026
- High7.7An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform.Check if you run itEPSS 0.19%Oct 8, 2026
- High8.5An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an aut…Check if you run itEPSS 1.46%Oct 8, 2026
- Medium5.4An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session termination on Brocade Fabric OS…Check if you run itEPSS 3.10%Oct 8, 2026
- Medium5.4An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.Check if you run itEPSS 0.61%Oct 8, 2026
- High8.5A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1.Check if you run itEPSS 0.12%Oct 8, 2026
- Medium6.5In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL paths, aiding unauthenticated attackers to per…Check if you run itEPSS 0.16%Oct 8, 2026
- High8.5An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.Check if you run itEPSS 0.21%Oct 8, 2026
- High8.4An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.Check if you run itEPSS 0.18%Oct 8, 2026
- High7.3An OS command injection vulnerability exists in the configuration management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.Check if you run itEPSS 0.66%Oct 8, 2026
- High7.0An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.Check if you run itEPSS 1.79%Oct 8, 2026
- High8.4An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.Check if you run itEPSS 0.18%Oct 8, 2026
- High8.6An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.Check if you run itEPSS 2.57%Oct 8, 2026
- Low2.1A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1.Check if you run itEPSS 0.11%Oct 8, 2026
- Medium6.8A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First (FSPF) protocol component…Check if you run itEPSS 0.14%Oct 8, 2026
- High7.5Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and Accounting) integration framework…Check if you run itEPSS 0.39%Oct 8, 2026