Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.0Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer.EPSS 0.1%Oct 8, 2026
- High8.6A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0.EPSS 0.2%Oct 8, 2026
- High8.6Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation.EPSS 0.3%Oct 8, 2026
- High8.6A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0.EPSS 0.2%Oct 8, 2026
- High8.4A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the software binaries to secure sensit…EPSS 0.1%Oct 8, 2026
- High8.7A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0.EPSS 0.2%Oct 8, 2026
- Medium6.9An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versions before 10.0.1.EPSS 0.2%Oct 8, 2026
- Medium6.9A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1.EPSS 0.1%Oct 8, 2026
- High8.7A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1.EPSS 0.6%Oct 8, 2026
- Medium5.3Missing authorization in Media in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensi…EPSS 0.3%Oct 6, 2026
- Medium4.2Use of released resource in Session in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via…EPSS 0.2%Oct 6, 2026
- Medium5.4Improper state validation in Autofill AI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page.EPSS 0.2%Oct 6, 2026
- High8.8Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page.EPSS 0.3%Oct 6, 2026
- Medium6.5Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin poli…EPSS 0.2%Oct 6, 2026
- Medium4.3Confused deputy in DeviceBoundSessionCredentials in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page.EPSS 0.3%Oct 6, 2026
- Medium5.4Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social en…EPSS 0.2%Oct 6, 2026
- Medium5.3Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain s…EPSS 0.2%Oct 6, 2026
- High8.8Incorrect authorization in WebProtect in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information v…EPSS 0.3%Oct 6, 2026
- Medium6.5Information leak in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page.EPSS 0.3%Oct 6, 2026
- Medium4.3Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.EPSS 0.3%Oct 6, 2026
- Medium5.4Clickjacking in EVP in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page.EPSS 0.2%Oct 6, 2026
- Medium4.3Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.EPSS 0.2%Oct 6, 2026
- High8.8Use after free in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.EPSS 0.3%Oct 6, 2026
- High8.8Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.EPSS 0.5%Oct 6, 2026
- High8.8Improper state validation in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…EPSS 0.3%Oct 6, 2026