All CVEs — page 258 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
A memory read vulnerability in Brocade Fabric OS web management daemon allows unauthenticated remote attackers to crash the management process through crafted HTTP requests with extreme numerical values in query parameters.
A stack-based buffer overflow in Brocade Fabric OS's IKEv2 handler allows unauthenticated remote attackers to crash data-plane processes by sending oversized Nonce payloads via UDP port 500, affecting FCIP circuits on extension switches or blades.
A critical authorization bypass vulnerability in Brocade Fabric OS allows unauthenticated switches to execute administrative commands on target devices by crafting specific Fibre Channel management requests. This means attackers can gain full administrative control over fabric switches without needing valid credentials.
Multiple stack-based buffer overflows in Brocade Fabric OS REST API allow authenticated attackers to corrupt memory and potentially execute arbitrary code or cause denial-of-service when processing oversized request parameters.
Brocade Fabric OS allows authenticated users to inject OS commands through flawed input validation in management interfaces, potentially enabling arbitrary code execution with elevated privileges.
The Uncanny Automator WordPress plugin is vulnerable to PHP Object Injection due to unsafe deserialization of untrusted data, allowing authenticated attackers to execute arbitrary code and delete files on the server.
A command injection vulnerability in Brocade Fabric OS's REST API allows authenticated users to execute arbitrary system commands, potentially leading to full system compromise. This affects network infrastructure devices that use this operating system.