Threat database

72 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Unrated	–	EPSS 0.6%	CVE-2023-4334LSI Storage Authority (LSA) · Vulnerability UnratedEPSS 0.6%2023-08-15CVE Database V5CVE-2023-4334 Broadcom RAID Controller Web server (nginx) is serving private files without any authentication EPSS 0.6%Vulnerability Broadcom Germany United Kingdom+4	CVE Database V5	2023-08-15
Unrated	–	EPSS 0.7%	CVE-2023-4336LSI Storage Authority (LSA) · Vulnerability UnratedEPSS 0.7%2023-08-15CVE Database V5CVE-2023-4336 Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute EPSS 0.7%Vulnerability Broadcom Germany France+3	CVE Database V5	2023-08-15
Unrated	–	EPSS 0.7%	CVE-2023-4337LSI Storage Authority (LSA) · Vulnerability UnratedEPSS 0.7%2023-08-15CVE Database V5CVE-2023-4337 Broadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation EPSS 0.7%Vulnerability Broadcom Germany United Kingdom+6	CVE Database V5	2023-08-15
Unrated	–	EPSS 0.7%	CVE-2023-4338LSI Storage Authority (LSA) · Vulnerability UnratedEPSS 0.7%2023-08-15CVE Database V5CVE-2023-4338 Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not provide X-Content-Type-Options Headers EPSS 0.7%Vulnerability Broadcom Germany United Kingdom+4	CVE Database V5	2023-08-15
Unrated	–	EPSS 0.8%	CVE-2023-4339LSI Storage Authority (LSA) · Vulnerability UnratedEPSS 0.8%2023-08-15CVE Database V5CVE-2023-4339 Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions EPSS 0.8%Vulnerability Broadcom Germany France+4	CVE Database V5	2023-08-15
Unrated	–	EPSS 0.7%	CVE-2023-4340LSI Storage Authority (LSA) · Vulnerability UnratedEPSS 0.7%2023-08-15CVE Database V5CVE-2023-4340 Broadcom RAID Controller is vulnerable to Privilege escalation by taking advantage of the Session prints in the log file EPSS 0.7%Vulnerability Broadcom Germany France+4	CVE Database V5	2023-08-15
Unrated	–	EPSS 0.7%	CVE-2023-4341LSI Storage Authority (LSA) · Vulnerability UnratedEPSS 0.7%2023-08-15CVE Database V5CVE-2023-4341 Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI EPSS 0.7%Vulnerability Broadcom Germany United Kingdom+6	CVE Database V5	2023-08-15
Unrated	–	EPSS 0.7%	CVE-2023-4342LSI Storage Authority (LSA) · Vulnerability UnratedEPSS 0.7%2023-08-15CVE Database V5CVE-2023-4342 Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security policy EPSS 0.7%Vulnerability Broadcom Germany France+5	CVE Database V5	2023-08-15
Unrated	–	EPSS 0.6%	CVE-2023-4343LSI Storage Authority (LSA) · Vulnerability UnratedEPSS 0.6%2023-08-15CVE Database V5CVE-2023-4343 Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameter EPSS 0.6%Vulnerability Broadcom Germany France+4	CVE Database V5	2023-08-15
Critical	9.8	EPSS 0.7%	CVE-2023-4344LSI Storage Authority (LSA) · Insufficient Entropy Critical9.8EPSS 0.7%2023-08-15CVE Database V5CVE-2023-4344 Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection EPSS 0.7%Vulnerability Broadcom #cwe-331 Germany+5	CVE Database V5	2023-08-15
Unrated	–	EPSS 0.7%	CVE-2023-4323LSI Storage Authority (LSA) · Vulnerability UnratedEPSS 0.7%2023-08-15CVE Database V5CVE-2023-4323 Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup EPSS 0.7%Vulnerability Broadcom Germany France+4	CVE Database V5	2023-08-15
Unrated	–	EPSS 0.6%	CVE-2023-4345LSI Storage Authority (LSA) · Vulnerability UnratedEPSS 0.6%2023-08-15CVE Database V5CVE-2023-4345 Broadcom RAID Controller web interface is vulnerable client-side control bypass leads to unauthorized data access for low privileged user EPSS 0.6%Vulnerability Broadcom Germany France+5	CVE Database V5	2023-08-15

Showing 61–72 of 72 results