Ca

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2010-1222 1Ca 3Xosoft Content Distribution Xosoft High AvailabilityXosoft Replication Apr 29, 2026 Apr 7, 2010 N/A· v4 N/A· v3 5.0 MEDIUM· v2 CA XOsoft r12.5 does not properly perform authentication, which allows remote attackers to obtain potentially sensitive information via a SOAP request.
CVE-2010-1221 1Ca 3Xosoft Content Distribution Xosoft High AvailabilityXosoft Replication Apr 29, 2026 Apr 7, 2010 N/A· v4 N/A· v3 5.0 MEDIUM· v2 CA XOsoft r12.0 and r12.5 does not properly perform authentication, which allows remote attackers to enumerate usernames via a SOAP request.
CVE-2010-0640 1Ca 1Ehealth Performance Manager Apr 29, 2026 Feb 24, 2010 N/A· v4 N/A· v3 2.6 LOW· v2 Cross-site scripting (XSS) vulnerability in CA eHealth Performance Manager 6.0.x through 6.2.x, when malicious HTML detection is disabled, allows remote attackers to inject arbitrary web script or HTML via a crafted requ...Show more Cross-site scripting (XSS) vulnerability in CA eHealth Performance Manager 6.0.x through 6.2.x, when malicious HTML detection is disabled, allows remote attackers to inject arbitrary web script or HTML via a crafted request.Show less
CVE-2009-4149 1Ca 1Service Desk Apr 23, 2026 Dec 9, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the web interface in CA Service Desk 12.1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter.
CVE-2009-4225 1Ca 1Etrust Pestpatrole Ppctl.dll Activex Apr 23, 2026 Dec 8, 2009 N/A· v4 N/A· v3 9.3 HIGH· v2 Stack-based buffer overflow in the PestPatrol ActiveX control (ppctl.dll) 5.6.7.9 in CA eTrust PestPatrol allows remote attackers to execute arbitrary code via a long argument to the Initialize method.
CVE-2009-3588 2Broadcom Ca 33Anti Virus Anti VirusAnti Virus For The Enterprise+30 more Apr 23, 2026 Oct 13, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; In...Show more Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service via a crafted RAR archive file that triggers stack corruption, a different vulnerability than CVE-2009-3587.Show less
CVE-2009-3587 2Broadcom Ca 32Anti Virus Anti VirusAnti Virus For The Enterprise+29 more Apr 23, 2026 Oct 13, 2009 N/A· v4 N/A· v3 9.3 HIGH· v2 Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; In...Show more Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted RAR archive file that triggers heap corruption, a different vulnerability than CVE-2009-3588.Show less
CVE-2009-2740 1Ca 1Host Based Intrusion Prevention System Apr 23, 2026 Aug 19, 2009 N/A· v4 N/A· v3 5.0 MEDIUM· v2 kmxIds.sys before 7.3.1.18 in CA Host-Based Intrusion Prevention System (HIPS) 8.1 allows remote attackers to cause a denial of service (system crash) via a malformed packet.
CVE-2009-0682 1Ca 1Internet Security Suite Apr 23, 2026 Aug 19, 2009 N/A· v4 N/A· v3 2.1 LOW· v2 vetmonnt.sys in CA Internet Security Suite r3, vetmonnt.sys before 9.0.0.184 in Internet Security Suite r4, and vetmonnt.sys before 10.0.0.217 in Internet Security Suite r5 do not properly verify IOCTL calls, which allow...Show more vetmonnt.sys in CA Internet Security Suite r3, vetmonnt.sys before 9.0.0.184 in Internet Security Suite r4, and vetmonnt.sys before 10.0.0.217 in Internet Security Suite r5 do not properly verify IOCTL calls, which allows local users to cause a denial of service (system crash) via a crafted call.Show less
CVE-2009-2026 1Ca 4Advantage Data Transport It Client ManagerSoftware Delivery+1 more Apr 23, 2026 Aug 10, 2009 N/A· v4 N/A· v3 10.0 HIGH· v2 Stack-based buffer overflow in a token searching function in the dtscore library in Data Transport Services in CA Software Delivery r11.2 C1, C2, C3, and SP4; Unicenter Software Delivery 4.0 C3; CA Advantage Data Transpo...Show more Stack-based buffer overflow in a token searching function in the dtscore library in Data Transport Services in CA Software Delivery r11.2 C1, C2, C3, and SP4; Unicenter Software Delivery 4.0 C3; CA Advantage Data Transport 3.0 C1; and CA IT Client Manager r12 allows remote attackers to execute arbitrary code via crafted data.Show less
CVE-2009-1761 1Ca 1Arcserve Backup Apr 23, 2026 Jun 16, 2009 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The message engine in CA ARCserve Backup r12.0 and r12.0 SP1 for Windows allows remote attackers to cause a denial of service (crash) via (1) an invalid 0x13 message, which is not properly handled in the ASCORE module, o...Show more The message engine in CA ARCserve Backup r12.0 and r12.0 SP1 for Windows allows remote attackers to cause a denial of service (crash) via (1) an invalid 0x13 message, which is not properly handled in the ASCORE module, or (2) a 0x3B message with invalid stub data that triggers an RPC marshalling error.Show less
CVE-2009-0042 2Broadcom Ca 19Anti Spyware Anti Spyware For The EnterpriseAnti Virus+16 more Apr 23, 2026 Jan 28, 2009 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterprise 7.1, r8, and r8.1; Anti-Virus 2007 v8 and 2008; Internet Security S...Show more Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterprise 7.1, r8, and r8.1; Anti-Virus 2007 v8 and 2008; Internet Security Suite 2007 v3 and 2008; and other CA products allow remote attackers to bypass virus detection via a malformed archive file.Show less
CVE-2009-0043 1Ca 2Service Level Management Service Metric Analysis Apr 23, 2026 Jan 8, 2009 N/A· v4 N/A· v3 10.0 HIGH· v2 The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not properly restrict access, which allows remote attackers to execute arbitrary commands via unspecified v...Show more The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not properly restrict access, which allows remote attackers to execute arbitrary commands via unspecified vectors.Show less
CVE-2008-5415 2Broadcom Ca 2Arcserve Backup Arcserve Backup Apr 23, 2026 Dec 11, 2008 N/A· v4 N/A· v3 10.0 HIGH· v2 The LDBserver service in the server in CA ARCserve Backup 11.1 through 12.0 on Windows allows remote attackers to execute arbitrary code via a handle_t argument to an RPC endpoint in which the argument refers to an incom...Show more The LDBserver service in the server in CA ARCserve Backup 11.1 through 12.0 on Windows allows remote attackers to execute arbitrary code via a handle_t argument to an RPC endpoint in which the argument refers to an incompatible procedure.Show less
CVE-2008-4400 2Broadcom Ca 5Arcserve Backup Arcserve BackupBusiness Protection Suite+2 more Apr 23, 2026 Oct 14, 2008 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Unspecified vulnerability in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of service (crash of multiple services) via crafted authe...Show more Unspecified vulnerability in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of service (crash of multiple services) via crafted authentication credentials, related to "insufficient validation."Show less
CVE-2008-4399 2Broadcom Ca 5Arcserve Backup Arcserve BackupBusiness Protection Suite+2 more Apr 23, 2026 Oct 14, 2008 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Unspecified vulnerability in the database engine service in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of service (crash) via a c...Show more Unspecified vulnerability in the database engine service in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of service (crash) via a crafted request, related to "insufficient validation."Show less
CVE-2008-4398 2Broadcom Ca 5Arcserve Backup Arcserve BackupBusiness Protection Suite+2 more Apr 23, 2026 Oct 14, 2008 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Unspecified vulnerability in the tape engine service in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of service (crash) via a craft...Show more Unspecified vulnerability in the tape engine service in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of service (crash) via a crafted request.Show less
CVE-2008-4397 2Broadcom Ca 5Arcserve Backup Arcserve BackupBusiness Protection Suite+2 more Apr 23, 2026 Oct 14, 2008 N/A· v4 N/A· v3 10.0 HIGH· v2 Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to execute arbitrary commands via a .. (dot dot...Show more Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to execute arbitrary commands via a .. (dot dot) in an RPC call with opnum 0x10A.Show less
CVE-2008-4119 2Broadcom Ca 2Cmdb Service Desk Apr 23, 2026 Sep 27, 2008 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in CA Service Desk 11.2 and CMDB 11.0 through 11.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "multiple web forms."
CVE-2008-2926 2Broadcom Ca 5Host Based Intrusion Prevention System Internet Security SuiteInternet Security Suite 2008+2 more Apr 23, 2026 Aug 12, 2008 N/A· v4 N/A· v3 7.2 HIGH· v2 The kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Suite and Personal Firewall, does not properly verify IOCTL requests, which allows local users to cause a denia...Show more The kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Suite and Personal Firewall, does not properly verify IOCTL requests, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted request.Show less

Previous 1 2 345 6 7 Next