File and Path Handling

Every one of the 12 is a mark on the map. Named now: 1 to 12, most at risk first.

1. Directory traversal vulnerability in the Heartbeat Web Service in CA.Itm.Server.ManagementWS.dll in the Management Server in CA Total Defense (TD) r12 before SE2 allows remote att…CVE-2011-1654Broadcom · 11% likely

   CWE-22

2. A Directory Traversal vulnerability in FileReceiveServlet in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to upload a m…CVE-2016-8204Broadcom · 7.1% likely

   CWE-22

3. Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical Sy…CVE-2015-8799Broadcom · 5.3% likely

   CWE-22

4. The web console in CA (formerly Computer Associates) eTrust ITM (Threat Manager) 8.1 allows remote attackers to redirect users to arbitrary web sites via a crafted HTTP URL on por…CVE-2007-5437Broadcom · 2.6% likely

   CWE-59

5. Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical Sy…CVE-2015-8798Broadcom · 2.4% likely

   CWE-22

6. In Reactor Netty HTTP Server, versions 1.1.x prior to 1.1.13 and versions 1.0.x prior to 1.0.39, a malicious user can send a request using a specially crafted URL that can lead to…CVE-2023-34062Broadcom · CVSS 7.5 · 1.1% likely

   CWE-22

7. Broadcom Automic Automation Agent Unix privilege escalationCVE-2025-4971Broadcom · CVSS 8.5 · 0.6% likely

   CWE-426

8. CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a Dynamically Linked Shared Object Library. A regular user must create a malicious library…CVE-2021-28246Broadcom · CVSS 7.8 · 0.4% likely

   CWE-426

9. Spectrum directory path traversalCVE-2025-69267Broadcom · CVSS 8.8 · 0.3% likely

   CWE-22

10. This vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected PAM system by uploading a specially crafted upgrade file.CVE-2025-24505Broadcom · CVSS 8.8 · 0.3% likely

    CWE-434

11. Component Object Model (COM) Hijacking in Symantec Endpoint Protection Windows ClientCVE-2025-13919Broadcom · CVSS 4.4 · 0.1% likely

    CWE-427

12. Elevation of Privileges Vulnerability in IT Management SuiteCVE-2025-9059Broadcom · CVSS 8.8 · 0.1% likely

    CWE-427

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.