Input Validation and Logic

Every one of the 16 is a mark on the map. Named now: 1 to 16, most at risk first.

1. An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers to execute arbitrary commands.CVE-2015-4664CA Technologies · 20% likely

   CWE-20

2. Unspecified vulnerability in the database engine service in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to…CVE-2008-4399Ca · 8.2% likely

   CWE-20

3. Unspecified vulnerability in the tape engine service in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to caus…CVE-2008-4398Ca · 8.2% likely

   CWE-20

4. CA Workload Control Center before r11.4 SP6 allows remote attackers to execute arbitrary code via a crafted HTTP request.CVE-2018-8954CA Technologies · 7.0% likely

   CWE-20

5. Multiple unspecified vulnerabilities in the CA (1) PSFormX and (2) WebScan ActiveX controls, as distributed on the CA Global Advisor web site until May 2009, allow remote attacker…CVE-2010-2193Ca · 5.9% likely

   CWE-20

6. Unspecified vulnerability in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of service (cras…CVE-2008-4400Ca · 3.4% likely

   CWE-20

7. The Web Agents component in CA SiteMinder R6 before SP6 CR2 and R12 before SP3 CR2 does not properly handle multi-line headers, which allows remote authenticated users to conduct…CVE-2011-1718Ca · 2.4% likely

   CWE-20

8. The message engine in CA ARCserve Backup r12.0 and r12.0 SP1 for Windows allows remote attackers to cause a denial of service (crash) via (1) an invalid 0x13 message, which is not…CVE-2009-1761Ca · 2.2% likely

   CWE-20

9. An input validation vulnerability in CA Privileged Access Manager 2.x allows unprivileged users to execute arbitrary commands by passing specially crafted arguments to the update_…CVE-2018-9023CA Technologies · 1.8% likely

   CWE-20

10. CA Spectrum 10.1 prior to 10.01.02.PTF_10.1.239 and 10.2.x prior to 10.2.3 allows remote attackers to cause a denial of service via unspecified vectors.CVE-2018-6589CA Technologies · 1.7% likely

    CWE-20

11. Open redirect vulnerability in the Administrative Console in CA Arcot WebFort Versatile Authentication Server (VAS) before 6.2.5 allows remote attackers to redirect users to arbit…CVE-2011-1826Ca · 1.4% likely

    CWE-20

12. An input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to poison log files with specially crafted input.CVE-2018-9025CA Technologies · 1.3% likely

    CWE-20

13. The casrvc program in CA Common Services, as used in CA Client Automation 12.8, 12.9, and 14.0; CA SystemEDGE 5.8.2 and 5.9; CA Systems Performance for Infrastructure Managers 12.…CVE-2016-9795Ca · 0.5% likely

    CWE-20

14. The kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Suite and Personal Firewall, does not properly verify IOCTL requests,…CVE-2008-2926Ca · 0.4% likely

    CWE-20

15. CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r1…CVE-2015-3318Ca · 0.4% likely

    CWE-20

16. vetmonnt.sys in CA Internet Security Suite r3, vetmonnt.sys before 9.0.0.184 in Internet Security Suite r4, and vetmonnt.sys before 10.0.0.217 in Internet Security Suite r5 do not…CVE-2009-0682Ca · 0.4% likely

    CWE-20

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.