Lucene search
+L

5192 matches found

OSV
OSV
added 2019/12/17 9:15 p.m.4 views

CVE-2019-17337

The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a vulnerability that theoretically allows an attacker to perform a reflected cross-site scripting XSS attack. Affected releases are TIBCO Software Inc.'...

5.4CVSS6.6AI score0.00727EPSS
SaveExploits0References2
NVD
NVD
added 2019/12/17 9:15 p.m.25 views

CVE-2019-17336

The Data access layer component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains multiple vulnerabilities that theoretically allow an attacker access to information that can lead to obtaining credentials used to access Spotfire data...

7.7CVSS6.8AI score0.00883EPSS
SaveExploits0References2
Prion
Prion
added 2019/12/17 9:15 p.m.12 views

Cross site scripting

The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a vulnerability that theoretically allows an attacker to perform a reflected cross-site scripting XSS attack. Affected releases are TIBCO Software Inc.'...

4.3CVSS5.3AI score0.00727EPSS
SaveExploits0References2Affected Software2
Prion
Prion
added 2019/12/17 9:15 p.m.16 views

Design/Logic Flaw

The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotfire Desktop, and TIBCO Spotfire Desktop Language Packs contains a vulnerability that theoretically allows an attacker with...

6CVSS7.9AI score0.00962EPSS
SaveExploits0References2Affected Software5
Prion
Prion
added 2019/12/17 9:15 p.m.20 views

Design/Logic Flaw

The Data access layer component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains multiple vulnerabilities that theoretically allow an attacker access to information that can lead to obtaining credentials used to access Spotfire data...

4CVSS6.6AI score0.00883EPSS
SaveExploits0References2Affected Software2
Prion
Prion
added 2019/12/17 9:15 p.m.11 views

Design/Logic Flaw

The Data access layer component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains multiple vulnerabilities that theoretically allow an attacker access to data cached from a data source, or a portion of a data source, that the attacke...

4CVSS6.7AI score0.00796EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2019/12/17 8:55 p.m.34 views

CVE-2019-17337 TIBCO Spotfire Server Library Vulnerable to Reflected Cross-Site Scripting

The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a vulnerability that theoretically allows an attacker to perform a reflected cross-site scripting XSS attack. Affected releases are TIBCO Software Inc.'...

8.1CVSS5.4AI score0.00727EPSS
SaveExploits0References2
CVE
CVE
added 2019/12/17 8:55 p.m.60 views

CVE-2019-17336

CVE-2019-17336 affects TIBCO Spotfire Data Access Layer in Spotfire Analytics Platform for AWS Marketplace (v10.6.0) and Spotfire Server (multiple versions up to 7.14.x and 10.x up to 10.6.0). The issue consists of information-disclosure vulnerabilities that could allow an attacker, with privileg...

7.7CVSS6.8AI score0.00883EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2019/12/17 8:55 p.m.32 views

CVE-2019-17336 TIBCO Spotfire Web Player Potentially Exposes Credentials For Shared Data Sources

The Data access layer component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains multiple vulnerabilities that theoretically allow an attacker access to information that can lead to obtaining credentials used to access Spotfire data...

7.7CVSS6.7AI score0.00883EPSS
SaveExploits0References2
CVE
CVE
added 2019/12/17 8:55 p.m.46 views

CVE-2019-17337

CVE-2019-17337 describes a reflected cross-site scripting vulnerability in the Spotfire library component of TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server. Affected products and versions include: Spotfire Analytics Platform for AWS Marketplace 10.6.0; Spotfire Se...

8.1CVSS5.7AI score0.00727EPSS
SaveExploits0References2Affected Software2
CVE
CVE
added 2019/12/17 8:55 p.m.55 views

CVE-2019-17335

The CVE-2019-17335 issue affects TIBCO Spotfire Analytics Platform for AWS Marketplace (v10.6.0) and TIBCO Spotfire Server (7.11.7 and older; 7.12.0–7.14.0; 10.0.0–10.6.0). The data access layer could allow an attacker with library save privileges to access data cached from a data source or part ...

6.5CVSS6.1AI score0.00796EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2019/12/17 8:55 p.m.22 views

CVE-2019-17335 TIBCO Spotfire Server Exposes User-Specific Cached Data To Others Users

The Data access layer component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains multiple vulnerabilities that theoretically allow an attacker access to data cached from a data source, or a portion of a data source, that the attacke...

5.3CVSS6.7AI score0.00796EPSS
SaveExploits0References2
Symantec
Symantec
added 2019/12/17 12:0 a.m.30 views

Multiple TIBCO Spotfire Products CVE-2019-17336 Multiple Information Disclosure Vulnerabilities

Description Multiple TIBCO Spotfire Products are prone to multiple information-disclosure vulnerabilities. An attacker can exploit these issues to obtain sensitive information. That may aid in further attacks. The following products are affected: TIBCO Spotfire Analytics Platform for AWS...

0.7AI score0.00883EPSS
SaveExploits0References1Affected Software2
Photon
Photon
added 2019/12/17 12:0 a.m.54 views

Important Photon OS Security Update - PHSA-2019-3.0-0046

Updates of 'linux', 'linux-secure', 'linux-esx', 'logstash', 'linux-aws' packages of Photon OS have been released...

7.8CVSS6.7AI score0.06623EPSS
SaveExploits1
Prion
Prion
added 2019/12/16 9:15 p.m.21 views

Privilege escalation

A privilege escalation vulnerability in the Trend Micro Deep Security as a Service Quick Setup cloud formation template could allow an authenticated entity with certain unrestricted AWS execution privileges to escalate to full privileges within the target AWS account...

6.5CVSS8.8AI score0.02185EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2019/12/16 9:0 p.m.22 views

CVE-2019-18191

A privilege escalation vulnerability in the Trend Micro Deep Security as a Service Quick Setup cloud formation template could allow an authenticated entity with certain unrestricted AWS execution privileges to escalate to full privileges within the target AWS account...

8.9AI score0.02185EPSS
SaveExploits0References1
CVE
CVE
added 2019/12/16 9:0 p.m.71 views

CVE-2019-18191

The CVE-2019-18191 entry concerns Trend Micro Deep Security as a Service Quick Setup cloud formation template. The vulnerability enables privilege escalation where an authenticated entity with certain unrestricted AWS execution privileges can gain full privileges within the target AWS account. Do...

8.8CVSS8.8AI score0.02185EPSS
SaveExploits0References1Affected Software1
Photon
Photon
added 2019/12/16 12:0 a.m.48 views

Important Photon OS Security Update - PHSA-2019-0046

Updates of 'logstash', 'linux-esx', 'linux', 'linux-secure', 'linux-aws' packages of Photon OS have been released...

7.8CVSS1.7AI score0.06623EPSS
SaveExploits1
Kitploit
Kitploit
added 2019/12/14 11:30 a.m.241 views

CyberRange - The Open-Source AWS Cyber Range

This CyberRange project represents the first open-source Cyber Range blueprint in the world. This project provides a bootstrap framework for a complete offensive, defensive, reverse engineering, & security intelligence tooling in a private research lab using the AWS Cloud. This project contains...

7.5AI score
SaveExploits0References5
Photon
Photon
added 2019/12/14 12:0 a.m.47 views

Important Photon OS Security Update - PHSA-2019-0194

Updates of 'linux-aws', 'linux-secure', 'logstash', 'linux-esx', 'linux' packages of Photon OS have been released...

7.8CVSS1.7AI score0.00738EPSS
SaveExploits2
Rows per page
Query Builder