Design/Logic Flaw

The TIBCO Spotfire authentication component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains a vulnerability in the handling of the authentication that theoretically may allow an attacker to gain full access to a target account,...

CVE-2018-18812

The Spotfire Library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains a vulnerability that might theoretically fail to restrict users with read-only access from modifying files stored in the Spotfire Library, only when th...

Design/Logic Flaw

The Spotfire Library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains a vulnerability that might theoretically fail to restrict users with read-only access from modifying files stored in the Spotfire Library, only when th...

CVE-2018-18813

The Spotfire web server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains multiple vulnerabilities that may allow persistent and reflected cross-site scripting attacks. Affected releases are TIBCO Software Inc. TIBCO...

CVE-2018-18813

The Spotfire web server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains multiple vulnerabilities that may allow persistent and reflected cross-site scripting attacks. Affected releases are TIBCO Software Inc. TIBCO...

Cross site scripting

The Spotfire web server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains multiple vulnerabilities that may allow persistent and reflected cross-site scripting attacks. Affected releases are TIBCO Software Inc. TIBCO...

CVE-2018-18812

The CVE-2018-18812 vulnerability affects TIBCO Spotfire Analytics Platform for AWS Marketplace (and TIBCO Spotfire Server) when using external storage for the Spotfire Library. The issue may theoretically allow users with read-only access to modify files stored in the Spotfire Library, under affe...

CVE-2018-18814

CVE-2018-18814 affects TIBCO Spotfire Analytics Platform for AWS Marketplace (up to 10.0.0) and TIBCO Spotfire Server (up to 7.14.0). The issue is in the authentication handling of the Spotfire authentication component, which could allow an attacker to gain full access to a target account, indepe...

CVE-2018-18812 TIBCO Spotfire Fails To Prevent Write Access to Spotfire Library

The Spotfire Library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains a vulnerability that might theoretically fail to restrict users with read-only access from modifying files stored in the Spotfire Library, only when th...

CVE-2018-18814 TIBCO Spotfire Authentication Vulnerability

The TIBCO Spotfire authentication component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains a vulnerability in the handling of the authentication that theoretically may allow an attacker to gain full access to a target account,...

CVE-2018-18813 TIBCO Spotfire Reflected and Persistent Cross-Site Scripting Vulnerabilities

The Spotfire web server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains multiple vulnerabilities that may allow persistent and reflected cross-site scripting attacks. Affected releases are TIBCO Software Inc. TIBCO...

CVE-2018-18813

CVE-2018-18813 affects TIBCO Spotfire components: Spotfire Analytics Platform for AWS Marketplace (up to 10.0.0) and Spotfire Server (up to 7.10.1; 7.11.0/7.11.1; 7.12.0; 7.13.0; 7.14.0; 10.0.0). The Spotfire web server component contains multiple persistent and reflected cross-site scripting (XS...

Authorization Bypass

openstack-keystone is vulnerable to authorization bypass. This is due to the way users are removed from tenants when using Amazon EC2 credentials. Users retain privileges after being removed from tenants and will still be able to access resources which would have not been permitted...

Important Photon OS Security Update - PHSA-2019-0122

Updates of 'linux-aws', 'linux-esx', 'linux-secure' packages of Photon OS have been released...

jjn8eyewr6.execute-api.us-east-1.amazonaws.com XSS vulnerability

Open Bug Bounty ID: OBB-714245 Description| Value ---|--- Affected Website:| jjn8eyewr6.execute-api.us-east-1.amazonaws.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting ...

Ubuntu: Security Advisory (USN-3847-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-3848-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3847-2: Linux kernel (HWE) vulnerabilities

USN-3847-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 18.04 LTS for Ubuntu 16.04 LTS. It was discovered that a race condition existed in the raw MIDI driver for the Linux...

See how I through nodejs in the SSRF full control of the aws-vulnerability warning-the black bar safety net

This is me at hackerone on a private vulnerability bonus program found a loophole, found that the use of and write the report it took me 12 and a half hours, without a break. Through this loophole, I can get to the AWS credentials, I can be completely invaded the company's Account: I now have 20...

Personal & banking data of 120 million Brazilians leaked online

By Carolina The Cadastro de Pessoas Físicas CPFs is a taxpayer registry identification for Brazilians - In this case, 120 million CPFs were exposed online. The IT security researchers at InfoArmor's Advanced Threat Intelligence team discovered a treasure trove of personal sensitive data belonging...