Cross site scripting

The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a vulnerability that theoretically allows an attacker to perform a reflected cross-site scripting XSS attack. Affected releases are TIBCO Software Inc.'...

Design/Logic Flaw

The Data access layer component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains multiple vulnerabilities that theoretically allow an attacker access to information that can lead to obtaining credentials used to access Spotfire data...

Design/Logic Flaw

The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotfire Desktop, and TIBCO Spotfire Desktop Language Packs contains a vulnerability that theoretically allows an attacker with...

CVE-2019-17336 TIBCO Spotfire Web Player Potentially Exposes Credentials For Shared Data Sources

The Data access layer component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains multiple vulnerabilities that theoretically allow an attacker access to information that can lead to obtaining credentials used to access Spotfire data...

CVE-2019-17337

CVE-2019-17337 describes a reflected cross-site scripting vulnerability in the Spotfire library component of TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server. Affected products and versions include: Spotfire Analytics Platform for AWS Marketplace 10.6.0; Spotfire Se...

CVE-2019-17337 TIBCO Spotfire Server Library Vulnerable to Reflected Cross-Site Scripting

The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a vulnerability that theoretically allows an attacker to perform a reflected cross-site scripting XSS attack. Affected releases are TIBCO Software Inc.'...

CVE-2019-17336

CVE-2019-17336 affects TIBCO Spotfire Data Access Layer in Spotfire Analytics Platform for AWS Marketplace (v10.6.0) and Spotfire Server (multiple versions up to 7.14.x and 10.x up to 10.6.0). The issue consists of information-disclosure vulnerabilities that could allow an attacker, with privileg...

CVE-2019-17335

The CVE-2019-17335 issue affects TIBCO Spotfire Analytics Platform for AWS Marketplace (v10.6.0) and TIBCO Spotfire Server (7.11.7 and older; 7.12.0–7.14.0; 10.0.0–10.6.0). The data access layer could allow an attacker with library save privileges to access data cached from a data source or part ...

CVE-2019-17335 TIBCO Spotfire Server Exposes User-Specific Cached Data To Others Users

The Data access layer component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains multiple vulnerabilities that theoretically allow an attacker access to data cached from a data source, or a portion of a data source, that the attacke...

Multiple TIBCO Spotfire Products CVE-2019-17336 Multiple Information Disclosure Vulnerabilities

Description Multiple TIBCO Spotfire Products are prone to multiple information-disclosure vulnerabilities. An attacker can exploit these issues to obtain sensitive information. That may aid in further attacks. The following products are affected: TIBCO Spotfire Analytics Platform for AWS...

Important Photon OS Security Update - PHSA-2019-3.0-0046

Updates of 'linux-aws', 'linux', 'linux-secure', 'linux-esx', 'logstash' packages of Photon OS have been released...

Privilege escalation

A privilege escalation vulnerability in the Trend Micro Deep Security as a Service Quick Setup cloud formation template could allow an authenticated entity with certain unrestricted AWS execution privileges to escalate to full privileges within the target AWS account...

CVE-2019-18191

The CVE-2019-18191 entry concerns Trend Micro Deep Security as a Service Quick Setup cloud formation template. The vulnerability enables privilege escalation where an authenticated entity with certain unrestricted AWS execution privileges can gain full privileges within the target AWS account. Do...

CVE-2019-18191

A privilege escalation vulnerability in the Trend Micro Deep Security as a Service Quick Setup cloud formation template could allow an authenticated entity with certain unrestricted AWS execution privileges to escalate to full privileges within the target AWS account...

Important Photon OS Security Update - PHSA-2019-0046

Updates of 'logstash', 'linux-esx', 'linux', 'linux-secure', 'linux-aws' packages of Photon OS have been released...

CyberRange - The Open-Source AWS Cyber Range

This CyberRange project represents the first open-source Cyber Range blueprint in the world. This project provides a bootstrap framework for a complete offensive, defensive, reverse engineering, & security intelligence tooling in a private research lab using the AWS Cloud. This project contains...

Important Photon OS Security Update - PHSA-2019-0194

Updates of 'linux-aws', 'linux-secure', 'logstash', 'linux-esx', 'linux' packages of Photon OS have been released...

Ubuntu: Security Advisory (USN-4183-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

A week in security (December 2 – December 8)

Last week on Malwarebytes Labs, we took a look at a new version of the IcedID Trojan, described web skimmers up to no good, and took a deep dive into containerization. We also explored a report bringing bad news for organizations and insider threats, and threw a spotlight on a video game phish...

This Week in Security News: Trend Micro Selected as Launch Partner for AWS Ingress Routing Service and Stalkerware on the Rise

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about stalkerware and why it’s on the rise. Also, read about Trend Micro’s selection as a launch partner for the new Amazon Virtual...