CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6494 matches found

Prion•added 2019/01/16 10:29 p.m.•27 views

Design/Logic Flaw

The Spotfire Library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains a vulnerability that might theoretically fail to restrict users with read-only access from modifying files stored in the Spotfire Library, only when th...

3.5CVSS5.2AI score0.01158EPSS

SaveExploits0References3Affected Software2

NVD•added 2019/01/16 10:29 p.m.•34 views

CVE-2018-18814

The TIBCO Spotfire authentication component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains a vulnerability in the handling of the authentication that theoretically may allow an attacker to gain full access to a target account,...

9.8CVSS9.3AI score0.03097EPSS

SaveExploits0References3

OSV•added 2019/01/16 10:29 p.m.•17 views

CVE-2018-18813

The Spotfire web server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains multiple vulnerabilities that may allow persistent and reflected cross-site scripting attacks. Affected releases are TIBCO Software Inc. TIBCO...

6.1CVSS5.6AI score0.0148EPSS

SaveExploits0References3

NVD•added 2019/01/16 10:29 p.m.•25 views

CVE-2018-18812

6.5CVSS6.4AI score0.01158EPSS

SaveExploits0References3

NVD•added 2019/01/16 10:29 p.m.•26 views

CVE-2018-18813

8.8CVSS8.7AI score0.0148EPSS

SaveExploits0References3

Prion•added 2019/01/16 10:29 p.m.•26 views

Design/Logic Flaw

7.5CVSS9.5AI score0.03097EPSS

SaveExploits0References3Affected Software2

Prion•added 2019/01/16 10:29 p.m.•24 views

Cross site scripting

4.3CVSS6.3AI score0.0148EPSS

SaveExploits0References3Affected Software2

Cvelist•added 2019/01/16 10:00 p.m.•42 views

CVE-2018-18812 TIBCO Spotfire Fails To Prevent Write Access to Spotfire Library

6.5CVSS6.4AI score0.01158EPSS

SaveExploits0References3

CVE•added 2019/01/16 10:00 p.m.•63 views

CVE-2018-18812

The CVE-2018-18812 vulnerability affects TIBCO Spotfire Analytics Platform for AWS Marketplace (and TIBCO Spotfire Server) when using external storage for the Spotfire Library. The issue may theoretically allow users with read-only access to modify files stored in the Spotfire Library, under affe...

6.5CVSS5.4AI score0.01158EPSS

SaveExploits0References3Affected Software2

CVE•added 2019/01/16 10:00 p.m.•65 views

CVE-2018-18813

CVE-2018-18813 affects TIBCO Spotfire components: Spotfire Analytics Platform for AWS Marketplace (up to 10.0.0) and Spotfire Server (up to 7.10.1; 7.11.0/7.11.1; 7.12.0; 7.13.0; 7.14.0; 10.0.0). The Spotfire web server component contains multiple persistent and reflected cross-site scripting (XS...

8.8CVSS6.7AI score0.0148EPSS

SaveExploits0References3Affected Software2

Cvelist•added 2019/01/16 10:00 p.m.•32 views

CVE-2018-18813 TIBCO Spotfire Reflected and Persistent Cross-Site Scripting Vulnerabilities

8.8CVSS8.6AI score0.0148EPSS

SaveExploits0References3

Cvelist•added 2019/01/16 10:00 p.m.•43 views

CVE-2018-18814 TIBCO Spotfire Authentication Vulnerability

8.8CVSS9.7AI score0.03097EPSS

SaveExploits0References3

CVE•added 2019/01/16 10:00 p.m.•62 views

CVE-2018-18814

CVE-2018-18814 affects TIBCO Spotfire Analytics Platform for AWS Marketplace (up to 10.0.0) and TIBCO Spotfire Server (up to 7.14.0). The issue is in the authentication handling of the Spotfire authentication component, which could allow an attacker to gain full access to a target account, indepe...

9.8CVSS9.5AI score0.03097EPSS

SaveExploits0References3Affected Software2

Positive Technologies•added 2019/01/16 12:00 a.m.•4 views

PT-2019-9637

Name of the Vulnerable Software and Affected Versions TIBCO Spotfire Analytics Platform for AWS Marketplace versions up to and including 10.0.0 TIBCO Spotfire Server versions up to and including 7.14.0 Description The TIBCO Spotfire authentication component contains a vulnerability in the handlin...

9.8CVSS0.03097EPSS

SaveExploits0References5

Rapid7 Vulnerability Database (full)•added 2019/01/16 12:00 a.m.•7 views

CVE-2018-18812: Incorrect Permission Assignment for Critical Resource

6.5CVSS5.7AI score0.01158EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2019/01/16 12:00 a.m.•7 views

CVE-2018-18814: Improper Authentication

9.8CVSS5.7AI score0.03097EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2019/01/16 12:00 a.m.•5 views

CVE-2018-18813: Improper Neutralization of Input During Web Page Generation

8.8CVSS5.5AI score0.0148EPSS

SaveExploits0References2

Veracode•added 2019/01/15 8:51 a.m.•33 views

Authorization Bypass

openstack-keystone is vulnerable to authorization bypass. This is due to the way users are removed from tenants when using Amazon EC2 credentials. Users retain privileges after being removed from tenants and will still be able to access resources which would have not been permitted...

2.1CVSS5.8AI score0.00341EPSS

SaveExploits0References8Affected Software1

Photon•added 2019/01/09 12:00 a.m.•62 views

Important Photon OS Security Update - PHSA-2019-0122

Updates of 'linux-aws', 'linux-esx', 'linux-secure' packages of Photon OS have been released...

7.8CVSS6.9AI score0.14689EPSS

SaveExploits15

Openbugbounty•added 2018/12/25 3:30 p.m.•27 views

jjn8eyewr6.execute-api.us-east-1.amazonaws.com XSS vulnerability

Open Bug Bounty ID: OBB-714245 Description| Value ---|--- Affected Website:| jjn8eyewr6.execute-api.us-east-1.amazonaws.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting ...

0.1AI score

SaveExploits0

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by