Lucene search
+L

4355 matches found

Cvelist
Cvelist
•added 2020/06/30 7:40 p.m.•31 views

CVE-2020-9414 TIBCO Managed File Transfer reflected XSS vulerability

The MFT admin service component of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center and TIBCO Managed File Transfer Internet Server contains a vulnerability that theoretically allows an authenticated user with specific permissions to obtain the session identifier of another user...

8.8CVSS8.7AI score0.01691EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2020/06/30 5:00 p.m.•9 views

CVE-2020-9414

The MFT admin service component of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center and TIBCO Managed File Transfer Internet Server contains a vulnerability that theoretically allows an authenticated user with specific permissions to obtain the session identifier of another user...

9CVSS7.5AI score0.01691EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/30 12:00 a.m.•6 views

CVE-2020-9414: Improper Neutralization of Input During Web Page Generation

The MFT admin service component of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center and TIBCO Managed File Transfer Internet Server contains a vulnerability that theoretically allows an authenticated user with specific permissions to obtain the session identifier of another user...

9CVSS5.8AI score0.01691EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/30 12:00 a.m.•4 views

CVE-2020-9413: Improper Neutralization of Input During Web Page Generation

The MFT Browser file transfer client and MFT Browser admin client components of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center and TIBCO Managed File Transfer Internet Server contain a vulnerability that theoretically allows an attacker to craft an URL that will execute arbitrar...

9.6CVSS6.2AI score0.01348EPSS
SaveExploits0References2
OSV
OSV
•added 2020/06/29 2:15 p.m.•11 views

CVE-2020-12047

The Baxter Spectrum WBM v17, v20D29, v20D30, v20D31, and v22D24, when used with a Baxter Spectrum v8.x model 35700BAX2 in a factory-default wireless configuration enables an FTP service with hard-coded credentials...

9.8CVSS7AI score0.01676EPSS
SaveExploits0References1
OSV
OSV
•added 2020/06/29 2:15 p.m.•13 views

CVE-2020-12043

The Baxter Spectrum WBM v17, v20D29, v20D30, v20D31, and v22D24 when configured for wireless networking the FTP service operating on the WBM remains operational until the WBM is rebooted...

9.8CVSS7AI score0.02098EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2020/06/27 12:00 a.m.•60 views

Fedora: Security Advisory for curl (FEDORA-2020-6af1dd2936)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS6.8AI score0.01251EPSS
SaveExploits1References2
Tibco
Tibco
•added 2020/06/24 8:41 p.m.•28 views

TIBCO Security Advisory: June 30, 2020 - TIBCO Managed File Transfer -2020-9414

TIBCO Managed File Transfer reflected XSS vulerability Original release date: June30, 2020 Last revised: CVE-2020-9414 Source: TIBCO Software Inc. TIBCO Managed File Transfer reflected XSS vulerability Original release date: June 30, 2020 Last revised: --- Source: TIBCO Software Inc. Systems...

9CVSS6.2AI score0.01691EPSS
SaveExploits0Affected Software2
Tibco
Tibco
•added 2020/06/24 8:41 p.m.•31 views

TIBCO Security Advisory: June 30, 2020 - TIBCO Managed File Transfer -2020-9414

TIBCO Managed File Transfer reflected XSS vulerability Original release date: June30, 2020 Last revised: CVE-2020-9414 Source: TIBCO Software Inc. TIBCO Managed File Transfer reflected XSS vulerability Original release date: June 30, 2020 Last revised: --- Source: TIBCO Software Inc. Systems...

9CVSS7.7AI score0.01691EPSS
SaveExploits0Affected Software2
Tibco
Tibco
•added 2020/06/24 6:25 p.m.•25 views

TIBCO Security Advisory: June 30, 2020 - TIBCO Managed File Transfer -2020-9413

TIBCO Managed File Transfer reflected XSS vulerability Original release date: June30, 2020 Last revised: CVE-2020-9413 Source: TIBCO Software Inc. TIBCO Managed File Transfer reflected XSS vulerability Original release date: June 30, 2020 Last revised: --- Source: TIBCO Software Inc. Systems...

9.6CVSS8.3AI score0.01348EPSS
SaveExploits0Affected Software2
Tibco
Tibco
•added 2020/06/24 6:25 p.m.•27 views

TIBCO Security Advisory: June 30, 2020 - TIBCO Managed File Transfer -2020-9413

TIBCO Managed File Transfer reflected XSS vulerability Original release date: June30, 2020 Last revised: CVE-2020-9413 Source: TIBCO Software Inc. TIBCO Managed File Transfer reflected XSS vulerability Original release date: June 30, 2020 Last revised: --- Source: TIBCO Software Inc. Systems...

9.3CVSS6.7AI score0.01348EPSS
SaveExploits0Affected Software2
OSV
OSV
•added 2020/06/24 4:15 p.m.•15 views

CVE-2020-6870

The version V12.17.20T115 of ZTE U31R20 product is impacted by a design error vulnerability. An attacker could exploit the vulnerability to log in to the FTP server to tamper with the password, and illegally download, modify, upload, or delete files, causing improper operation of the network...

8CVSS5.8AI score0.00617EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2020/06/24 4:15 p.m.•8 views

CVE-2020-6870

The version V12.17.20T115 of ZTE U31R20 product is impacted by a design error vulnerability. An attacker could exploit the vulnerability to log in to the FTP server to tamper with the password, and illegally download, modify, upload, or delete files, causing improper operation of the network...

8CVSS7.8AI score0.00617EPSS
SaveExploits0References2Affected Software1
RedHat Linux
RedHat Linux
•added 2020/06/22 1:08 p.m.•18 views

httpd: mod_proxy_ftp use of uninitialized value

A flaw was found in Apache's HTTP server httpd .The modproxyftp module may use uninitialized memory with proxying to a malicious FTP server. The highest threat from this vulnerability is to data confidentiality...

5.3CVSS7.1AI score0.51951EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2020/06/22 12:28 p.m.•13 views

httpd: mod_proxy_ftp use of uninitialized value

A flaw was found in Apache's HTTP server httpd .The modproxyftp module may use uninitialized memory with proxying to a malicious FTP server. The highest threat from this vulnerability is to data confidentiality...

5.3CVSS7.1AI score0.51951EPSS
SaveExploits0References5
NVD
NVD
•added 2020/06/16 8:15 p.m.•32 views

CVE-2020-7498

A CWE-798: Use of Hard-coded Credentials vulnerability exists in the Unity Loader and OS Loader Software all versions. The fixed credentials are used to simplify file transfer. Today the use of fixed credentials is considered a vulnerability, which could cause unauthorized access to the file...

9.8CVSS0.01358EPSS
SaveExploits0References1
Prion
Prion
•added 2020/06/16 8:15 p.m.•29 views

Hardcoded credentials

A CWE-798: Use of Hard-coded Credentials vulnerability exists in the Unity Loader and OS Loader Software all versions. The fixed credentials are used to simplify file transfer. Today the use of fixed credentials is considered a vulnerability, which could cause unauthorized access to the file...

7.5CVSS9.2AI score0.01358EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/06/16 7:15 p.m.•30 views

CVE-2020-7498

A CWE-798: Use of Hard-coded Credentials vulnerability exists in the Unity Loader and OS Loader Software all versions. The fixed credentials are used to simplify file transfer. Today the use of fixed credentials is considered a vulnerability, which could cause unauthorized access to the file...

9.4AI score0.01358EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/16 12:00 a.m.•5 views

CVE-2020-7498: Use of Hard-coded Credentials

A CWE-798: Use of Hard-coded Credentials vulnerability exists in the Unity Loader and OS Loader Software all versions. The fixed credentials are used to simplify file transfer. Today the use of fixed credentials is considered a vulnerability, which could cause unauthorized access to the file...

9.8CVSS5.8AI score0.01358EPSS
SaveExploits0References3
OSV
OSV
•added 2020/06/09 5:15 p.m.•12 views

CVE-2020-9412

The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i contains a vulnerability that theoretically allows execution of arbitrary commands at the privilege level of the affected system following a failed file transfer. Affected releases are TIBCO...

9.8CVSS8.2AI score0.02345EPSS
SaveExploits0References2
Rows per page
Query Builder