Lucene search
+L

4356 matches found

OSV
OSV
•added 2020/06/09 5:15 p.m.•12 views

CVE-2020-9412

The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i contains a vulnerability that theoretically allows execution of arbitrary commands at the privilege level of the affected system following a failed file transfer. Affected releases are TIBCO...

9.8CVSS8.2AI score0.02345EPSS
SaveExploits0References2
NVD
NVD
•added 2020/06/09 5:15 p.m.•31 views

CVE-2020-9412

The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i contains a vulnerability that theoretically allows execution of arbitrary commands at the privilege level of the affected system following a failed file transfer. Affected releases are TIBCO...

10CVSS9.7AI score0.02345EPSS
SaveExploits0References2
OSV
OSV
•added 2020/06/09 5:15 p.m.•16 views

CVE-2020-9411

The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i contains a vulnerability that theoretically allows an attacker to perform unauthorized network file transfers to and from the file system accessible to the affected component. This...

9.8CVSS8.1AI score0.01432EPSS
SaveExploits0References2
NVD
NVD
•added 2020/06/09 5:15 p.m.•24 views

CVE-2020-9411

The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i contains a vulnerability that theoretically allows an attacker to perform unauthorized network file transfers to and from the file system accessible to the affected component. This...

10CVSS9.3AI score0.01432EPSS
SaveExploits0References2
Prion
Prion
•added 2020/06/09 5:15 p.m.•25 views

Design/Logic Flaw

The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i contains a vulnerability that theoretically allows execution of arbitrary commands at the privilege level of the affected system following a failed file transfer. Affected releases are TIBCO...

10CVSS9.4AI score0.02345EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2020/06/09 5:15 p.m.•33 views

Design/Logic Flaw

The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i contains a vulnerability that theoretically allows an attacker to perform unauthorized network file transfers to and from the file system accessible to the affected component. This...

9.3CVSS9AI score0.01432EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2020/06/09 5:00 p.m.•60 views

CVE-2020-9412

The vulnerability affects TIBCO Managed File Transfer Platform Server for IBM i (file transfer component). Affects versions 7.1.0 and below, and 8.0.0. Root cause and impact: arbitrary command execution at the privilege level of the affected system after a failed file transfer, with network-based...

10CVSS8.2AI score0.02345EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/06/09 5:00 p.m.•42 views

CVE-2020-9412 TIBCO Managed File Transfer Platform Server for IBM i Arbitrary Command Execution

The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i contains a vulnerability that theoretically allows execution of arbitrary commands at the privilege level of the affected system following a failed file transfer. Affected releases are TIBCO...

10CVSS9.7AI score0.02345EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2020/06/09 5:00 p.m.•50 views

CVE-2020-9411 TIBCO Managed File Transfer Platform Server for IBM i Authentication Bypass

The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i contains a vulnerability that theoretically allows an attacker to perform unauthorized network file transfers to and from the file system accessible to the affected component. This...

10CVSS9.3AI score0.01432EPSS
SaveExploits0References2
CVE
CVE
•added 2020/06/09 5:00 p.m.•64 views

CVE-2020-9411

CVE-2020-9411 affects TIBCO Managed File Transfer Platform Server for IBM i, specifically the file transfer component. The issue allows unauthorized network file transfers to/from the file system when the configuration option Require Node Resp is set to No, potentially enabling reading/writing of...

10CVSS8.1AI score0.01432EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/09 12:00 a.m.•4 views

CVE-2020-9412: Undefined Security Weakness

The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i contains a vulnerability that theoretically allows execution of arbitrary commands at the privilege level of the affected system following a failed file transfer. Affected releases are TIBCO...

10CVSS8.2AI score0.02345EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/09 12:00 a.m.•3 views

CVE-2020-9411: Undefined Security Weakness

The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i contains a vulnerability that theoretically allows an attacker to perform unauthorized network file transfers to and from the file system accessible to the affected component. This...

10CVSS8.1AI score0.01432EPSS
SaveExploits0References1
Tibco
Tibco
•added 2020/06/04 10:12 p.m.•32 views

TIBCO Security Advisory: June 9, 2020 - TIBCO Managed File Transfer PlatformServer for IBMi

TIBCO Managed File Transfer Platform Server for IBM i Authentication Bypass Original release date: June 9, 2020 Last revised: CVE-2020-9411 Source: TIBCOSoftware Inc. TIBCO Managed File Transfer Platform Server for IBM i Authentication Bypass Original release date: June 9, 2020 Last revised: ---...

9.3CVSS8.2AI score0.01432EPSS
SaveExploits0Affected Software1
CNVD
CNVD
•added 2020/06/03 12:00 a.m.•19 views

Codeorigin Sysax Multi Server Path Traversal Vulnerability

Codeorigin Sysax Multi Server is an FTP File Transfer Protocol server and Shell server for Windows from Codeorigin USA. A path traversal vulnerability exists in Codeorigin Sysax Multi Server version 6.90. The vulnerability stems from a failure of a network system or product to properly filter...

5.3CVSS6.8AI score0.01869EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2020/05/26 12:00 a.m.•13 views

The vulnerability of the FTP service (default ports 21/tcp and 5411/tcp), which is used by the SiNVR 3 video server, allows a hacker to gain access to protected information.

The vulnerability of the FTP service default ports 21/tcp and 5411/tcp of the SiNVR 3 video server is related to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor to gain access to protected information...

8.5CVSS6.7AI score0.01812EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
•added 2020/05/20 12:00 a.m.•8 views

Konica Minolta FTP Utility 'LIST' Denial of Service Vulnerability

Konica Minolta FTP Utility is a software used by Konica Minolta copiers. A denial of service vulnerability exists in Konica Minolta FTP Utility 'LIST'. An attacker can exploit the vulnerability to overwrite certain registers such as EAX, ESI, EDI... to crash the FTP server and overwrite certain...

6.8AI score
SaveExploits0References1
CNVD
CNVD
•added 2020/05/20 12:00 a.m.•9 views

Konica Minolta FTP Utility 'NLST' Denial of Service Vulnerability

Konica Minolta FTP Utility is a software used by Konica Minolta copiers. A denial of service vulnerability exists in Konica Minolta FTP Utility 'NLST'. An attacker can exploit the vulnerability to overwrite certain registers such as EAX, ESI, EDI... to crash the FTP server and overwrite certain...

6.8AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2020/05/19 12:00 a.m.•13 views

The vulnerability of the VNC Server component of the remote desktop management software UltraVNC, which is part of the monitoring, control, and remote maintenance module for the commercial cold production equipment of TelevisGo, allows a perpetrator to execute arbitrary code.

The vulnerability of the VNC Server component of the remote desktop management software UltraVNC, which is part of the monitoring, control, and remote maintenance module for the commercial cold production system TelevisGo, is related to a buffer overflow in the request-to-file transfer handler...

10CVSS8.6AI score0.08263EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2020/05/18 12:15 a.m.•33 views

CVE-2019-20801

An issue was discovered in the Readdle Documents app before 6.9.7 for iOS. The application's file-transfer web server allows for cross-origin requests from any domain, and the WebSocket server lacks authorization control. Any web site can execute JavaScript code that accesses a user's data via...

5.3CVSS5.5AI score0.01008EPSS
SaveExploits1References2
Prion
Prion
•added 2020/05/18 12:15 a.m.•16 views

Cross site scripting

An issue was discovered in the Readdle Documents app before 6.9.7 for iOS. The application's file-transfer web server improperly displays directory names, leading to Stored XSS, which may be used to steal a user's data. This requires user interaction because there is no known direct way for an...

4.3CVSS6AI score0.00696EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder