1991 matches found
Privilege escalation
The Enterprise Message Service Server tibemsd, Enterprise Message Service Central Administration tibemsca, Enterprise Message Service JSON configuration generator tibemsconf2json, and Enterprise Message Service C API components of TIBCO Software Inc.'s TIBCO Enterprise Message Service, TIBCO...
CVE-2021-28822
The CVE-2021-28822 entry affects TIBCO Enterprise Message Service on Windows prior to 8.6.0. Affected components include tibemsd (Server), tibemsca (Central Administration), tibemsconf2json (JSON config generator), and the C API. Root cause: the components search for run-time artifacts outside th...
CVE-2021-28820
CVE-2021-28820 affects TIBCO FTL on Windows: the FTL Server (tibftlserver) and FTL APIs (C, Go, Java, .NET) across Community, Developer, and Enterprise Editions (version 6.5.0 and below). Root cause: the component searches for run-time artifacts outside the installation hierarchy, enabling a low-...
CVE-2021-28818
CVE-2021-28818 affects TIBCO Rendezvous on Windows: the following components – Rendezvous Routing Daemon (rvrd), Rendezvous Secure Routing Daemon (rvrsd), Rendezvous Secure Daemon (rvsd), Rendezvous Cache (rvcache), Rendezvous Secure C API, Rendezvous Java API, and Rendezvous .Net API – may allow...
TIBCO Software Rendezvous Routing Daemon 安全漏洞
TIBCO Software Rendezvous Routing Daemon is an application component from TIBCO Software, Inc. The component used for TIBCO. A security vulnerability exists in Rendezvous Routing Daemon that allows an attacker to gain low-privileged and local access to inserted malware on a Windows operating syst...
TIBCO Security Advisory: March 23, 2021 - TIBCO ActiveSpaces -2021-28824
TIBCO ActiveSpaces Windows Platform Installation vulnerability Original release date: March 23, 2021 Last revised: CVE-2021-28824 Source: TIBCOSoftware Inc. Products Affected TIBCO ActiveSpaces - Community Edition versions 4.5.0 and below TIBCO ActiveSpaces - Developer Edition versions 4.5.0 and...
TIBCO Security Advisory: March 23, 2021 - TIBCO Enterprise Message Service -2021-28821
TIBCO Enterprise Message Service Windows Platform Installation vulnerability Original release date: March 23,2021 Last revised: CVE-2021-28821 Source: TIBCO Software Inc. Products Affected TIBCO Enterprise Message Service versions 8.5.1 and below TIBCO Enterprise Message Service - Community Editi...
TIBCO Security Advisory: March 23, 2021 - TIBCO FTL -2021-28820
TIBCO FTL Windows Platform Artifact Search vulnerability Original release date:March 23, 2021 Last revised: CVE-2021-28820 Source: TIBCO Software Inc. Products Affected TIBCO FTL - Community Edition versions 6.5.0 and below TIBCO FTL - Developer Edition versions 6.5.0 and below TIBCO FTL -...
TIBCO Security Advisory: March 23, 2021 - TIBCO FTL -2021-28820
TIBCO FTL Windows Platform Artifact Search vulnerability Original release date:March 23, 2021 Last revised: CVE-2021-28820 Source: TIBCO Software Inc. Products Affected TIBCO FTL - Community Edition versions 6.5.0 and below TIBCO FTL - Developer Edition versions 6.5.0 and below TIBCO FTL -...
TIBCO Security Advisory: March 23, 2021 - TIBCO Rendezvous -2021-28818
TIBCO Rendezvous Windows Platform Artifact Search vulnerability Original release date: March 23, 2021 Last revised: CVE-2021-28818 Source: TIBCOSoftware Inc. Products Affected TIBCO Rendezvous versions 8.5.1 and below TIBCO Rendezvous Developer Edition versions 8.5.1 and below The following...
TIBCO Security Advisory: March 23, 2021 - TIBCO Rendezvous -2021-28817
TIBCO Rendezvous Windows Platform Installation vulnerability Original release date:March 23, 2021 Last revised: CVE-2021-28817 Source: TIBCO Software Inc. Products Affected TIBCO Rendezvous versions 8.5.1 and below TIBCO Rendezvous Developer Edition versions 8.5.1 and below The following componen...
The vulnerability of the Windows operating system, related to security configuration errors, allows attackers to circumvent existing security restrictions.
The vulnerability of the Windows operating system is related to errors in security settings. Exploiting this vulnerability can allow a hacker to bypass existing security restrictions...
Microsoft Windows OpenType Font Parsing 代码注入漏洞
Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A code injection vulnerability exists in Microsoft Windows OpenType Font Parsing. The following products and editions are affected:Windows 10 Version 1803 for ARM64-based Systems,Windows 10...
Microsoft Windows UPnP 安全漏洞
Microsoft Windows UPnP is a device proxy from Microsoft USA. Providing a proxy allows a Windows network connection to recognize the ZoneDirector's IP address. A security vulnerability exists in the Windows UPnP device host. The following products and versions are affected: Windows Server, version...
PT-2021-2364 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insecure privilege management in the Windows operating system's Event Tracing component. It allows an attacker to potentially elevate their privileges...
PT-2021-2341 · Microsoft · Windows Hyper-V +1
Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to insecure privilege management in the Hyper-V component of the Windows operating system. It allows remote attackers to execute arbitrary code and affect the...
PT-2021-2420 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a denial-of-service vulnerability in the implementation of Network Address Translation NAT technology in Windows operating systems. This vulnerability is associated...
The vulnerability of the NVIDIA Control Panel driver for graphics processors such as NVIDIA GeForce, Quadro, NVS, and Tesla for Windows operating systems allows a malicious individual to cause system failures or gain increased privileges.
The vulnerability of the NVIDIA Control Panel driver for graphics processors such as NVIDIA GeForce, Quadro, NVS, and Tesla on Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to cause system failures or increase their...
CVE-2019-11684
Improper Access Control in the RCP+ server of the Bosch Video Recording Manager VRM component allows arbitrary and unauthenticated access to a limited subset of certificates, stored in the underlying Microsoft Windows operating system. The fixed versions implement modified authentication checks...