CVE-2021-20334 Local privilege escalation in MongoDB Compass for Windows

A malicious 3rd party with local access to the Windows machine where MongoDB Compass is installed can execute arbitrary software with the privileges of the user who is running MongoDB Compass. This issue affects: MongoDB Inc. MongoDB Compass 1.x version 1.3.0 on Windows and later versions; 1.x...

Google Android parsePrimaryFieldFirstUidAnnotation elevation of privilege vulnerability

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in Google Android parsePrimaryFieldFirstUidAnnotation. An attacker can exploit this vulnerability to gain elevated...

Photon OS 1.0: Linux PHSA-2021-1.0-0375

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0375. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148294...

Google Chrome < 89.0.4389.114 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 89.0.4389.114. It is, therefore, affected by multiple vulnerabilities as referenced in the 202103stable-channel-update-for-desktop30 advisory. - Use after free in Aura in Google Chrome on Linux prior to 89.0.4389.114...

CVE-2021-28824

The Windows Installation component of TIBCO Software Inc.'s TIBCO ActiveSpaces - Community Edition, TIBCO ActiveSpaces - Developer Edition, and TIBCO ActiveSpaces - Enterprise Edition contains a vulnerability that theoretically allows a low privileged attacker with local access on some versions o...

CVE-2021-28821

The Windows Installation component of TIBCO Software Inc.'s TIBCO Enterprise Message Service, TIBCO Enterprise Message Service - Community Edition, and TIBCO Enterprise Message Service - Developer Edition contains a vulnerability that theoretically allows a low privileged attacker with local acce...

CVE-2021-28819

The Windows Installation component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains a vulnerability that theoretically allows a low privileged attacker with local access on some versions of the Windows operating...

Design/Logic Flaw

The Windows Installation component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains a vulnerability that theoretically allows a low privileged attacker with local access on some versions of the Windows operating...

Design/Logic Flaw

The Windows Installation component of TIBCO Software Inc.'s TIBCO Rendezvous and TIBCO Rendezvous Developer Edition contains a vulnerability that theoretically allows a low privileged attacker with local access on some versions of the Windows operating system to insert malicious software. The...

Design/Logic Flaw

The Windows Installation component of TIBCO Software Inc.'s TIBCO Enterprise Message Service, TIBCO Enterprise Message Service - Community Edition, and TIBCO Enterprise Message Service - Developer Edition contains a vulnerability that theoretically allows a low privileged attacker with local acce...

CVE-2021-28823

The CVE-2021-28823 issue affects the Windows Installation component of TIBCO eFTL (Community, Developer, and Enterprise Editions) version 6.5.0 and earlier. The root cause is a lack of access restrictions on certain installation-time files/folders, enabling a low-privileged, local attacker to ins...

CVE-2021-28821 TIBCO Enterprise Message Service Windows Platform Installation vulnerability

The Windows Installation component of TIBCO Software Inc.'s TIBCO Enterprise Message Service, TIBCO Enterprise Message Service - Community Edition, and TIBCO Enterprise Message Service - Developer Edition contains a vulnerability that theoretically allows a low privileged attacker with local acce...

CVE-2021-28822

The CVE-2021-28822 entry affects TIBCO Enterprise Message Service on Windows prior to 8.6.0. Affected components include tibemsd (Server), tibemsca (Central Administration), tibemsconf2json (JSON config generator), and the C API. Root cause: the components search for run-time artifacts outside th...

CVE-2021-28819

CVE-2021-28819 affects the Windows Installation component of TIBCO FTL (Community, Developer, Enterprise) versions 6.5.0 and below. The vulnerability arises from a lack of access restrictions on certain installation files/folders, allowing a low-privileged, local attacker to insert and execute ma...

CVE-2021-28818

CVE-2021-28818 affects TIBCO Rendezvous on Windows: the following components – Rendezvous Routing Daemon (rvrd), Rendezvous Secure Routing Daemon (rvrsd), Rendezvous Secure Daemon (rvsd), Rendezvous Cache (rvcache), Rendezvous Secure C API, Rendezvous Java API, and Rendezvous .Net API – may allow...

CVE-2021-28817

CVE-2021-28817 affects TIBCO Rendezvous and TIBCO Rendezvous Developer Edition Windows installations (Windows Installation component). The root cause is a lack of access restrictions on certain install files/folders, enabling a local, low-privilege attacker to insert and have the malicious softwa...

Design/Logic Flaw

The Config UI component of TIBCO Software Inc.'s TIBCO API Exchange Gateway and TIBCO API Exchange Gateway Distribution for TIBCO Silver Fabric contains a vulnerability that theoretically allows an unauthenticated attacker with network access to execute a clickjacking attack on the affected syste...

CVE-2021-23274 TIBCO API Exchange Gateway Clickjack Vulnerability

The Config UI component of TIBCO Software Inc.'s TIBCO API Exchange Gateway and TIBCO API Exchange Gateway Distribution for TIBCO Silver Fabric contains a vulnerability that theoretically allows an unauthenticated attacker with network access to execute a clickjacking attack on the affected syste...

TIBCO Security Advisory: March 23, 2021 - TIBCO Enterprise Message Service -2021-28821

TIBCO Enterprise Message Service Windows Platform Installation vulnerability Original release date: March 23,2021 Last revised: CVE-2021-28821 Source: TIBCO Software Inc. Products Affected TIBCO Enterprise Message Service versions 8.5.1 and below TIBCO Enterprise Message Service - Community Editi...

Photon OS 3.0: Apache PHSA-2021-3.0-0208

An update of the apache package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0208. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid147953;...