CVE-2006-2830

The CVE-2006-2830 entry describes a buffer-overflow vulnerability in the HTTP administrative interface of TIBCO Rendezvous before 7.5.1, TIBCO Runtime Agent (TRA) before 5.4, and Hawk before 4.6.1. Remote attackers could trigger a denial of service and possibly execute arbitrary code via the HTTP...

CVE-2021-28817

CVE-2021-28817 affects TIBCO Rendezvous and TIBCO Rendezvous Developer Edition Windows installations (Windows Installation component). The root cause is a lack of access restrictions on certain install files/folders, enabling a local, low-privilege attacker to insert and have the malicious softwa...

CVE-2021-28818

CVE-2021-28818 affects TIBCO Rendezvous on Windows: the following components – Rendezvous Routing Daemon (rvrd), Rendezvous Secure Routing Daemon (rvrsd), Rendezvous Secure Daemon (rvsd), Rendezvous Cache (rvcache), Rendezvous Secure C API, Rendezvous Java API, and Rendezvous .Net API – may allow...

CVE-2014-2542

CVE-2014-2542 describes a cross-site scripting (XSS) vulnerability in TIBCO Rendezvous components: Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon (rvsrd). Affected versions are Rendezvous before 8.4.2, Messaging App...

CVE-2015-4555

The provided documents specify a buffer overflow in the HTTP management interfaces of TIBCO Rendezvous products (Rendezvous before 8.4.4, Rendezvous Network Server before 1.1.1, Substation ES before 2.9.0, Messaging Appliance before 8.7.2). The root cause is an overflow in the HTTP administrative...

CVE-2014-2541

The CVE-2014-2541 issue affects TIBCO Rendezvous components: Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon (rvsrd). The root cause is improper access control in these components, as deployed in TIBCO Rendezvous bef...

CVE-2018-12414

The CVE-2018-12414 entry affects TIBCO Rendezvous components (rvrd, rvrsd, rvsd, rvcache, rvdm) and related editions. A CSRF flaw exists that could let an attacker reconfigure messaging and potentially access all data routed by RV. Affected versions are: RV 8.4.5 and earlier, RV Developer Edition...

CVE-2007-4160

CVE-2007-4160 affects TIBCO Rendezvous RV 7.5.2 clients when the -no-multicast option is omitted: a multicast group is used as the destination for network messages, which could allow remote attackers to capture message contents by sniffing the network. This vulnerability is described in multiple ...

CVE-2007-4161

CVE-2007-4161 affects TIBCO Rendezvous (RV) 7.5.2. When -no-lead-wc is omitted, a remote attacker could cause a denial of service (network instability) by using a subject name beginning with a wildcard ("*" or ">"). The provided documents do not include concrete exploit details, affected build...

CVE-2008-1703

CVE-2008-1703 maps to multiple buffer overflows in TIBCO Rendezvous and related components (rvd, rvrd, rvsrd, rvsd, rvcache, rva, rvrad, rvperfm/rvperfs, libtibrv, libtibrvipm, rvacld, rvtxd, procmgr/pmsulib, tibssxfr, sxf3rpub, sxf3rsub). The root cause is buffer overflows when processing inboun...

CVE-2014-2543

Summary: CVE-2014-2543 is a buffer overflow in TIBCO Rendezvous components (rvd, rvrd, rvsd, rvsrd) that could allow remote code execution when a directly connected client sends crafted data. The issue affects TIBCO Rendezvous 8.4.1 and earlier, Messaging Appliance 8.7.0 and earlier, and Substati...

CVE-2007-4158

The CVE-2007-4158 entry describes a memory leak in TIBCO Rendezvous (RV) daemon (rvd) affecting 7.5.2, 7.5.3, and 7.5.4. A remote attacker can trigger a denial of service (memory consumption) by sending a crafted packet with a length field of zero, leading to improper memory allocation. This is t...

CVE-2006-4676

The CVE-2006-4676 entry concerns TIBCO Rendezvous (RendezVous) 7.4.11 and earlier, where log files rvrd.db store usernames and passwords base64-encoded. Local users could decode these logs to obtain sensitive credentials. The available sources confirm the vulnerable component and the basic flaw (...

CVE-2007-4162

The CVE-2007-4162 entry concerns TIBCO Rendezvous (RV) 7.5.2, where inter-daemon communication lacks confidentiality and integrity protections, enabling remote attackers to capture and spoof traffic. The vulnerability affects inter-process/daemon communications within RV 7.5.2, with a base CVSS v...

CVE-2011-0649

TIBCO CVE-2011-0649 affects Rendezvous and Enterprise Message Service components on Unix: Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), Rendezvous Secure Routing Daemon (rvsrd), and EMS Server (tibemsd) across Rendezvous 8.2.1–8.3.0, EMS 5.1.0–6.0.0, TRA 5.6.2–5.7.0, Silver B...

CVE-2007-4159

CVE-2007-4159 affects TIBCO Rendezvous RV 7.5.2 where index.html in the HTTP administration interface can disclose sensitive information (e.g., user names and IP addresses) via a direct request. The connected documents confirm the component and impact but do not provide exploitation details beyon...