Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-12391 State: PUBLISHED Published: 2019-02-28T18:00:00 Last Updated: 2024-08-05T08:31:00.102Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: HTTP Live Stream audio data is accessible cross-origin Description: During HTTP Live Stream playback on Firefox for Android, audio data can be accessed across origins in violation of security policies. Because the problem is in the underlying Android service, this issue is addressed by treating all HLS streams as cross-origin and opaque to access. *Note: this issue only affects Firefox for Android. Desktop versions of Firefox are unaffected.*. This vulnerability affects Firefox < 63, Firefox ESR < 60.3, and T
ndroid. Desktop versions of Firefox are unaffected.*. This vulnerability affects Firefox < 63, Firefox ESR < 60.3, and Thunderbird < 60.3. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105769 - https://www.mozilla.org/security/advisories/mfsa2018-28/ - https://www.mozilla.org/security/advisories/mfsa2018-26/ - https://security.gentoo.org/glsa/201811-13 - https://www.mozilla.org/security/advisories/mfsa2018-27/ - http://www.securityfocus.com/bid/105718 - https://bugzilla.mozilla.org/show_bug.cgi?id=1478843 - http://www.securitytracker.com/id/1041944
CVE ID: CVE-2018-12392 State: PUBLISHED Published: 2019-02-28T18:00:00 Last Updated: 2024-08-05T08:30:59.822Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Crash with nested event loops Description: When manipulating user events in nested loops while opening a document through script, it is possible to trigger a potentially exploitable crash due to poor event handling. This vulnerability affects Firefox < 63, Firefox ESR < 60.3, and Thunderbird < 60.3. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105769 - https://www.debian.org/security/2018/dsa-4324 - https://www.mozilla.org/security/advisories/mfsa2018-28/ -
/bid/105769 - https://www.debian.org/security/2018/dsa-4324 - https://www.mozilla.org/security/advisories/mfsa2018-28/ - https://www.mozilla.org/security/advisories/mfsa2018-26/ - https://lists.debian.org/debian-lts-announce/2018/11/msg00011.html - https://security.gentoo.org/glsa/201811-04 - https://security.gentoo.org/glsa/201811-13 - https://www.debian.org/security/2018/dsa-4337 - https://www.mozilla.org/security/advisories/mfsa2018-27/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1492823 - https://access.redhat.com/errata/RHSA-2018:3005 - http://www.securityfocus.com/bid/105718 - https://access.redhat.com/errata/RHSA-2018:3006 - https://usn.ubuntu.com/3801-1/ - https://usn.ubuntu.com/3
bid/105718 - https://access.redhat.com/errata/RHSA-2018:3006 - https://usn.ubuntu.com/3801-1/ - https://usn.ubuntu.com/3868-1/ - https://access.redhat.com/errata/RHSA-2018:3532 - https://access.redhat.com/errata/RHSA-2018:3531 - https://lists.debian.org/debian-lts-announce/2018/11/msg00008.html - http://www.securitytracker.com/id/1041944
CVE ID: CVE-2018-12393 State: PUBLISHED Published: 2019-02-28T18:00:00 Last Updated: 2024-08-05T08:31:00.111Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Integer overflow during Unicode conversion while loading JavaScript Description: A potential vulnerability was found in 32-bit builds where an integer overflow during the conversion of scripts to an internal UTF-16 representation could result in allocating a buffer too small for the conversion. This leads to a possible out-of-bounds write. *Note: 64-bit builds are not vulnerable to this issue.*. This vulnerability affects Firefox < 63, Firefox ESR < 60.3, and Thunderbird < 60.3. Additional Analyst Notes: - CV
e.*. This vulnerability affects Firefox < 63, Firefox ESR < 60.3, and Thunderbird < 60.3. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105769 - https://www.debian.org/security/2018/dsa-4324 - https://www.mozilla.org/security/advisories/mfsa2018-28/ - https://www.mozilla.org/security/advisories/mfsa2018-26/ - https://lists.debian.org/debian-lts-announce/2018/11/msg00011.html - https://security.gentoo.org/glsa/201811-04 - https://security.gentoo.org/glsa/201811-13 - https://www.debian.org/security/2018/dsa-4337 - https://www.mozilla.org/security/advisories/mfsa2018-27/ - https://access.redhat.com/errata/RHSA-2018:3005 - http://www.securityfo
w.mozilla.org/security/advisories/mfsa2018-27/ - https://access.redhat.com/errata/RHSA-2018:3005 - http://www.securityfocus.com/bid/105718 - https://bugzilla.mozilla.org/show_bug.cgi?id=1495011 - https://access.redhat.com/errata/RHSA-2018:3006 - https://usn.ubuntu.com/3801-1/ - https://usn.ubuntu.com/3868-1/ - https://access.redhat.com/errata/RHSA-2018:3532 - https://access.redhat.com/errata/RHSA-2018:3531 - https://lists.debian.org/debian-lts-announce/2018/11/msg00008.html - http://www.securitytracker.com/id/1041944
CVE ID: CVE-2018-12395 State: PUBLISHED Published: 2019-02-28T18:00:00 Last Updated: 2024-08-05T08:30:59.771Z Vendors: Mozilla Products: Firefox ESR, Firefox Problem Types: WebExtension bypass of domain restrictions through header rewriting Description: By rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain restrictions through domain fronting. This would allow access to domains that share a host that are otherwise restricted. This vulnerability affects Firefox ESR < 60.3 and Firefox < 63. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4324 - https://www.mozilla.org/security/advisories/mfsa2
ntainer: References: - https://www.debian.org/security/2018/dsa-4324 - https://www.mozilla.org/security/advisories/mfsa2018-26/ - https://security.gentoo.org/glsa/201811-04 - https://www.mozilla.org/security/advisories/mfsa2018-27/ - https://access.redhat.com/errata/RHSA-2018:3005 - http://www.securityfocus.com/bid/105718 - https://access.redhat.com/errata/RHSA-2018:3006 - https://usn.ubuntu.com/3801-1/ - https://lists.debian.org/debian-lts-announce/2018/11/msg00008.html - http://www.securitytracker.com/id/1041944 - https://bugzilla.mozilla.org/show_bug.cgi?id=1467523
CVE ID: CVE-2018-12396 State: PUBLISHED Published: 2019-02-28T18:00:00 Last Updated: 2024-08-05T08:30:59.819Z Vendors: Mozilla Products: Firefox ESR, Firefox Problem Types: WebExtension content scripts can execute in disallowed contexts Description: A vulnerability where a WebExtension can run content scripts in disallowed contexts following navigation or other events. This allows for potential privilege escalation by the WebExtension on sites where content scripts should not be run. This vulnerability affects Firefox ESR < 60.3 and Firefox < 63. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1483602 - https://www.debian.org/secu
CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1483602 - https://www.debian.org/security/2018/dsa-4324 - https://www.mozilla.org/security/advisories/mfsa2018-26/ - https://security.gentoo.org/glsa/201811-04 - https://www.mozilla.org/security/advisories/mfsa2018-27/ - https://access.redhat.com/errata/RHSA-2018:3005 - http://www.securityfocus.com/bid/105718 - https://access.redhat.com/errata/RHSA-2018:3006 - https://usn.ubuntu.com/3801-1/ - https://lists.debian.org/debian-lts-announce/2018/11/msg00008.html - http://www.securitytracker.com/id/1041944
CVE ID: CVE-2018-12397 State: PUBLISHED Published: 2019-02-28T18:00:00 Last Updated: 2024-08-05T08:30:59.851Z Vendors: Mozilla Products: Firefox ESR, Firefox Problem Types: Missing warning prompt when WebExtension requests local file access Description: A WebExtension can request access to local files without the warning prompt stating that the extension will "Access your data for all websites" being displayed to the user. This allows extensions to run content scripts in local pages without permission warnings when a local file is opened. This vulnerability affects Firefox ESR < 60.3 and Firefox < 63. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.o
ESR < 60.3 and Firefox < 63. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1487478 - https://www.debian.org/security/2018/dsa-4324 - https://www.mozilla.org/security/advisories/mfsa2018-26/ - https://security.gentoo.org/glsa/201811-04 - https://www.mozilla.org/security/advisories/mfsa2018-27/ - https://access.redhat.com/errata/RHSA-2018:3005 - http://www.securityfocus.com/bid/105718 - https://access.redhat.com/errata/RHSA-2018:3006 - https://usn.ubuntu.com/3801-1/ - https://lists.debian.org/debian-lts-announce/2018/11/msg00008.html - http://www.securitytracker.com/id/1041944
CVE ID: CVE-2018-12398 State: PUBLISHED Published: 2019-02-28T18:00:00 Last Updated: 2024-08-05T08:38:04.776Z Vendors: Mozilla Products: Firefox Problem Types: CSP bypass through stylesheet injection in resource URIs Description: By using the reflected URL in some special resource URIs, such as chrome:, it is possible to inject stylesheets and bypass Content Security Policy (CSP). This vulnerability affects Firefox < 63. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2018-26/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1460538 - http://www.securityfocus.com/bid/105721 - https://usn.ubuntu.com/3801-1/ - https://bugzilla.mozi
ow_bug.cgi?id=1460538 - http://www.securityfocus.com/bid/105721 - https://usn.ubuntu.com/3801-1/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1488061 - http://www.securitytracker.com/id/1041944
CVE ID: CVE-2018-12399 State: PUBLISHED Published: 2019-02-28T18:00:00 Last Updated: 2024-08-05T08:38:04.826Z Vendors: Mozilla Products: Firefox Problem Types: Spoofing of protocol registration notification bar Description: When a new protocol handler is registered, the API accepts a title argument which can be used to mislead users about which domain is registering the new protocol. This may result in the user approving a protocol handler that they otherwise would not have. This vulnerability affects Firefox < 63. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2018-26/ - http://www.securityfocus.com/bid/105721 - https://usn.u
es: - https://www.mozilla.org/security/advisories/mfsa2018-26/ - http://www.securityfocus.com/bid/105721 - https://usn.ubuntu.com/3801-1/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1490276 - http://www.securitytracker.com/id/1041944
CVE ID: CVE-2018-12400 State: PUBLISHED Published: 2019-02-28T18:00:00 Last Updated: 2024-08-05T08:38:04.959Z Vendors: Mozilla Products: Firefox Problem Types: Favicons are cached in private browsing mode on Firefox for Android Description: In private browsing mode on Firefox for Android, favicons are cached in the cache/icons folder as they are in non-private mode. This allows information leakage of sites visited during private browsing sessions. *Note: this issue only affects Firefox for Android. Desktop versions of Firefox are unaffected.*. This vulnerability affects Firefox < 63. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id
efox < 63. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1448305 - https://www.mozilla.org/security/advisories/mfsa2018-26/ - http://www.securityfocus.com/bid/105721 - http://www.securitytracker.com/id/1041944
CVE ID: CVE-2018-12401 State: PUBLISHED Published: 2019-02-28T18:00:00 Last Updated: 2024-08-05T08:38:05.048Z Vendors: Mozilla Products: Firefox Problem Types: DOS attack through special resource URI parsing Description: Some special resource URIs will cause a non-exploitable crash if loaded with optional parameters following a '?' in the parsed string. This could lead to denial of service (DOS) attacks. This vulnerability affects Firefox < 63. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2018-26/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1422456 - http://www.securityfocus.com/bid/105721 - https://usn.ubuntu.com/3801-1/
/bugzilla.mozilla.org/show_bug.cgi?id=1422456 - http://www.securityfocus.com/bid/105721 - https://usn.ubuntu.com/3801-1/ - http://www.securitytracker.com/id/1041944
CVE ID: CVE-2018-12402 State: PUBLISHED Published: 2019-02-28T18:00:00 Last Updated: 2024-08-05T08:38:04.838Z Vendors: Mozilla Products: Firefox Problem Types: WebBrowserPersist uses incorrect origin information Description: The internal WebBrowserPersist code does not use correct origin context for a resource being saved. This manifests when sub-resources are loaded as part of "Save Page As..." functionality. For example, a malicious page could recover a visitor's Windows username and NTLM hash by including resources otherwise unreachable to the malicious page, if they can convince the visitor to save the complete web page. Similarly, SameSite cookies are sent on cross-origin requests when
convince the visitor to save the complete web page. Similarly, SameSite cookies are sent on cross-origin requests when the "Save Page As..." menu item is selected to save a page, which can result in saving the wrong version of resources based on those cookies. This vulnerability affects Firefox < 63. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1469916 - https://bugzilla.mozilla.org/show_bug.cgi?id=1447087 - https://www.mozilla.org/security/advisories/mfsa2018-26/ - http://www.securityfocus.com/bid/105721 - https://usn.ubuntu.com/3801-1/ - http://www.securitytracker.com/id/1041944
CVE ID: CVE-2018-12403 State: PUBLISHED Published: 2019-02-28T18:00:00 Last Updated: 2024-08-05T08:38:04.796Z Vendors: Mozilla Products: Firefox Problem Types: Mixed content warning is not displayed when HTTPS page loads a favicon over HTTP Description: If a site is loaded over a HTTPS connection but loads a favicon resource over HTTP, the mixed content warning is not displayed to users. This vulnerability affects Firefox < 63. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2018-26/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1484753 - http://www.securityfocus.com/bid/105721 - https://usn.ubuntu.com/3801-1/ - http://www.sec
.org/show_bug.cgi?id=1484753 - http://www.securityfocus.com/bid/105721 - https://usn.ubuntu.com/3801-1/ - http://www.securitytracker.com/id/1041944
CVE ID: CVE-2018-12404 State: PUBLISHED Published: 2019-05-02T16:40:14 Last Updated: 2024-08-05T08:38:05.124Z Vendors: Mozilla Products: Network Security Services (NSS) Problem Types: Cryptographic Issues Description: A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107260 - https://bugzilla.mozilla.org/show_bug.cgi?id=CVE-2018-12404 - http://lists.opensuse.org/opensuse-security-announce/2019
https://bugzilla.mozilla.org/show_bug.cgi?id=CVE-2018-12404 - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00021.html - https://access.redhat.com/errata/RHSA-2019:2237 - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://lists.debian.org/debian-lts-announce/2020/09/msg00029.html - https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04
CVE ID: CVE-2018-12405 State: PUBLISHED Published: 2019-02-28T18:00:00 Last Updated: 2024-08-05T08:38:04.965Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Memory safety bugs fixed in Firefox 64, Firefox ESR 60.4, and Thunderbird 60.4 Description: Mozilla developers and community members reported memory safety bugs present in Firefox 63 and Firefox ESR 60.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 60.4, Firefox ESR < 60.4, and Firefox < 64. Additional Analyst Notes: - CVE Program Container: References: - htt
rbird < 60.4, Firefox ESR < 60.4, and Firefox < 64. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2018-29/ - https://lists.debian.org/debian-lts-announce/2018/12/msg00002.html - https://access.redhat.com/errata/RHSA-2018:3833 - https://access.redhat.com/errata/RHSA-2018:3831 - https://www.debian.org/security/2019/dsa-4362 - https://security.gentoo.org/glsa/201903-04 - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1494752%2C1498765%2C1503326%2C1505181%2C1500759%2C1504365%2C1506640%2C1503082%2C1502013%2C1510471 - https://usn.ubuntu.com/3844-1/ - http://www.securityfocus.com/bid/106168 - https://access.redhat.com/errata/RHSA-2
471 - https://usn.ubuntu.com/3844-1/ - http://www.securityfocus.com/bid/106168 - https://access.redhat.com/errata/RHSA-2019:0159 - https://www.mozilla.org/security/advisories/mfsa2018-31/ - https://www.mozilla.org/security/advisories/mfsa2018-30/ - https://www.debian.org/security/2018/dsa-4354 - https://usn.ubuntu.com/3868-1/ - https://access.redhat.com/errata/RHSA-2019:0160
CVE ID: CVE-2018-12406 State: PUBLISHED Published: 2019-02-28T18:00:00 Last Updated: 2024-08-05T08:38:05.043Z Vendors: Mozilla Products: Firefox Problem Types: Memory safety bugs fixed in Firefox 64 Description: Mozilla developers and community members reported memory safety bugs present in Firefox 63. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 64. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2018-29/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1456947%2C1475669%2C1504816
zilla.org/security/advisories/mfsa2018-29/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1456947%2C1475669%2C1504816%2C1502886%2C1500064%2C1500310%2C1500696%2C1499198%2C1434490%2C1481745%2C1458129 - https://usn.ubuntu.com/3844-1/ - http://www.securityfocus.com/bid/106167
CVE ID: CVE-2018-12407 State: PUBLISHED Published: 2019-02-28T18:00:00 Last Updated: 2024-08-05T08:38:05.119Z Vendors: Mozilla Products: Firefox Problem Types: Buffer overflow with ANGLE library when using VertexBuffer11 module Description: A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content, when working with the VertexBuffer11 module. This results in a potentially exploitable crash. This vulnerability affects Firefox < 64. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2018-29/ - https://usn.ubuntu.com/3844-1/ - https://bugzilla.mozilla.org/show_bug.cgi?id=150
org/security/advisories/mfsa2018-29/ - https://usn.ubuntu.com/3844-1/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1505973 - http://www.securityfocus.com/bid/106167
CVE ID: CVE-2018-12408 State: PUBLISHED Published: 2018-08-08T14:00:00Z Last Updated: 2024-09-17T02:56:30.441Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: TIBCO Software Inc. Products: TIBCO ActiveMatrix BusinessWorks, TIBCO ActiveMatrix BusinessWorks for z/Linux, TIBCO ActiveMatrix BusinessWorks Distribution for TIBCO Silver Fabric Problem Types: The impact of this vulnerability includes the theoretical possibility of an unauthenticated user gaining access to sensitive information that is available to the system account hosting the BusinessWorks engine. Description: The BusinessWorks engine component of TIBCO Software Inc.'s TIBCO ActiveMatrix BusinessWor
essWorks engine. Description: The BusinessWorks engine component of TIBCO Software Inc.'s TIBCO ActiveMatrix BusinessWorks, TIBCO ActiveMatrix BusinessWorks for z/Linux, and TIBCO ActiveMatrix BusinessWorks Distribution for TIBCO Silver Fabric contains a vulnerability that may allow XML eXternal Entity (XXE) attacks via incoming network messages, and may disclose the contents of files accessible to a running BusinessWorks engine Affected releases are TIBCO Software Inc. TIBCO ActiveMatrix BusinessWorks: versions up to and including 5.13.0, TIBCO ActiveMatrix BusinessWorks for z/Linux: versions up to and including 5.13.0, TIBCO ActiveMatrix BusinessWorks Distribution for TIBCO Silver Fabric:
or z/Linux: versions up to and including 5.13.0, TIBCO ActiveMatrix BusinessWorks Distribution for TIBCO Silver Fabric: versions up to and including 5.13.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/support/advisories/2018/08/tibco-security-advisory-august-7-2018-tibco-activematrix-businessworks - http://www.tibco.com/services/support/advisories - http://www.securityfocus.com/bid/105043
CVE ID: CVE-2018-12409 State: PUBLISHED Published: 2019-02-13T19:00:00 Last Updated: 2024-08-05T08:38:05.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SOAP Admin API component of TIBCO Software Inc.'s TIBCO Silver Fabric contains a vulnerability that may allow reflected cross-site scripting (XSS) attacks. Affected releases are TIBCO Software Inc.'s TIBCO Silver Fabric: versions up to and including 5.8.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107024 - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2019/02/tibco-security-advisory-february-13-2019-tibco-silver-fabric
CVE ID: CVE-2018-12410 State: PUBLISHED Published: 2018-10-10T20:00:00Z Last Updated: 2024-09-16T17:04:15.928Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO Spotfire Statistics Services Problem Types: The impact of this vulnerability includes the theoretical possibility of unrestricted remote access to the operating system account hosting the web server component. Description: The web server component of TIBCO Software Inc's Spotfire Statistics Services contains multiple vulnerabilities that may allow the remote execution of code. Without needing to authenticate, an attacker may be able to remotely execute code with th
the remote execution of code. Without needing to authenticate, an attacker may be able to remotely execute code with the permissions of the system account used to run the web server component. Affected releases are TIBCO Software Inc. TIBCO Spotfire Statistics Services versions up to and including 7.11.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105558 - https://www.tibco.com/support/advisories/2018/10/tibco-security-advisory-october-10-2018-tibco-spotfire-statistics
CVE ID: CVE-2018-12411 State: PUBLISHED Published: 2018-11-07T00:00:00Z Last Updated: 2024-09-16T18:03:18.833Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO ActiveSpaces - Community Edition, TIBCO ActiveSpaces - Developer Edition, TIBCO ActiveSpaces - Enterprise Edition Problem Types: In deployments that use the administrative daemon, there is a theoretical possibility that an attacker could gain full administrative access to the data grid, including the possibility of deleting data tables, and removing nodes from operation. Description: The administrative daemon (tibdgadmind) of TIBCO Software Inc.'s TIBCO ActiveSpaces -