CVSS: 7.5EPSS: 3%CPEs: 12EXPL: 0CVE-2014-2543
https://notcve.org/view.php?id=CVE-2014-2543
Buffer overflow in the Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon (rvsrd) in TIBCO Rendezvous before 8.4.2, Messaging Appliance before 8.7.1, and Substation ES before 2.8.1 allows remote attackers to execute arbitrary code by leveraging access to a directly connected client and transmitting crafted data. Desbordamiento de buffer en el demonio de Rendezvous (rvd), el demonio de Rendezvous Routing (rvrd), el demonio de Rendezvous Secure (rvsd) y el demonio de Rendezvous Secure Routing (rvsrd) en TIBCO Rendezvous anterior a 8.4.2, Messaging Appliance anterior a 8.7.1 y Substation ES anterior a 2.8.1 permite a atacantes remotos ejecutar código arbitrario mediante el aprovechamiento de acceso al cliente conectado directamente y transmitiendo datos manipulados. • http://www.securityfocus.com/bid/66744 http://www.securitytracker.com/id/1030070 http://www.tibco.com/mk/advisory.jsp http://www.tibco.com/multimedia/rendezvous_advisory_20140408_tcm8-20763.txt • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 4.3EPSS: 0%CPEs: 12EXPL: 0CVE-2014-2542
https://notcve.org/view.php?id=CVE-2014-2542
Cross-site scripting (XSS) vulnerability in the Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon (rvsrd) in TIBCO Rendezvous before 8.4.2, Messaging Appliance before 8.7.1, and Substation ES before 2.8.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de XSS en el demonio de Rendezvous (rvd), el demonio de Rendezvous Routing (rvrd), el demonio de Rendezvous Secure (rvsd) y el demonio de Rendezvous Secure Routing (rvsrd) en TIBCO Rendezvous anterior a 8.4.2, Messaging Appliance anterior a 8.7.1 y Substation ES anterior a 2.8.1 permite a atacantes remotos inyectar script Web o HTML arbitrarios a través de vectores no especificados. • http://www.securityfocus.com/bid/101873 http://www.securityfocus.com/bid/66737 http://www.securitytracker.com/id/1030070 http://www.tibco.com/mk/advisory.jsp http://www.tibco.com/multimedia/rendezvous_advisory_20140408_tcm8-20763.txt • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 7.2EPSS: 0%CPEs: 12EXPL: 0CVE-2011-0649
https://notcve.org/view.php?id=CVE-2011-0649
Multiple unspecified vulnerabilities in TIBCO Rendezvous 8.2.1 through 8.3.0, Enterprise Message Service (EMS) 5.1.0 through 6.0.0, Runtime Agent (TRA) 5.6.2 through 5.7.0, Silver BPM Service before 1.0.4, Silver CAP Service vebefore 1.0.2, and Silver BusinessWorks Service 1.0.0, when running on Unix systems, allow local users to gain root privileges via unknown vectors related to SUID and (1) Rendezvous Routing Daemon (rvrd), (2) Rendezvous Secure Daemon (rvsd), (3) Rendezvous Secure Routing Daemon (rvsrd), and (4) EMS Server (tibemsd). Múltiples vulnerabilidades no especificadas en Rendezvous versiones 8.2.1 hasta 8.3.0, Enterprise Message Service (EMS) versiones 5.1.0 hasta 6.0.0, Runtime Agent (TRA) versiones 5.6.2 hasta 5.7.0, Silver BPM Service anterior a versión 1.0.4, Silver CAP Service anterior a versión 1.0.2 y Silver BusinessWorks Service versión 1.0.0, de TIBCO, cuando son ejecutados en sistemas Unix, permiten a los usuarios locales alcanzar privilegios root por medio de vectores desconocidos relacionados con el SUID y (1) Demonio de Enrutamiento de Rendezvous (rvrd), (2) Demonio de Seguridad de Rendezvous (rvsd), (3) Demonio de Enrutamiento de Seguridad de Rendezvous (rvsrd), y (4) Servidor EMS (tibemsd). • http://secunia.com/advisories/43160 http://secunia.com/advisories/43174 http://www.securityfocus.com/bid/46104 http://www.tibco.com/multimedia/rv_ems_security_advisory_20110201_tcm8-13185.txt http://www.vupen.com/english/advisories/2011/0269 https://exchange.xforce.ibmcloud.com/vulnerabilities/65105 •
CVSS: 9.3EPSS: 10%CPEs: 19EXPL: 0CVE-2008-1703
https://notcve.org/view.php?id=CVE-2008-1703
Multiple buffer overflows in TIBCO Software Rendezvous before 8.1.0, as used in multiple TIBCO products, allow remote attackers to execute arbitrary code via a crafted message. Múltiples desbordamientos de búfer en TIBCO Software Rendezvous anterior a 8.1.0., utilizado en múltiples productos TIBCO,permitena atacantes remotos ejecutar código de su elección mediante un mensaje manipulado. • http://secunia.com/advisories/29774 http://www.osvdb.org/44269 http://www.securityfocus.com/bid/28717 http://www.securitytracker.com/id?1019826 http://www.tibco.com/resources/mk/rendezvous_security_advisory_20080409.txt http://www.vupen.com/english/advisories/2008/1189/references http://www.vupen.com/english/advisories/2008/1190/references https://exchange.xforce.ibmcloud.com/vulnerabilities/41760 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 7%CPEs: 3EXPL: 0CVE-2007-4158
https://notcve.org/view.php?id=CVE-2007-4158
Memory leak in TIBCO Rendezvous (RV) daemon (rvd) 7.5.2, 7.5.3 and 7.5.4 allows remote attackers to cause a denial of service (memory consumption) via a packet with a length field of zero, a different vulnerability than CVE-2006-2830. Una pérdida de memoria en demonio (rvd) de TIBCO Rendezvous (RV) versiones 7.5.2, 7.5.3 y 7.5.4, permite a atacantes remotos causar una denegación de servicio (consumo de memoria) por medio de un paquete con un campo de longitud de cero, una vulnerabilidad diferente de CVE-2006-2830. • http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0620.html http://osvdb.org/37680 http://secunia.com/advisories/26337 http://www.attrition.org/pipermail/vim/2007-December/001855.html http://www.irmplc.com/content/pdfs/Security_Testing_Enterprise_Messaging_Systems.pdf http://www.irmplc.com/index.php/111-Vendor-Alerts http://www.irmplc.com/index.php/160-Advisory-025 http://www.securityfocus.com/bid/25132 http://www.securitytracker.com/id?1018512 http://www.vupen.com&# • CWE-399: Resource Management Errors •