
CVE-2015-9288
https://notcve.org/view.php?id=CVE-2015-9288
29 Jul 2019 — The Unity Web Player plugin before 4.6.6f2 and 5.x before 5.0.3f2 allows attackers to read messages or access online services via a victim's credentials El plugin Unity Web Player anterior a versión 4.6.6f2 y versiones 5.x anteriores a 5.0.3f2, permite a los atacantes leer mensajes o acceder a servicios en línea por medio de credenciales de una víctima • https://blogs.unity3d.com/2015/06/06/security-update-coming-for-web-player • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVE-2014-2544
https://notcve.org/view.php?id=CVE-2014-2544
09 Apr 2014 — Unspecified vulnerability in Spotfire Web Player Engine, Spotfire Desktop, and Spotfire Server Authentication Module in TIBCO Spotfire Server 3.3.x before 3.3.4, 4.5.x before 4.5.1, 5.0.x before 5.0.2, 5.5.x before 5.5.1, and 6.x before 6.0.2; Spotfire Professional 4.0.x before 4.0.4, 4.5.x before 4.5.2, 5.0.x before 5.0.2, 5.5.x before 5.5.1, and 6.x before 6.0.1; Spotfire Web Player 4.0.x before 4.0.4, 4.5.x before 4.5.2, 5.0.x before 5.0.2, 5.5.x before 5.5.1, and 6.x before 6.0.1; Spotfire Automation Se... • http://www.tibco.com/mk/advisory.jsp •

CVE-2005-3135 – Virtools Web Player 3.0.0.100 - Buffer Overflow (Denial of Service) (PoC)
https://notcve.org/view.php?id=CVE-2005-3135
04 Oct 2005 — Buffer overflow in Virtools Web Player 3.0.0.100 and earlier allows remote attackers to execute arbitrary code via a long filename. • https://www.exploit-db.com/exploits/1239 •

CVE-2005-3136
https://notcve.org/view.php?id=CVE-2005-3136
04 Oct 2005 — Directory traversal vulnerability in Virtools Web Player 3.0.0.100 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a filename. • http://aluigi.altervista.org/adv/virtbugs-adv.txt •