Skip to content
OpenAdvisories

Archive

14 May 2019

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.8

    Incorrect Permission Assignment for Critical Resource in Singularity

    An issue was discovered in Singularity 3.1.0 to 3.2.0-rc2, a malicious user with local/network access to the host system (e.g. ssh) could exploit this vulnerability due to insecure permissions allowing a user to edit files within `/run/singularity/instances/s…

  • High 8.8

    TIBCO Spotfire Server Exposes Multiple Reflected Cross-Site Scripting Vulnerabilities

    The web server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains vulnerabilities that theoretically allow reflected cross-site scripting (XSS) attacks. Affected releases are TIBCO Soft…