Priority MEDIUM 48
Multiple buffer overflows in TIBCO Software Rendezvous before 8.1.0, as used in multiple TIBCO products, allow remote attackers to execute arbitrary code via a crafted message.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04756 · Published 2008-04-11 · No fix listed CWE-119
Priority MEDIUM 42
Buffer overflow in TIBCO Rendezvous before 7.5.1, TIBCO Runtime Agent (TRA) before 5.4, and Hawk before 4.6.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the HTTP administ…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05983 · Published 2006-06-05 · No fix listed
Priority MEDIUM 40
Buffer overflow in the HTTP administrative interface in TIBCO Rendezvous before 8.4.4, Rendezvous Network Server before 1.1.1, Substation ES before 2.9.0, and Messaging Appliance before 8.7.2 allows remote attackers to c…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04556 · Published 2015-08-30 · No fix listed
Priority MEDIUM 40
Buffer overflow in the Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon (rvsrd) in TIBCO Rendezvous before 8.4.2, Messaging Appliance before…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0409 · Published 2014-04-08 · No fix listed CWE-119
Priority LOW 39
The Rendezvous Routing Daemon (rvrd), Rendezvous Secure Routing Daemon (rvrsd), Rendezvous Secure Daemon (rvsd), Rendezvous Cache (rvcache), and Rendezvous Daemon Manager (rvdm) components of TIBCO Software Inc.'s TIBCO…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.00668 · Published 2018-11-07 · No fix listed CWE-352
Priority LOW 39
Memory leak in TIBCO Rendezvous (RV) daemon (rvd) 7.5.2, 7.5.3 and 7.5.4 allows remote attackers to cause a denial of service (memory consumption) via a packet with a length field of zero, a different vulnerability than…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.02354 · Published 2007-08-03 · No fix listed CWE-399
Priority LOW 38
The Rendezvous Routing Daemon (rvrd), Rendezvous Secure Routing Daemon (rvrsd), Rendezvous Secure Daemon (rvsd), Rendezvous Cache (rvcache), Rendezvous Secure C API, Rendezvous Java API, and Rendezvous .Net API component…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.0026 · Published 2021-03-23 · No fix listed
Priority LOW 38
The Windows Installation component of TIBCO Software Inc.'s TIBCO Rendezvous and TIBCO Rendezvous Developer Edition contains a vulnerability that theoretically allows a low privileged attacker with local access on some v…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.0026 · Published 2021-03-23 · No fix listed
Priority LOW 37
TIBCO Rendezvous (RV) 7.5.2 does not protect confidentiality or integrity of inter-daemon communication, which allows remote attackers to capture and spoof traffic.
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01268 · Published 2007-08-03 · No fix listed
Priority LOW 32
Multiple unspecified vulnerabilities in TIBCO Rendezvous 8.2.1 through 8.3.0, Enterprise Message Service (EMS) 5.1.0 through 6.0.0, Runtime Agent (TRA) 5.6.2 through 5.7.0, Silver BPM Service before 1.0.4, Silver CAP Ser…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00375 · Published 2011-02-04 · No fix listed
Priority LOW 27
The Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon (rvsrd) in TIBCO Rendezvous before 8.4.2, Messaging Appliance before 8.7.1, and Substat…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02106 · Published 2014-04-08 · No fix listed CWE-264
Priority LOW 26
The default configuration of TIBCO Rendezvous (RV) 7.5.2 clients, when -no-multicast is omitted, uses a multicast group as the destination for a network message, which might make it easier for remote attackers to capture…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01365 · Published 2007-08-03 · No fix listed
Priority LOW 25
index.html in the HTTP administration interface in certain daemons in TIBCO Rendezvous (RV) 7.5.2 allows remote attackers to obtain sensitive information, such as a user name and IP addresses, via a direct request.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01256 · Published 2007-08-03 · No fix listed
Priority LOW 24
Cross-site scripting (XSS) vulnerability in the Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon (rvsrd) in TIBCO Rendezvous before 8.4.2, M…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01801 · Published 2014-04-08 · No fix listed CWE-79
Priority LOW 23
rvd in TIBCO Rendezvous (RV) 7.5.2, when -no-lead-wc is omitted, might allow remote attackers to cause a denial of service (network instability) via a subject name with a leading (1) '*' (asterisk) or (2) '>' (greater th…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01407 · Published 2007-08-03 · No fix listed
Priority LOW 9
TIBCO RendezVous 7.4.11 and earlier logs base64-encoded usernames and passwords in rvrd.db, which allows local users to obtain sensitive information by decoding the log file.
CVSS 2.0LOW 1.2· Local · No auth · Interaction — · EPSS 0.00734 · Published 2006-09-11 · No fix listed