Lucene search
+L

47 matches found

Positive Technologies
Positive Technologies
•added 2021/09/08 12:00 a.m.•13 views

PT-2021-22386 · Atlassian · Jira

Name of the Vulnerable Software and Affected Versions: Atlassian Jira Server and Data Center versions prior to 8.5.13 Atlassian Jira Server and Data Center versions 8.6.0 through 8.13.5 Atlassian Jira Server and Data Center versions 8.14.0 through 8.15.1 Description: The issue allows anonymous...

5.3CVSS6.8AI score0.01904EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2021/09/01 12:00 a.m.•12 views

CVE-2021-39122

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view users' emails via an Information Disclosure vulnerability in the /rest/api/2/search endpoint. The affected versions are before version 8.5.13, from version 8.6.0 before 8.13.5, and from version...

5.3CVSS6AI score0.01904EPSS
SaveExploits0References2Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/07 12:00 a.m.•2 views

CVE-2020-15226: Improper Neutralization of Special Elements used in an SQL Command

In GLPI before version 9.5.2, there is a SQL Injection in the API's search function. Not only is it possible to break the SQL syntax, but it is also possible to utilise a UNION SELECT query to reflect sensitive information such as the current database version, or database user. The most likely...

5CVSS5.8AI score0.01036EPSS
SaveExploits1References2
Kitploit
Kitploit
•added 2017/07/27 3:12 p.m.•55 views

SimplyEmail - Email Recon Made Fast And Easy

This tool was based on the work of theHarvester and kind of a port of the functionality. This was just an expansion of what was used to build theHarvester and will incorporate his work but allow users to easily build Modules for the Framework. MAJOR CALLOUTS: @laramies - Developer of theHarvester...

7.4AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2005/11/29 11:00 a.m.•25 views

CVE-2005-3869

Cross-site scripting XSS vulnerability in index.php in Google API Search 1.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via hex-encoded values in the REQ parameter...

5.6AI score0.02518EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/11/29 12:00 a.m.•4 views

CVE-2005-3869: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in Google API Search 1.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via hex-encoded values in the REQ parameter...

4.3CVSS6AI score0.02518EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2000/01/18 12:00 a.m.•8 views

CVE-1999-0270: Undefined Security Weakness

Directory traversal vulnerability in pfdispaly.cgi program sometimes referred to as "pfdisplay" for SGI's Performer API Search Tool performertools allows remote attackers to read arbitrary files...

5CVSS8.3AI score0.32125EPSS
SaveExploits0References1
Rows per page
Query Builder