Atlassian Confluence Command Injection (CONFSERVER-79016)

According to its self-reported version number, the Atlassian Confluence running on the remote host is affected by a command injection vulnerability. A remote, unauthenticated attacker can use this to execute arbitrary code. Note that Nessus has not tested for this issue but has instead relied onl...

Atlassian Confluence 7.16.x < 7.16.4 Multiple Servlet Filter Vulnerabilities

According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to 7.4.17, 7.5.x prior to 7.13.7, 7.14.x prior to 7.14.3, 7.15.x prior to 7.15.2, 7.16.x prior to 7.16.4, 7.17.x prior to 7.17.4 or 7.18.0. It is, therefore, affected by the...

curl 缓冲区错误漏洞

curl is a tool for transferring data from or to a server. A buffer error vulnerability exists in curl versions 7.16.4 and later, including 7.83.1, due to incorrect handling of certain cookies, which can be exploited by an attacker to perform a denial-of-service attack...

Atlassian Confluence Server OGNL injection

Added: 06/06/2022 Background Atlassian Confluence is a collaboration and knowledge management application. Problem Atlassian Confluence has an OGNL injection vulnerability that could allow an unauthenticated user to execute arbitrary code on a Confluence Server. Resolution Upgrade to Confluence...

Security fix for the ALT Linux 8 package curl version 7.16.4-alt1

July 11, 2007 Anton Farygin 7.16.4-alt1 - new version with security fixes CVE-2007-3564 - disabled kerberos support by requiest from krb5 mantainer...