Lucene search
+L

4942 matches found

Cvelist
Cvelist
added 2021/09/08 2:05 a.m.43 views

CVE-2021-39122

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view users' emails via an Information Disclosure vulnerability in the /rest/api/2/search endpoint. The affected versions are before version 8.5.13, from version 8.6.0 before 8.13.5, and from version...

5.4AI score0.01401EPSS
SaveExploits0References1
CVE
CVE
added 2021/09/08 2:05 a.m.95 views

CVE-2021-39122

CVE-2021-39122 affects Atlassian Jira Server and Data Center via an Information Disclosure vulnerability in the /rest/api/2/search endpoint, allowing anonymous remote attackers to view users’ emails. Affected versions include pre-8.5.13, 8.6.0–8.13.5 (before 8.13.5), and 8.14.0–8.15.1 (before 8.1...

5.3CVSS5.1AI score0.01401EPSS
SaveExploits0References1Affected Software4
Vulnrichment
Vulnrichment
added 2021/09/08 2:05 a.m.16 views

CVE-2021-39122

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view users' emails via an Information Disclosure vulnerability in the /rest/api/2/search endpoint. The affected versions are before version 8.5.13, from version 8.6.0 before 8.13.5, and from version...

6.7AI score0.01401EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2021/09/08 1:45 a.m.12 views

CVE-2021-39121

Affected versions of Atlassian Jira Server and Data Center allow authenticated remote attackers to enumerate the keys of private Jira projects via an Information Disclosure vulnerability in the /rest/api/latest/projectvalidate/key endpoint. The affected versions are before version 8.5.18, from...

6.6AI score0.01141EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/09/08 1:45 a.m.39 views

CVE-2021-39121

Affected versions of Atlassian Jira Server and Data Center allow authenticated remote attackers to enumerate the keys of private Jira projects via an Information Disclosure vulnerability in the /rest/api/latest/projectvalidate/key endpoint. The affected versions are before version 8.5.18, from...

5.4AI score0.01141EPSS
SaveExploits0References1
CVE
CVE
added 2021/09/08 1:45 a.m.89 views

CVE-2021-39121

Summary: CVE-2021-39121 is an information-disclosure vulnerability in Atlassian Jira Server/Data Center that allows an authenticated remote attacker to enumerate private project keys via the /rest/api/latest/projectvalidate/key endpoint. Affected versions: before 8.5.18; 8.6.0 before 8.13.10; 8.1...

4.3CVSS4.7AI score0.01141EPSS
SaveExploits0References1Affected Software4
NVD
NVD
added 2021/09/08 12:15 a.m.23 views

CVE-2021-39116

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availability via a Denial of Service DoS vulnerability in the GIF Image Reader component. The affected versions are before version 8.13.14, and from version 8.14.0 before 8.19.0...

5.5CVSS0.01075EPSS
SaveExploits0References1
OSV
OSV
added 2021/09/08 12:15 a.m.8 views

CVE-2021-39116

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availability via a Denial of Service DoS vulnerability in the GIF Image Reader component. The affected versions are before version 8.13.14, and from version 8.14.0 before 8.19.0...

5.5CVSS6.1AI score0.01075EPSS
SaveExploits0References1
Prion
Prion
added 2021/09/08 12:15 a.m.19 views

Denial of service

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availability via a Denial of Service DoS vulnerability in the GIF Image Reader component. The affected versions are before version 8.13.14, and from version 8.14.0 before 8.19.0...

4.3CVSS5.5AI score0.01075EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2021/09/08 12:05 a.m.33 views

CVE-2021-39116

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availability via a Denial of Service DoS vulnerability in the GIF Image Reader component. The affected versions are before version 8.13.14, and from version 8.14.0 before 8.19.0...

5.7AI score0.01075EPSS
SaveExploits0References1
CVE
CVE
added 2021/09/08 12:05 a.m.97 views

CVE-2021-39116

CVE-2021-39116 affects Atlassian Jira Server/Data Center via a DoS in the GIF Image Reader. Affected versions are before 8.13.14 and from 8.14.0 before 8.19.0; fixed in 8.13.14 and 8.19.0. The issue arises from processing specially crafted GIF files, enabling remote attackers to impact availabili...

5.5CVSS5.4AI score0.01075EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
added 2021/09/08 12:05 a.m.11 views

CVE-2021-39116

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availability via a Denial of Service DoS vulnerability in the GIF Image Reader component. The affected versions are before version 8.13.14, and from version 8.14.0 before 8.19.0...

6.8AI score0.01075EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
added 2021/09/08 12:00 a.m.8 views

VulnCheck KEV: CVE-2021-26084

Atlassian Confluence Server and Data Server contain an Object-Graph Navigation Language OGNL injection vulnerability that may allow an unauthenticated attacker to execute code...

9.8CVSS7.2AI score0.99999EPSS
SaveExploits46References1
ThreatPost
ThreatPost
added 2021/09/07 4:07 p.m.493 views

Jenkins Hit as Atlassian Confluence Cyberattacks Widen

A just-patched, critical remote code-execution RCE vulnerability in the Atlassian Confluence server platform is suffering wide-scale exploitation, the Feds have warned – as evidenced by an attack on the popular Jenkins open-source automation engine. Atlassian Confluence is a collaboration platfor...

9.8CVSS10AI score0.99999EPSS
SaveExploits47References15
GithubExploit
GithubExploit
added 2021/09/07 12:04 p.m.142 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

PoC exploit for CVE-2021-26084, a vulnerability in Confluence. T...

9.8CVSS8.9AI score0.99999EPSS
SaveExploits46
The Hacker News
The Hacker News
added 2021/09/07 10:05 a.m.105 views

Latest Atlassian Confluence Flaw Exploited to Breach Jenkins Project Server

The maintainers of Jenkins—a popular open-source automation server software—have disclosed a security breach after unidentified threat actors gained access to one of their servers by exploiting a recently disclosed vulnerability in Atlassian Confluence service to install a cryptocurrency miner. T...

9.8CVSS2.2AI score0.99999EPSS
SaveExploits46
CNNVD
CNNVD
added 2021/09/07 12:00 a.m.11 views

Atlassian Jira 安全漏洞

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. A security vulnerability exists in Atlassian Jira Server and Data Center that originates in Atlassian Jira Server and Data Cente...

5.5CVSS5.8AI score0.01075EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2021/09/07 12:00 a.m.115 views

Atlassian Confluence Server Webwork OGNL Injection (CVE-2021-26084)

Binary data confluencecve202126084.nbin...

9.8CVSS8.8AI score0.99999EPSS
SaveExploits46References3
Gitee
Gitee
added 2021/09/06 6:44 p.m.9 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

补天poc合集 介绍 补天提交漏洞POC合集 目录 fwfileupload.py--泛微OA weaver.common.Ctrl 任意文件上传漏洞 kindeditorupload.py--kindeditor=4.1.5文件上传漏洞 cve-2021-26084confluencerce.py--Atlassian Confluence 远程代码执行漏洞CVE-2021-26084...

9.8CVSS8.7AI score0.99999EPSS
SaveExploits46
GithubExploit
GithubExploit
added 2021/09/05 9:27 a.m.153 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

CVE-2021-26084 An OGNL injection vulnerability exists that...

9.8CVSS9.1AI score0.99999EPSS
SaveExploits46
Rows per page
Query Builder