CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5012 matches found

Cvelist•added 2018/08/28 1:00 p.m.•39 views

CVE-2018-13395

Various resources in Atlassian Jira before version 7.6.8, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, from version 7.9.0 before version 7.9.3, from version 7.10.0 before version 7.10.3 and before version 7.11.1 allow remote attackers to inject arbitrary HTML ...

6AI score0.01008EPSS

SaveExploits0References1

CVE•added 2018/08/28 1:00 p.m.•79 views

CVE-2018-13395

CVE-2018-13395 is an XSS vulnerability in Atlassian Jira where an attacker can inject arbitrary HTML/JavaScript via the epicColour field while an issue is moved. Affected Jira Server/Jira Core versions include pre-7.6.8 and several 7.7/7.8/7.9/7.10/7.11 branches (e.g., 7.7.x before 7.7.5, 7.8.x b...

6.1CVSS5.9AI score0.01008EPSS

SaveExploits0References1Affected Software2

Prion•added 2018/08/28 12:29 p.m.•21 views

Cross site scripting

4.3CVSS5.9AI score0.01008EPSS

SaveExploits0References1Affected Software2

NVD•added 2018/08/28 12:29 p.m.•19 views

CVE-2018-13395

6.1CVSS5.9AI score0.01008EPSS

SaveExploits0References1

Atlassian•added 2018/08/27 6:17 a.m.•605 views

XSS in various resources when moving issues through the Epic Colour field of an issue - CVE-2018-13395

6.1CVSS3.1AI score0.01008EPSS

SaveExploits0Affected Software1

Atlassian•added 2018/08/27 6:17 a.m.•43 views

XSS in various resources when moving issues through the Epic Colour field of an issue - CVE-2018-13395

6.1CVSS3.1AI score0.01008EPSS

SaveExploits0

Prion•added 2018/08/15 12:29 p.m.•23 views

Cross site request forgery (csrf)

The acceptAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Confluence Questions was updated to a fixed version in Confluence version 6.9.0, allows remote attackers to modify a comment into an answer via a Cross-site request forgery CSRF vulnerability...

4.3CVSS6.5AI score0.00841EPSS

SaveExploits0References2Affected Software1

NVD•added 2018/08/15 12:29 p.m.•26 views

CVE-2018-13393

The convertCommentToAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Confluence Questions was updated to a fixed version in Confluence version 6.9.0, allows remote attackers to modify a comment into an answer via a Cross-site request forgery CSRF...

6.5CVSS6.6AI score0.008EPSS

SaveExploits0References2

NVD•added 2018/08/15 12:29 p.m.•20 views

CVE-2018-13394

6.5CVSS6.6AI score0.00841EPSS

SaveExploits0References2

Prion•added 2018/08/15 12:29 p.m.•28 views

Cross site request forgery (csrf)

4.3CVSS6.5AI score0.008EPSS

SaveExploits0References2Affected Software1

CVE•added 2018/08/15 12:00 p.m.•60 views

CVE-2018-13393

The CVE-2018-13393 vulnerability concerns Atlassian Confluence Questions prior to version 2.6.6. The issue is a CSRF flaw in the convertCommentToAnswer resource that could let a remote attacker modify a user’s comment into an answer. Atlassian notes a fixed version in Confluence 6.9.0, with the v...

6.5CVSS6.5AI score0.008EPSS

SaveExploits0References2Affected Software1

CVE•added 2018/08/15 12:00 p.m.•64 views

CVE-2018-13394

CVE-2018-13394 affects Atlassian Confluence Questions prior to 2.6.6. The vulnerability is a CSRF in the acceptAnswer resource that lets an attacker, via a remote request, convert a comment into an accepted answer. The fixed version is bundled in Confluence 6.9.0 (and the Questions add-on should ...

6.5CVSS6.5AI score0.00841EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2018/08/15 12:00 p.m.•29 views

CVE-2018-13393

6.5AI score0.008EPSS

SaveExploits0References2

Cvelist•added 2018/08/15 12:00 p.m.•25 views

CVE-2018-13394

6.5AI score0.00841EPSS

SaveExploits0References2

Atlassian•added 2018/08/15 1:01 a.m.•43 views

The acceptAnswer resource of Confluence Questions was vulnerable to CSRF - CVE-2018-13394

The acceptAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Confluence Questions was updated to a fixed version in Confluence version 6.9.0, allows remote attackers to make a user accept an answer via a Cross-site request forgery CSRF vulnerability...

6.5CVSS6AI score0.00841EPSS

SaveExploits0

Atlassian•added 2018/08/15 12:44 a.m.•44 views

The convertCommentToAnswer resource of Confluence Questions was vulnerable to CSRF - CVE-2018-13393

The convertCommentToAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Confluence Questions was updated to a fixed version in Confluence version 6.9.0, allows remote attackers to make a user modify a comment into an answer via a Cross-site request forge...

6.5CVSS5.9AI score0.008EPSS

SaveExploits0

CNVD•added 2018/08/15 12:00 a.m.•13 views

Atlassian Fisheye and Crucible Cross-Site Scripting Vulnerabilities (CNVD-2018-17876)

Atlassian FishEye and Crucible are both products of the Australian company Atlassian, FishEye is a suite of software for deep viewing of source code repositories and Crucible is a suite of code review tools. A cross-site scripting vulnerability exists in Atlassian Fisheye and Crucible versions...

6.1CVSS6.1AI score0.01677EPSS

SaveExploits0References1

NVD•added 2018/08/13 1:29 p.m.•24 views

CVE-2018-13392

Several resources in Atlassian Fisheye and Crucible before version 4.6.0 allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in linked issue keys...

6.1CVSS6AI score0.01677EPSS

SaveExploits0References3

OSV•added 2018/08/13 1:29 p.m.•7 views

CVE-2018-13392

6.1CVSS5.4AI score0.01677EPSS

SaveExploits0References3

Prion•added 2018/08/13 1:29 p.m.•22 views

Cross site scripting

4.3CVSS6AI score0.01677EPSS

SaveExploits0References3Affected Software2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by