Lucene search
+L

1256 matches found

NVD
NVD
•added 2017/04/10 3:59 a.m.•37 views

CVE-2016-4320

Atlassian Bitbucket Server before 4.7.1 allows remote attackers to read the first line of an arbitrary file via a directory traversal attack on the pull requests resource...

4.3CVSS4.7AI score0.01755EPSS
SaveExploits0References3
Prion
Prion
•added 2017/04/10 3:59 a.m.•25 views

Directory traversal

Atlassian Bitbucket Server before 4.7.1 allows remote attackers to read the first line of an arbitrary file via a directory traversal attack on the pull requests resource...

4CVSS7.2AI score0.01755EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2017/04/10 3:00 a.m.•43 views

CVE-2016-4320

Atlassian Bitbucket Server before 4.7.1 allows remote attackers to read the first line of an arbitrary file via a directory traversal attack on the pull requests resource...

4.7AI score0.01755EPSS
SaveExploits0References3
CVE
CVE
•added 2017/04/10 3:00 a.m.•63 views

CVE-2016-4320

CVE-2016-4320 affects Atlassian Bitbucket Server prior to 4.7.1. A directory traversal in the pull requests resource allows remote attackers to read the first line of an arbitrary file, leaking partial confidentiality. The issue is triggered via a directory traversal path and is limited to the fi...

4.3CVSS4.7AI score0.01755EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/04/10 12:00 a.m.•7 views

CVE-2016-4320: Improper Limitation of a Pathname to a Restricted Directory

Atlassian Bitbucket Server before 4.7.1 allows remote attackers to read the first line of an arbitrary file via a directory traversal attack on the pull requests resource...

4.3CVSS6AI score0.01755EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/04/10 12:00 a.m.•3 views

PT-2017-8474

Name of the Vulnerable Software and Affected Versions Atlassian Bitbucket Server versions prior to 4.7.1 Description The issue allows remote attackers to read the first line of an arbitrary file via a directory traversal attack on the pull requests resource. Recommendations For versions prior to...

4.3CVSS6AI score0.01755EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2017/02/08 12:00 a.m.•20 views

Atlassian Bitbucket Server 4.x < 4.7.1 Directory Traversal

Binary data 9940.prm...

4.3CVSS7.3AI score0.01755EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2017/02/08 12:00 a.m.•48 views

Atlassian Bitbucket Server 4.x < 4.8.2 Directory Traversal

Binary data 9941.prm...

7.8CVSS8.1AI score0.37171EPSS
SaveExploits0References2
OSV
OSV
•added 2017/01/23 9:59 p.m.•9 views

CVE-2016-6668

The Atlassian Hipchat Integration Plugin for Bitbucket Server 6.26.0 before 6.27.5, 6.28.0 before 7.3.7, and 7.4.0 before 7.8.17; Confluence HipChat plugin 6.26.0 before 7.8.17; and HipChat for JIRA plugin 6.26.0 before 7.8.17 allows remote attackers to obtain the secret key for communicating wit...

7.5CVSS5.8AI score0.03743EPSS
SaveExploits0References6
NVD
NVD
•added 2017/01/23 9:59 p.m.•17 views

CVE-2016-6668

The Atlassian Hipchat Integration Plugin for Bitbucket Server 6.26.0 before 6.27.5, 6.28.0 before 7.3.7, and 7.4.0 before 7.8.17; Confluence HipChat plugin 6.26.0 before 7.8.17; and HipChat for JIRA plugin 6.26.0 before 7.8.17 allows remote attackers to obtain the secret key for communicating wit...

7.5CVSS7.5AI score0.03743EPSS
SaveExploits0References6
Prion
Prion
•added 2017/01/23 9:59 p.m.•23 views

Design/Logic Flaw

The Atlassian Hipchat Integration Plugin for Bitbucket Server 6.26.0 before 6.27.5, 6.28.0 before 7.3.7, and 7.4.0 before 7.8.17; Confluence HipChat plugin 6.26.0 before 7.8.17; and HipChat for JIRA plugin 6.26.0 before 7.8.17 allows remote attackers to obtain the secret key for communicating wit...

5CVSS7.1AI score0.03743EPSS
SaveExploits0References6Affected Software2
Cvelist
Cvelist
•added 2017/01/23 9:00 p.m.•30 views

CVE-2016-6668

The Atlassian Hipchat Integration Plugin for Bitbucket Server 6.26.0 before 6.27.5, 6.28.0 before 7.3.7, and 7.4.0 before 7.8.17; Confluence HipChat plugin 6.26.0 before 7.8.17; and HipChat for JIRA plugin 6.26.0 before 7.8.17 allows remote attackers to obtain the secret key for communicating wit...

7.5AI score0.03743EPSS
SaveExploits0References6
CVE
CVE
•added 2017/01/23 9:00 p.m.•88 views

CVE-2016-6668

The CVE-2016-6668 issue affects Atlassian HipChat integration plugins across Bitbucket Server, Confluence HipChat, and HipChat for JIRA. The vulnerability enables remote attackers to obtain the secret key used to communicate with HipChat instances by reading unspecified pages. Affected versions i...

7.5CVSS7.4AI score0.03743EPSS
SaveExploits0References6Affected Software1
Tenable Nessus
Tenable Nessus
•added 2017/01/23 12:00 a.m.•15 views

Atlassian Bitbucket Server Detection

Binary data 9889.prm...

7.3AI score
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/01/23 12:00 a.m.•4 views

CVE-2016-6668: Exposure of Sensitive Information to an Unauthorized Actor

The Atlassian Hipchat Integration Plugin for Bitbucket Server 6.26.0 before 6.27.5, 6.28.0 before 7.3.7, and 7.4.0 before 7.8.17; Confluence HipChat plugin 6.26.0 before 7.8.17; and HipChat for JIRA plugin 6.26.0 before 7.8.17 allows remote attackers to obtain the secret key for communicating wit...

7.5CVSS6AI score0.03743EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/01/23 12:00 a.m.•1 views

PT-2017-9013

Name of the Vulnerable Software and Affected Versions Atlassian Hipchat Integration Plugin for Bitbucket Server versions 6.26.0 through 6.27.5 Atlassian Hipchat Integration Plugin for Bitbucket Server versions 6.28.0 through 7.3.7 Atlassian Hipchat Integration Plugin for Bitbucket Server versions...

7.5CVSS0.03743EPSS
SaveExploits0References10
Atlassian
Atlassian
•added 2017/01/18 5:51 p.m.•31 views

Generating SSH Keys is broken (using Bitbucket Server) -- ui and config file

Please watch my short video illustrating the experience. https://www.youtube.com/watch?v=wPUAkG78BFE&feature=youtu.be Scenario 1: On MacOS X Sierra when setting up SourceTree for first time and choosing "SSH" as the authentication method, SourceTree: Should not have a URL for the Bitbucket...

7.5AI score
SaveExploits0
Atlassian
Atlassian
•added 2017/01/18 5:51 p.m.•32 views

Generating SSH Keys is broken (using Bitbucket Server) -- ui and config file

Please watch my short video illustrating the experience. https://www.youtube.com/watch?v=wPUAkG78BFE&feature=youtu.be Scenario 1: On MacOS X Sierra when setting up SourceTree for first time and choosing "SSH" as the authentication method, SourceTree: Should not have a URL for the Bitbucket...

7.5AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2017/01/18 5:47 p.m.•28 views

Generating SSH Keys is broken (using Bitbucket Server) -- ui and config file

Please watch my short video illustrating the experience. https://www.youtube.com/watch?v=wPUAkG78BFE&feature=youtu.be Scenario 1: On MacOS X Sierra when setting up SourceTree for first time and choosing "SSH" as the authentication method, SourceTree: Should not have a URL for the Bitbucket...

7.5AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2017/01/18 5:47 p.m.•32 views

Generating SSH Keys is broken (using Bitbucket Server) -- ui and config file

Please watch my short video illustrating the experience. https://www.youtube.com/watch?v=wPUAkG78BFE&feature=youtu.be Scenario 1: On MacOS X Sierra when setting up SourceTree for first time and choosing "SSH" as the authentication method, SourceTree: Should not have a URL for the Bitbucket...

7.5AI score
SaveExploits0
Rows per page
Query Builder