CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3619 matches found

Hacker One•added 2019/03/29 10:45 a.m.•151 views

Mail.ru: RCE on shared.mail.ru due to "widget" plugin

Confluence widget connector vulnerable to CVE-2019-3396 was available on shared.mail.ru...

10CVSS8.3AI score0.99913EPSS

SaveExploits24

Dsquare•added 2019/03/28 12:00 a.m.•81 views

Confluence File Disclosure

File disclosure vulnerability in Confluence widget connector macro Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

10CVSS8.3AI score0.99913EPSS

SaveExploits24

CNVD•added 2019/03/26 12:00 a.m.•17 views

Atlassian Confluence Server Server-Side Template Injection Vulnerability

Atlassian Confluence Server is a suite of specialized enterprise knowledge management and collaboration software from Atlassian Australia that can also be used to build enterprise WiKi. A security vulnerability exists in Atlassian Confluence Server. The vulnerability can be exploited by a remote...

10CVSS8.6AI score0.99913EPSS

SaveExploits24References1

CNVD•added 2019/03/26 12:00 a.m.•14 views

Atlassian Confluence Server and Atlassian Data Center Server-Side Request Forgery Vulnerabilities

Atlassian Confluence Server and Atlassian Data Center are both products of Atlassian Australia.Atlassian Confluence Server is a professional enterprise knowledge management and collaboration software that can also be used to build enterprise WiKi. Atlassian Data Center is a data center system. A...

9.8CVSS7AI score0.06712EPSS

SaveExploits0References1

osv_cve•added 2019/03/25 7:29 p.m.•12 views

CVE-2019-3396

The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 the fixed version for 6.6.x, from version 6.7.0 before 6.12.3 the fixed version for 6.12.x, from version 6.13.0 before 6.13.3 the fixed version for 6.13.x, and from version 6.14.0 before 6.14.2 the fixed version for...

9.8CVSS8.8AI score0.99913EPSS

SaveExploits24References6

osv_cve•added 2019/03/25 7:29 p.m.•8 views

CVE-2019-3395

The WebDAV endpoint in Atlassian Confluence Server and Data Center before version 6.6.7 the fixed version for 6.6.x, from version 6.7.0 before 6.8.5 the fixed version for 6.8.x, and from version 6.9.0 before 6.9.3 the fixed version for 6.9.x allows remote attackers to send arbitrary HTTP and WebD...

9.8CVSS7.5AI score0.06712EPSS

SaveExploits0References1

NVD•added 2019/03/25 7:29 p.m.•22 views

CVE-2019-3395

9.8CVSS9.5AI score0.06712EPSS

SaveExploits0References1

NVD•added 2019/03/25 7:29 p.m.•32 views

CVE-2019-3396

10CVSS10AI score0.99913EPSS

SaveExploits24References6

Prion•added 2019/03/25 7:29 p.m.•53 views

Path traversal

10CVSS9.8AI score0.99913EPSS

SaveExploits24References5Affected Software2

Prion•added 2019/03/25 7:29 p.m.•27 views

Server side request forgery (ssrf)

7.5CVSS9.4AI score0.06712EPSS

SaveExploits0References1Affected Software2

canvas•added 2019/03/25 7:29 p.m.•91 views

Immunity Canvas: CONFLUENCE_MACRO_LFI

Name| confluencemacrolfi ---|--- CVE| CVE-2019-3396 Exploit Pack| CANVAS Description| Confluence Server and Data Center - LFI CVE-2019-3396 Notes| Repeatability: NOTES: A Default behavior =================== By default, this module attempts to automatically locate and then fetch the confluence...

10CVSS8.2AI score0.99913EPSS

SaveExploits24

Cvelist•added 2019/03/25 6:37 p.m.•45 views

CVE-2019-3396

9.9AI score0.99913EPSS

SaveExploits24References5

CVE•added 2019/03/25 6:37 p.m.•2211 views

CVE-2019-3396

CVE-2019-3396 – Atlassian Confluence Widget Connector SSTI RCE : A server-side template injection flaw in the Widget Connector macro allows remote attackers to perform path traversal and achieve remote code execution on Confluence Server/Data Center. Fixes are in Confluence versions: 6.6.12 (6.6....

10CVSS8.8AI score0.99913EPSS

SaveIn wildExploits24References6Affected Software1

CVE•added 2019/03/25 6:37 p.m.•113 views

CVE-2019-3395

CVE-2019-3395 affects Atlassian Confluence Server and Data Center via an SSRF vulnerability in the WebDAV endpoint. The issue allows remote attackers to send arbitrary HTTP/WebDAV requests from the Confluence server due to a Server-Side Request Forgery flaw. Affected versions are: before 6.6.7 (f...

9.8CVSS9.3AI score0.06712EPSS

SaveExploits0References1Affected Software2

Cvelist•added 2019/03/25 6:37 p.m.•31 views

CVE-2019-3395

9.4AI score0.06712EPSS

SaveExploits0References1

Vulnrichment•added 2019/03/25 6:37 p.m.•30 views

CVE-2019-3396

8.8AI score0.99913EPSS

SaveExploits24References5

Rapid7 Vulnerability Database (full)•added 2019/03/25 12:00 a.m.•6 views

CVE-2019-3395: Server-Side Request Forgery (SSRF)

9.8CVSS6AI score0.06712EPSS

SaveExploits0References2

Positive Technologies•added 2019/03/25 12:00 a.m.•2 views

PT-2019-16554

Name of the Vulnerable Software and Affected Versions Atlassian Confluence Server and Data Center versions prior to 6.6.7 Atlassian Confluence Server and Data Center versions 6.7.0 through 6.8.4 Atlassian Confluence Server and Data Center versions 6.9.0 through 6.9.2 Description The issue allows...

9.8CVSS0.06712EPSS

SaveExploits0References4

Rapid7 Vulnerability Database (full)•added 2019/03/25 12:00 a.m.•7 views

CVE-2019-3396: Improper Limitation of a Pathname to a Restricted Directory

10CVSS8.8AI score0.99913EPSS

SaveExploits24References2

attackerkb•added 2019/03/25 12:00 a.m.•268 views

Confluence Unauthorized RCE Vulnerability

10CVSS8.8AI score0.99913EPSS

SaveIn wildExploits24References9

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by