Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

548 matches found

OSV
OSV•added 2018/04/24 12:29 p.m.•6 views

CVE-2018-5228

The /browse/raw resource in Atlassian Fisheye and Crucible before version 4.5.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the handling of response headers...

6.1CVSS5.4AI score0.01212EPSS
SaveExploits0References3
Prion
Prion•added 2018/04/24 12:29 p.m.•25 views

Cross site scripting

The /browse/raw resource in Atlassian Fisheye and Crucible before version 4.5.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the handling of response headers...

4.3CVSS5.9AI score0.01212EPSS
SaveExploits0References3Affected Software2
Cvelist
Cvelist•added 2018/04/24 12:0 p.m.•27 views

CVE-2018-5228

The /browse/raw resource in Atlassian Fisheye and Crucible before version 4.5.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the handling of response headers...

6AI score0.01212EPSS
SaveExploits0References3
CVE
CVE•added 2018/04/24 12:0 p.m.•53 views

CVE-2018-5228

CVE-2018-5228 affects Atlassian Fisheye and Crucible. The /browse/~raw resource is vulnerable to cross-site scripting due to improper handling of response headers in versions before 4.5.3, allowing remote attackers to inject arbitrary HTML or JavaScript. Connected documents confirm the affected p...

6.1CVSS5.9AI score0.01212EPSS
SaveExploits0References3Affected Software1
Atlassian
Atlassian•added 2018/04/23 3:35 a.m.•615 views

XSS through header injection in the /browse/~raw resource - CVE-2018-5228

The /browse/raw resource in Atlassian Fisheye and Crucible before version 4.5.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the handling of response headers...

6.1CVSS4.4AI score0.01212EPSS
SaveExploits0Affected Software1
Atlassian
Atlassian•added 2018/04/23 3:35 a.m.•32 views

XSS through header injection in the /browse/~raw resource - CVE-2018-5228

The /browse/raw resource in Atlassian Fisheye and Crucible before version 4.5.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the handling of response headers...

6.1CVSS4.4AI score0.01212EPSS
SaveExploits0
0day.today
0day.today•added 2018/04/07 12:0 a.m.•278 views

Atlassian Fisheye / Crucible 4.5.2 Code Execution Vulnerability

Atlassian Fisheye and Crucible versions 4.5.0 through 4.5.2 suffer from a code execution vulnerability. This email refers to the advisory found at https://confluence.atlassian.com/x/aS5sO and https://confluence.atlassian.com/x/Zi5sO . CVE ID: CVE-2018-5223. Product: Fisheye and Crucible. Affected...

7.3AI score0.02203EPSS
SaveExploits1
CNVD
CNVD•added 2018/04/02 12:0 a.m.•5 views

Atlassian Fisheye and Crucible Code Execution Vulnerabilities (CNVD-2018-06871)

Atlassian FishEye and Crucible are both products of the Australian company Atlassian, FishEye is a suite of software for deep viewing of source code repositories and Crucible is a suite of code review tools. A security vulnerability exists in Atlassian Fisheye and Crucible. An attacker could...

7.2CVSS7.3AI score0.02203EPSS
SaveExploits1References1
Prion
Prion•added 2018/03/29 1:29 p.m.•18 views

Design/Logic Flaw

Fisheye and Crucible did not correctly check if a configured Mercurial repository URI contained values that the Windows operating system may consider argument parameters. An attacker who has permission to add a repository in Fisheye or Crucible can execute code of their choice on systems that run...

6.5CVSS7.1AI score0.02203EPSS
SaveExploits1References5Affected Software2
OSV
OSV•added 2018/03/29 1:29 p.m.•6 views

CVE-2018-5223

Fisheye and Crucible did not correctly check if a configured Mercurial repository URI contained values that the Windows operating system may consider argument parameters. An attacker who has permission to add a repository in Fisheye or Crucible can execute code of their choice on systems that run...

7.2CVSS5.9AI score0.02203EPSS
SaveExploits1References5
NVD
NVD•added 2018/03/29 1:29 p.m.•36 views

CVE-2018-5223

Fisheye and Crucible did not correctly check if a configured Mercurial repository URI contained values that the Windows operating system may consider argument parameters. An attacker who has permission to add a repository in Fisheye or Crucible can execute code of their choice on systems that run...

7.2CVSS7AI score0.02203EPSS
SaveExploits1References5
Cvelist
Cvelist•added 2018/03/29 1:0 p.m.•30 views

CVE-2018-5223

Fisheye and Crucible did not correctly check if a configured Mercurial repository URI contained values that the Windows operating system may consider argument parameters. An attacker who has permission to add a repository in Fisheye or Crucible can execute code of their choice on systems that run...

7AI score0.02203EPSS
SaveExploits1References5
CVE
CVE•added 2018/03/29 1:0 p.m.•65 views

CVE-2018-5223

CVE-2018-5223 affects Atlassian Fisheye and Crucible running on Windows. The issue arises from improper handling of Mercurial repository URIs, which can be interpreted as Windows argument parameters, enabling code execution by an authenticated attacker who can add repositories. Affected versions ...

7.2CVSS7AI score0.02203EPSS
SaveExploits1References5Affected Software1
CNVD
CNVD•added 2018/03/28 12:0 a.m.•6 views

Atlassian FishEye/Crucible Cross-Site Scripting Vulnerability

Atlassian FishEye and Crucible are both products of the Australian company Atlassian, FishEye is a suite of software for deep viewing of source code repositories and Crucible is a suite of code review tools. A cross-site scripting vulnerability exists in multiple sources in Atlassian Fisheye and...

4.8CVSS6.4AI score0.00617EPSS
SaveExploits0References1
NVD
NVD•added 2018/03/22 1:29 p.m.•21 views

CVE-2017-18094

Various resources in Atlassian Fisheye and Crucible before version 4.4.3 the fixed version for 4.4.x and 4.5.0 allow remote attackers with administrative privileges to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability through the base path setting of a configured fi...

4.8CVSS5AI score0.00617EPSS
SaveExploits0References2
OSV
OSV•added 2018/03/22 1:29 p.m.•5 views

CVE-2017-18094

Various resources in Atlassian Fisheye and Crucible before version 4.4.3 the fixed version for 4.4.x and 4.5.0 allow remote attackers with administrative privileges to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability through the base path setting of a configured fi...

4.8CVSS5.4AI score0.00617EPSS
SaveExploits0References2
Prion
Prion•added 2018/03/22 1:29 p.m.•22 views

Cross site scripting

Various resources in Atlassian Fisheye and Crucible before version 4.4.3 the fixed version for 4.4.x and 4.5.0 allow remote attackers with administrative privileges to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability through the base path setting of a configured fi...

3.5CVSS5AI score0.00617EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist•added 2018/03/22 1:0 p.m.•27 views

CVE-2017-18094

Various resources in Atlassian Fisheye and Crucible before version 4.4.3 the fixed version for 4.4.x and 4.5.0 allow remote attackers with administrative privileges to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability through the base path setting of a configured fi...

5AI score0.00617EPSS
SaveExploits0References2
CVE
CVE•added 2018/03/22 1:0 p.m.•58 views

CVE-2017-18094

CVE-2017-18094 concerns Atlassian FishEye and Crucible prior to versions 4.4.3 (for 4.4.x line) and 4.5.0, where remote attackers with administrative privileges can inject arbitrary HTML or JavaScript via a cross-site scripting (XSS) vulnerability in the base path setting of a configured filesyst...

4.8CVSS5AI score0.00617EPSS
SaveExploits0References2Affected Software1
Atlassian
Atlassian•added 2018/03/22 5:48 a.m.•550 views

XSS through header injection in the /browse/~raw resource - CVE-2018-5228

The /browse/raw resource in Atlassian Fisheye and Crucible before version 4.5.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the handling of response headers...

6.1CVSS4.4AI score0.01212EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder