1697 matches found
CVE-2021-43949
Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view private objects via a Broken Access Control vulnerability in the Custom Fields feature. The affected versions are before version 4.21.0...
CVE-2021-43949
CVE-2021-43949 affects Atlassian Jira Service Management Server and Data Center prior to 4.21.0. The issue is a Broken Access Control in the Custom Fields feature that allows authenticated remote attackers to view private objects. This is confirmed across multiple connected sources (e.g., Jira JS...
CVE-2021-43951
CVE-2021-43951 affects Atlassian Jira Service Management Server and Data Center (pre-4.21.0). The vulnerability is an information disclosure via the Create Object type mapping feature, allowing authenticated remote attackers to view object import configuration details. The issue is fixed in versi...
CVE-2021-43951
Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view object import configuration details via an Information Disclosure vulnerability in the Create Object type mapping feature. The affected versions are before version 4.21.0...
Security Bulletin: WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is affected by multiple vulnerabilities in Apache log4j (CVE-2021-4104, CVE-2021-45046)
Summary Multiple vulnerabilities in Apache log4j affect the IBM WebSphere Application Server and IBM WebSphere Application Server Liberty CVE-2021-4104, CVE-2021-45046 Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions...
Security Bulletin: WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is vulnerable to a Denial of Service (CVE-2021-38951)
Summary WebSphere Application Server is vulnerable to a Denial of Service. This has been addressed. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions ---|--- Jazz for Service Management| 1.1.3...
Security Bulletin: IBM Jazz for Service Management is vulnerable to a Apache Log4j vulnerability(CVE-2021-44228)
Summary Based on current information and analysis, IBM Jazz for Service Management does not use Apache log4j-core library which is vulnerable to CVE-2021-44228. However, IBM Jazz for Service Management may be impacted because the old version of Log4j-1.2-api and Log4j-api are used in the...
Security Bulletin: IBM Jazz for Service Management is vulnerable to a Apache Log4j vulnerability (CVE-2021-44832)
Summary Based on current information and analysis, IBM Jazz for Service Management does not use Apache log4j-core library which is vulnerable to CVE-2021-44832. However, IBM Jazz for Service Management may be impacted because the old version of Log4j-1.2-api and Log4j-api are used in the...
Sourcecodester Vehicle Service Management System Cross-Site Scripting Vulnerability (CNVD-2022-02639)
Sourcecodester Vehicle Service Management System is an open source PHP project. A simple Web application for automotive repair/service stores or businesses. sourcecodester Vehicle Service Management System version 1.0 has a cross-site scripting vulnerability that stems from a lack of valid...
Sourcecodester Vehicle Service Management System Cross-Site Scripting Vulnerability (CNVD-2022-02641)
Sourcecodester Vehicle Service Management System is an open source PHP project. A simple Web application for automotive repair/service stores or businesses. sourcecodester Vehicle Service Management System version 1.0 has a cross-site scripting vulnerability that stems from a lack of effective...
Sourcecodester Vehicle Service Management System Cross-Site Scripting Vulnerability
Sourcecodester Vehicle Service Management System is an open source PHP project. A simple Web application for automotive repair/service stores or businesses. sourcecodester Vehicle Service Management System version 1.0 has a cross-site scripting vulnerability that stems from a lack of valid...
Sourcecodester Vehicle Service Management System Cross-Site Scripting Vulnerability (CNVD-2022-02805)
Sourcecodester Vehicle Service Management System is an open source PHP project. Sourcecodester Vehicle Service Management System version 1.0 contains a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping in the user list section of the software's login...
Sourcecodester Vehicle Service Management System has an unspecified vulnerability
Sourcecodester Vehicle Service Management System is an open source PHP project . Sourcecodester Vehicle Service Management System version 1.0 has a security vulnerability , the vulnerability stems from the system lacks effective protection against cookies , an attacker can use the vulnerability t...
Sourcecodester Vehicle Service Management System Cross-Site Scripting Vulnerability (CNVD-2022-02640)
Sourcecodester Vehicle Service Management System is an open source PHP project. A simple Web application for automotive repair/service stores or businesses. Sourcecodester Vehicle Service Management System version 1.0 has a cross-site scripting vulnerability that stems from the vulnerability stem...
Sourcecodester Vehicle Service Management System File Upload Vulnerability
Sourcecodester Vehicle Service Management System is an open source PHP project. A simple web application for automotive repair/service stores or businesses. Sourcecodester Vehicle Service Management System suffers from a file upload vulnerability that can be exploited by attackers to upload...
Sourcecodester Vehicle Service Management System Cross-Site Scripting Vulnerability (CNVD-2022-02642)
Sourcecodester Vehicle Service Management System is an open source PHP project. A simple Web application for automotive repair/service stores or businesses. sourcecodester Vehicle Service Management System version 1.0 has a cross-site scripting vulnerability that stems from a lack of valid...
CVE-2021-46078
An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to a Stored Cross-Site Scripting vulnerability...
CVE-2021-46078
An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to a Stored Cross-Site Scripting vulnerability...