EUVD-2010-1195

Malware in sbrugna...

EUVD-2018-5344

Malware in sbrugna...

EUVD-2018-5347

Malware in sbrugna...

EUVD-2021-25557

Malware in sbrugna...

EUVD-2021-28333

Malicious code in bioql PyPI...

EUVD-2021-30808

Malicious code in bioql PyPI...

Atlassian Jira 10.3.x < 10.3.5 Privilege Escalation

According to its self-reported version number, the Atlassian Jira application running on the remote host is prior to 9.12.2, 10.3.x prior to 10.3.5 or 10.5.x prior to 10.5.1. It is, therefore, affected by a privilege escalation vulnerability. Note that the scanner has not tested for these issues...

CVE-2019-15002

An exploitable Cross-Site Request Forgery (CSRF) vulnerability exists in Atlassian Jira versions 7.6.4 through 8.1.0 . The root cause is that the login form does not require a CSRF token. An attacker can exploit this by submitting a POST request to /login.jsp with a valid username and password, w...

Atlassian Jira Service Management Data Center and Server < 5.4.20 / 5.5.x < 5.12.7 / 5.13.x < 5.15.2 Broken Access Control (JSDSERVER-15307)

The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-15307 advisory. - In Spring Security, versions 5.7.x prior to 5.7.12, 5.8.x prior to 5.8.11, versions 6.0.x prior to...

Atlassian Jira < 8.5.9 Xss In Navigation - Search

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.5.9. It is, therefore, affected by a vulnerability which permits remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability. Note...

CVE-2006-3339

secure/ConfigureReleaseNote.jspa in Atlassian JIRA 3.6.2-156 allows remote attackers to obtain sensitive information via unspecified manipulations of the projectId parameter, which displays the installation path and other system information in an error message...