Lucene search
+L

4999 matches found

CNVD
CNVD
added 2017/01/06 12:00 a.m.11 views

Atlassian Confluence HTML Injection Vulnerability

Atlassian Confluence is a professional enterprise knowledge management and collaboration software that can also be used to build enterprise WiKi. An HTML injection vulnerability exists in Atlassian Confluence. An attacker can exploit the vulnerability to execute arbitrary script code in the brows...

6.1CVSS7.8AI score0.03174EPSS
SaveExploits3References1
OpenVAS
OpenVAS
added 2017/01/05 12:00 a.m.44 views

Atlassian Confluence XSS Vulnerability

Atlassian Confluence is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

5.4AI score
SaveExploits0References1
Packet Storm
Packet Storm
added 2017/01/04 12:00 a.m.103 views

Atlassian Confluence 5.9.12 Cross Site Scripting

===== Tempest Security Intelligence - ADV-3/2016 CVE-2016-6283 ============== Persisted Cross-Site Scripting XSS in Confluence Jira Software ---------------------------------------------------------------- Authors: - Jodson Santos - [email protected] Tempest Security Intelligence -...

6.4AI score0.03174EPSS
SaveExploits3
zdt
zdt
added 2017/01/04 12:00 a.m.80 views

Atlassian Confluence Jira 5.9.12 - Persistent Cross-Site Scripting Vulnerability

Tempest Security Intelligence Advisory ADV-3/2016 - Atlassian Confluence version 5.9.12 is vulnerable to persistent cross site scripting because it fails to securely validate user controlled data, thus making it possible for an attacker to supply crafted input in order to harm users. The bug occu...

4.3CVSS6.3AI score0.03174EPSS
SaveExploits3
exploitpack
exploitpack
added 2017/01/04 12:00 a.m.16 views

Atlassian Confluence 5.10.6 - Persistent Cross-Site Scripting

Atlassian Confluence 5.10.6 - Persistent Cross-Site Scripting...

2.7AI score
SaveExploits0
Exploit DB
Exploit DB
added 2017/01/04 12:00 a.m.96 views

Atlassian Confluence < 5.10.6 - Persistent Cross-Site Scripting

===== Tempest Security Intelligence - ADV-3/2016 CVE-2016-6283 ============== Persisted Cross-Site Scripting XSS in Confluence Jira Software ---------------------------------------------------------------- Authors: - Jodson Santos - [email protected] Tempest Security Intelligence -...

6.1CVSS6.1AI score0.03174EPSS
SaveExploits3
OSV
OSV
added 2016/12/09 10:59 p.m.9 views

CVE-2016-6496

The LDAP directory connector in Atlassian Crowd before 2.8.8 and 2.9.x before 2.9.5 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted serialized Java object, aka LDAP entry poisoning...

9.8CVSS6.1AI score0.04705EPSS
SaveExploits0References5
NVD
NVD
added 2016/12/09 10:59 p.m.23 views

CVE-2016-6496

The LDAP directory connector in Atlassian Crowd before 2.8.8 and 2.9.x before 2.9.5 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted serialized Java object, aka LDAP entry poisoning...

9.8CVSS9.7AI score0.04705EPSS
SaveExploits0References5
Prion
Prion
added 2016/12/09 10:59 p.m.24 views

Design/Logic Flaw

The LDAP directory connector in Atlassian Crowd before 2.8.8 and 2.9.x before 2.9.5 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted serialized Java object, aka LDAP entry poisoning...

7.5CVSS8.2AI score0.04705EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2016/12/09 10:00 p.m.71 views

CVE-2016-6496

CVE-2016-6496 affects Atlassian Crowd LDAP entry handling. The LDAP directory connector is vulnerable to LDAP Java object injection: an attacker can cause remote code execution by sending a crafted serialized Java object in an LDAP attribute. Affected versions are all Crowd 1.4.1 to 2.8.7 (and 2....

9.8CVSS9.6AI score0.04705EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2016/12/09 10:00 p.m.35 views

CVE-2016-6496

The LDAP directory connector in Atlassian Crowd before 2.8.8 and 2.9.x before 2.9.5 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted serialized Java object, aka LDAP entry poisoning...

9.7AI score0.04705EPSS
SaveExploits0References5
Atlassian
Atlassian
added 2016/11/28 4:10 a.m.24 views

Update atlassian-gadgets in Confluence to fix AG-1502/ACG-5

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/CONFCLOUD-45392. panel For Confluence Server as https://ecosystem.atlassian.net/browse/AG-1502 has been fixed, upgrade atlassian-gadgets t...

1.6AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
added 2016/11/28 4:10 a.m.19 views

Update atlassian-gadgets in Confluence to fix AG-1502/ACG-5

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Cloud. Using Confluence Server? See the corresponding bug report|http://jira.atlassian.com/browse/CONFSERVER-45392. panel For Confluence Server as https://ecosystem.atlassian.net/browse/AG-1502 has been fixed, upgrade atlassian-gadgets ...

1.6AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
added 2016/11/28 4:10 a.m.27 views

Update atlassian-gadgets in Confluence to fix AG-1502/ACG-5

For Confluence Server as https://ecosystem.atlassian.net/browse/AG-1502 has been fixed, upgrade atlassian-gadgets to a version = 4.2.14 to pick up a fix for AG-1502. For Confluence Cloud as https://ecosystem.atlassian.net/browse/ACG-5 has been fixed, upgrade atlassian-gadgets to a version = 5.1.1...

1.9AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
added 2016/11/28 4:10 a.m.26 views

Update atlassian-gadgets in Confluence to fix AG-1502/ACG-5

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/CONFCLOUD-45392. panel For Confluence Server as https://ecosystem.atlassian.net/browse/AG-1502 has been fixed, upgrade atlassian-gadgets t...

1.6AI score
SaveExploits0
Atlassian
Atlassian
added 2016/11/28 3:58 a.m.20 views

Update atlassian-gadgets in JIRA Server to fix AG-1502

Now that https://ecosystem.atlassian.net/browse/AG-1502 has been fixed, upgrade atlassian-gadgets to a version that contains a fix for it. In this case JIRA Server would update atlassian-gadgets to a version = 4.2.14...

1.6AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
added 2016/11/28 3:58 a.m.22 views

Update atlassian-gadgets in JIRA Server to fix AG-1502

Now that https://ecosystem.atlassian.net/browse/AG-1502 has been fixed, upgrade atlassian-gadgets to a version that contains a fix for it. In this case JIRA Server would update atlassian-gadgets to a version = 4.2.14...

1.6AI score
SaveExploits0
Atlassian
Atlassian
added 2016/11/28 3:58 a.m.24 views

Update atlassian-gadgets in JIRA Server to fix AG-1502

Now that https://ecosystem.atlassian.net/browse/AG-1502 has been fixed, upgrade atlassian-gadgets to a version that contains a fix for it. In this case JIRA Server would update atlassian-gadgets to a version = 4.2.14...

1.6AI score
SaveExploits0Affected Software1
zdt
zdt
added 2016/11/23 12:00 a.m.43 views

AppFusions Doxygen for Atlassian Confluence 1.3.2 - Cross-Site Scripting Vulnerability

Exploit for java platform in category web applications 1. ADVISORY INFORMATION ======================= Product: AppFusions Doxygen for Atlassian Confluence Vendor URL: www.appfusions.com Type: Cross-site Scripting CWE-79 Date found: 29/06/2016 Date published: 20/11/2016 CVSSv3 Score: 6.4...

0.3AI score
SaveExploits0
zdt
zdt
added 2016/11/23 12:00 a.m.40 views

Atlassian Confluence AppFusions Doxygen 1.3.0 - Directory Traversal Vulnerability

Exploit for java platform in category web applications 1. ADVISORY INFORMATION ======================= Product: AppFusions Doxygen for Atlassian Confluence Vendor URL: www.appfusions.com Type: Path Traversal CWE-22 Date found: 2016-06-23 Date published: - CVSSv3 Score: 6.3...

0.1AI score
SaveExploits0
Rows per page
Query Builder