CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3129 matches found

Atlassian•added 2019/03/29 2:29 p.m.•26 views

Copying and pasting Status Macro (or TOC Macro) over https triggers mixed content and breaks certificate trust

h3. Issue Summary Copying and pasting a status macro or TOC over https in the browser will trigger mix content action, it will break the certificate trust on request of: Status macro plugins/servlet/status-macro/placeholder?title=titlehere&colour=Yellow TOC macro...

7AI score

SaveExploits0

Hacker One•added 2019/03/29 10:45 a.m.•149 views

Mail.ru: RCE on shared.mail.ru due to "widget" plugin

Confluence widget connector vulnerable to CVE-2019-3396 was available on shared.mail.ru...

10CVSS1.5AI score0.99913EPSS

SaveExploits20

Dsquare•added 2019/03/28 12:00 a.m.•72 views

Confluence File Disclosure

File disclosure vulnerability in Confluence widget connector macro Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

10CVSS9.6AI score0.99913EPSS

SaveExploits20

CNVD•added 2019/03/26 12:00 a.m.•8 views

Atlassian Confluence Server and Atlassian Data Center Server-Side Request Forgery Vulnerabilities

Atlassian Confluence Server and Atlassian Data Center are both products of Atlassian Australia.Atlassian Confluence Server is a professional enterprise knowledge management and collaboration software that can also be used to build enterprise WiKi. Atlassian Data Center is a data center system. A...

9.8CVSS7AI score0.06712EPSS

SaveExploits0References1

CNVD•added 2019/03/26 12:00 a.m.•12 views

Atlassian Confluence Server Server-Side Template Injection Vulnerability

Atlassian Confluence Server is a suite of specialized enterprise knowledge management and collaboration software from Atlassian Australia that can also be used to build enterprise WiKi. A security vulnerability exists in Atlassian Confluence Server. The vulnerability can be exploited by a remote...

10CVSS7.4AI score0.99913EPSS

SaveExploits20References1

NVD•added 2019/03/25 7:29 p.m.•29 views

CVE-2019-3396

The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 the fixed version for 6.6.x, from version 6.7.0 before 6.12.3 the fixed version for 6.12.x, from version 6.13.0 before 6.13.3 the fixed version for 6.13.x, and from version 6.14.0 before 6.14.2 the fixed version for...

10CVSS10AI score0.99913EPSS

SaveExploits20References6

NVD•added 2019/03/25 7:29 p.m.•21 views

CVE-2019-3395

The WebDAV endpoint in Atlassian Confluence Server and Data Center before version 6.6.7 the fixed version for 6.6.x, from version 6.7.0 before 6.8.5 the fixed version for 6.8.x, and from version 6.9.0 before 6.9.3 the fixed version for 6.9.x allows remote attackers to send arbitrary HTTP and WebD...

9.8CVSS9.5AI score0.06712EPSS

SaveExploits0References1

OSV•added 2019/03/25 7:29 p.m.•5 views

CVE-2019-3395

9.8CVSS7.5AI score0.06712EPSS

SaveExploits0References1

OSV•added 2019/03/25 7:29 p.m.•10 views

CVE-2019-3396

9.8CVSS6.4AI score0.99913EPSS

SaveExploits20References6

canvas•added 2019/03/25 7:29 p.m.•76 views

Immunity Canvas: CONFLUENCE_MACRO_LFI

Name| confluencemacrolfi ---|--- CVE| CVE-2019-3396 Exploit Pack| CANVAS Description| Confluence Server and Data Center - LFI CVE-2019-3396 Notes| Repeatability: NOTES: A Default behavior =================== By default, this module attempts to automatically locate and then fetch the confluence...

10CVSS0.4AI score0.99913EPSS

SaveExploits20

Prion•added 2019/03/25 7:29 p.m.•25 views

Server side request forgery (ssrf)

7.5CVSS9.4AI score0.06712EPSS

SaveExploits0References1Affected Software2

Prion•added 2019/03/25 7:29 p.m.•47 views

Path traversal

10CVSS9.8AI score0.99913EPSS

SaveExploits20References5Affected Software2

Vulnrichment•added 2019/03/25 6:37 p.m.•23 views

CVE-2019-3396

8.1AI score0.99913EPSS

SaveExploits20References5

Cvelist•added 2019/03/25 6:37 p.m.•30 views

CVE-2019-3395

9.4AI score0.06712EPSS

SaveExploits0References1

CVE•added 2019/03/25 6:37 p.m.•2189 views

CVE-2019-3396

CVE-2019-3396 – Atlassian Confluence Widget Connector SSTI RCE : A server-side template injection flaw in the Widget Connector macro allows remote attackers to perform path traversal and achieve remote code execution on Confluence Server/Data Center. Fixes are in Confluence versions: 6.6.12 (6.6....

10CVSS9.8AI score0.99913EPSS

SaveIn wildExploits20References6Affected Software1

Cvelist•added 2019/03/25 6:37 p.m.•39 views

CVE-2019-3396

9.9AI score0.99913EPSS

SaveExploits20References5

CVE•added 2019/03/25 6:37 p.m.•107 views

CVE-2019-3395

CVE-2019-3395 affects Atlassian Confluence Server and Data Center via an SSRF vulnerability in the WebDAV endpoint. The issue allows remote attackers to send arbitrary HTTP/WebDAV requests from the Confluence server due to a Server-Side Request Forgery flaw. Affected versions are: before 6.6.7 (f...

9.8CVSS9.3AI score0.06712EPSS

SaveExploits0References1Affected Software2

ATTACKERKB•added 2019/03/25 12:00 a.m.•262 views

Confluence Unauthorized RCE Vulnerability

10CVSS9.8AI score0.99913EPSS

SaveIn wildExploits20References9

ATTACKERKB•added 2019/03/25 12:00 a.m.•58 views

CVE-2019-3396

10CVSS9.8AI score0.99913EPSS

SaveIn wildExploits20References7

Metasploit•added 2019/03/25 12:00 a.m.•73 views

Atlassian Confluence Widget Connector Macro Velocity Template Injection

Widget Connector Macro is part of Atlassian Confluence Server and Data Center that allows embed online videos, slideshows, photostreams and more directly into page. A template parameter can be used to inject remote Java code into a Velocity template, and gain code execution. Authentication is...

10CVSS9AI score0.99913EPSS

SaveExploits20

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by