The vulnerability of the command-line interface of the Cisco Data Center Network Manager allows a attacker to execute arbitrary commands with root privileges on the basic operating system.

The vulnerability of the command-line interface of the Cisco Data Center Network Manager system is related to insufficient restrictions during the execution of vulnerable CLI commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands with root privileges on the basic...

Atlassian Jira Server and Data Center Information Disclosure Vulnerability (CNVD-2020-52933)

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. An information disclosure vulnerability exists in Atlassian Jira Server and Data Center versions prior to 7.13.6, which arises...

Cisco Data Center Network Manager Privilege Escalation (cisco-sa-20180905-cdcnm-escalation)

According to its self-reported version, Cisco Data Center Network Manager is prior to version 11.01 and is, therefore, affected by a privilege escalation vulnerability in the web-based management interface due to incomplete validation of user input. An authenticated attacker could exploit this...

Cisco Data Center Network Manager Cross-Site Request Forgery (cisco-sa-20200219-dcnm-csrf)

According to its self-reported version, Cisco Data Center Network Manager is prior to version 11.31 and is, therefore, affected by a cross-site request forgery vulnerability in the web-based management interface. An unauthenticated, remote attacker could exploit this vulnerability by persuading a...

CVE-2020-14181

Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Disclosure vulnerability in the /ViewUserHover.jspa endpoint. The affected versions are before version 7.13.6, from version 8.0.0 before 8.5.7, and from version 8.6.0...

CVE-2020-14181

Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Disclosure vulnerability in the /ViewUserHover.jspa endpoint. The affected versions are before version 7.13.6, from version 8.0.0 before 8.5.7, and from version 8.6.0...

CVE-2020-14181

CVE-2020-14181 affects Atlassian Jira Server/Data Center and enables an unauthenticated user to enumerate users via the /ViewUserHover.jspa endpoint due to an information disclosure flaw. Affected versions are: < 7.13.16, 8.0.0–<8.5.7, and 8.6.0–

Cisco Data Center Network Manager Command Injection (cisco-sa-20200102-dcnm-comm-inject)

According to its self-reported version, Cisco Data Center Network Manager is affected by a command injection vulnerability in the REST and SOAP API endpoints due to a failure to properly validate user-supplied input. An authenticated, remote attacker with administrative privileges can exploit thi...

Cisco Data Center Network Manager Stored Cross-Site Scripting (cisco-sa-20200219-dcnm-xss)

According to its self-reported version, Cisco Data Center Network Manager is prior to version 11.31 and is, therefore, affected by a cross-site scripting vulnerability in the web-based management interface due to insufficient validation of user-supplied input. An attacker could exploit this...

User Enumeration via /ViewUserHover.jspa - CVE-2020-14181

Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Disclosure vulnerability in the /ViewUserHover.jspa endpoint. This vulnerability was discovered by Mikhail Klyuchnikov of Positive Technologies. Affected versions: versio...

CVE-2020-14181

Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Disclosure vulnerability in the /ViewUserHover.jspa endpoint. The affected versions are before version 7.13.6, from version 8.0.0 before 8.5.7, and from version 8.6.0...

CVE-2019-0230 - Apache Struts Potential Remote Code Execution Vulnerability [Confluence Server is not affected]

Atlassian Confluence Server and Data Center is not affected by CVE-2019-0230 Apache Struts Potential Remote Code Execution Vulnerability...

Sensitive data exposure via /secure/QueryComponent!Default.jspa endpoint - CVE-2020-14179

h3. Summary Affected versions of Atlassian Jira Server and Data Center allow remote, unauthenticated attackers to view custom field names and custom SLA names via an Information Disclosure vulnerability in the /secure/QueryComponent!Default.jspa endpoint. h3. Affected versions: version 8.5.8 8.6....

Exploit for Improper Privilege Management in Backblaze

CVE-2020-8290 – Elevation of Privilege in Backblaze Summar...

Atlassian Jira Information Disclosure Vulnerability (CNVD-2020-52940)

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. An information disclosure vulnerability exists in Atlassian Jira Server and Data Center versions prior to 7.13.7, 8.0.0 to 8.5.8...

CVE-2020-14178

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate project keys via an Information Disclosure vulnerability in the /browse.PROJECTKEY endpoint. The affected versions are before version 7.13.7, from version 8.0.0 before 8.5.8, and from version 8.6.0 befo...

CVE-2020-14178

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate project keys via an Information Disclosure vulnerability in the /browse.PROJECTKEY endpoint. The affected versions are before version 7.13.7, from version 8.0.0 before 8.5.8, and from version 8.6.0 befo...

CVE-2020-14178

This CVE affects Atlassian Jira Server/Data Center. A information-disclosure flaw in the /browse.PROJECTKEY endpoint allows remote attackers to enumerate project keys. Affected versions are prior to 7.13.7, 8.0.0–before 8.5.8, and 8.6.0–before 8.12.0. Remediation via fixed versions: 7.13.17, 8.5....

Cisco Data Center Network Manager Path Traversal (cisco-sa-dcnm-patrav-pW9RkhyW)

According to its self-reported version, Cisco Data Center Network Manager is affected by a vulnerability in a specific REST API method due to insufficient validation of user-supplied input. An authenticated, remote attacker can exploit this, by sending a crafted request to the API, in order to...

Cisco Data Center Network Manager XSS (cisco-sa-dcnm-xss-JnHSWG5C)

According to its self-reported version, Cisco Data Center Network Manager is affected by a vulnerability in the web-based management interface due to a failure to properly validate user-supplied input. An authenticated, remote attacker can exploit this, by persuading a user of the interface to...