CVE-2019-3397

Atlassian Bitbucket Data Center licensed instances starting with version 5.13.0 before 5.13.6 the fixed version for 5.13.x, from 5.14.0 before 5.14.4 fixed version for 5.14.x, from 5.15.0 before 5.15.3 fixed version for 5.15.x, from 5.16.0 before 5.16.3 fixed version for 5.16.x, from 6.0.0 before...

CVE-2019-3397

Atlassian Bitbucket Data Center licensed instances starting with version 5.13.0 before 5.13.6 the fixed version for 5.13.x, from 5.14.0 before 5.14.4 fixed version for 5.14.x, from 5.15.0 before 5.15.3 fixed version for 5.15.x, from 5.16.0 before 5.16.3 fixed version for 5.16.x, from 6.0.0 before...

Remote code execution

Atlassian Crowd and Crowd Data Center had the pdkinstall development plugin incorrectly enabled in release builds. Attackers who can send unauthenticated or authenticated requests to a Crowd or Crowd Data Center instance can exploit this vulnerability to install arbitrary plugins, which permits...

Path traversal

Atlassian Bitbucket Data Center licensed instances starting with version 5.13.0 before 5.13.6 the fixed version for 5.13.x, from 5.14.0 before 5.14.4 fixed version for 5.14.x, from 5.15.0 before 5.15.3 fixed version for 5.15.x, from 5.16.0 before 5.16.3 fixed version for 5.16.x, from 6.0.0 before...

CVE-2019-3397

CVE-2019-3397 affects Atlassian Bitbucket Data Center licensed instances where vulnerable versions precede the fixed releases: 5.13.x before 5.13.6, 5.14.x before 5.14.4, 5.15.x before 5.15.3, 5.16.x before 5.16.3, 6.0.x before 6.0.3, and 6.1.x before 6.1.2. The issue allows an authenticated user...

CVE-2019-3397

Atlassian Bitbucket Data Center licensed instances starting with version 5.13.0 before 5.13.6 the fixed version for 5.13.x, from 5.14.0 before 5.14.4 fixed version for 5.14.x, from 5.15.0 before 5.15.3 fixed version for 5.15.x, from 5.16.0 before 5.16.3 fixed version for 5.16.x, from 6.0.0 before...

CVE-2019-11580

Atlassian Crowd and Crowd Data Center had the pdkinstall development plugin incorrectly enabled in release builds. Attackers who can send unauthenticated or authenticated requests to a Crowd or Crowd Data Center instance can exploit this vulnerability to install arbitrary plugins, which permits...

CVE-2019-11580

Atlassian Crowd/Crowd Data Center are affected by CVE-2019-11580 due to the pdkinstall development plugin being incorrectly enabled in release builds. The flaw permits attackers to install arbitrary plugins via unauthenticated or authenticated requests, enabling remote code execution on vulnerabl...

CVE-2019-11580

Atlassian Crowd and Crowd Data Center had the pdkinstall development plugin incorrectly enabled in release builds. Attackers who can send unauthenticated or authenticated requests to a Crowd or Crowd Data Center instance can exploit this vulnerability to install arbitrary plugins, which permits...

Atlassian BitBucket Data Center Migration Tool Directory Traversal Vulnerability

Bitbucket Data Center is the on-premises Git repository management solution for larger enterprises that require high availability and performance at scale. It uses a cluster of Bitbucket server nodes and is designed in your own data center. A vulnerability was found in the Data Center’s migration...

Atlassian Crowd and Atlassian Crowd Data Center Command Execution Vulnerabilities

Atlassian Crowd and Atlassian Crowd Data Center are both products of Atlassian Australia.Atlassian Crowd is a web-based single sign-on system. The system provides authentication, authorization and other features for multi-user, web applications and directory servers.Atlassian Crowd Data Center is...

Bitbucket Path Traversal / Remote Code Execution Vulnerability

Bitbucket Data Center had a path traversal vulnerability in the Data Center migration tool. A remote attacker with authenticated user with admin permissions can exploit this path traversal vulnerability to write files to arbitrary locations which can lead to remote code execution on systems that...

Bitbucket Data Center migration tool path traversal vulnerability

Atlassian Bitbucket Server is a Git code hosting solution from Atlassian Australia. The solution manages and reviews code with features such as diff view, JIRA integration, and build integration.Bitbucket Data Center migration tool is a data center migration tool. A path traversal vulnerability...

Preventing the Top Data Center Breaches

Data center breaches can seem impossible to avoid, but good data center security can seriously reduce your risk. We look at famous breaches Equifax, Yahoo, & more...

Cisco NX-OS Software Buffer Overflow Vulnerability

Cisco Nexus 3000 Series Switches and others are products of Cisco USA. the Cisco NX-OS Software is a set of data center-grade operating system software used by the switches. Cisco NX-OS Software suffers from a buffer overflow vulnerability that arises from a failure of a network system or product...

Logic flaw vulnerability in cms system of Wave Group Ltd.

i.e. Wave Group, which owns four listed companies, namely Wave Information, Wave Software, Wave International and Huaguang Optoelectronics, with business covering four industry clusters, namely cloud data center, cloud service big data, smart city and smart enterprise, provides IT products and...

Fedora Update for lldpad FEDORA-2018-06d56c8c9d

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Crowd - pdkinstall development plugin incorrectly enabled - CVE-2019-11580

Crowd and Crowd Data Center had the pdkinstall development plugin incorrectly enabled in release builds. Attackers who can send unauthenticated or authenticated requests to a Crowd or Crowd Data Center instance can exploit this vulnerability to install arbitrary plugins, which permits remote code...

Crowd - pdkinstall development plugin incorrectly enabled - CVE-2019-11580

Crowd and Crowd Data Center had the pdkinstall development plugin incorrectly enabled in release builds. Attackers who can send unauthenticated or authenticated requests to a Crowd or Crowd Data Center instance can exploit this vulnerability to install arbitrary plugins, which permits remote code...

PT-2019-5257

Name of the Vulnerable Software and Affected Versions Atlassian Crowd versions 2.1.0 through 3.0.4 Atlassian Crowd versions 3.1.0 through 3.1.5 Atlassian Crowd versions 3.2.0 through 3.2.7 Atlassian Crowd versions 3.3.0 through 3.3.4 Atlassian Crowd versions 3.4.0 through 3.4.3 Atlassian Crowd Da...