4277 matches found
Remote code execution via Widget Connector macro - CVE-2019-3396
There was a server-side template injection vulnerability in Confluence Server and Data Center, in the Widget Connector. An attacker is able to exploit this issue to achieve path traversal and remote code execution on systems that run a vulnerable version of Confluence Server or Data Center. ...
PT-2019-2814 · Atlassian · Confluence
Name of the Vulnerable Software and Affected Versions: Atlassian Confluence Server versions 6.6.0 through 6.6.11 Atlassian Confluence Server versions 6.7.0 through 6.12.2 Atlassian Confluence Server versions 6.13.0 through 6.13.2 Atlassian Confluence Server versions 6.14.0 through 6.14.1...
SSRF via WebDAV endpoint - CVE-2019-3395
There was an SSRF vulnerability in Confluence Server and Data Center in the WebDAV plugin. A remote attacker is able to exploit this issue to send arbitrary HTTP and WebDAV requests from a Confluence Server instance. Affected versions: All versions of Confluence Server and Confluence Data Center...
SSRF via WebDAV endpoint - CVE-2019-3395
There was an SSRF vulnerability in Confluence Server and Data Center in the WebDAV plugin. A remote attacker is able to exploit this issue to send arbitrary HTTP and WebDAV requests from a Confluence Server instance. Affected versions: All versions of Confluence Server and Confluence Data Center...
Intel Data Center Manager SDK Elevation of Privilege Vulnerability
Intel Data Center Manager SDK is a data center manager SDK software development kit from Intel USA. The product provides real-time power and cooling data for devices. A security vulnerability exists in the installation routines in Intel Data Center Manager SDK versions prior to 5.0.2. A privilege...
Intel Data Center Manager SDK File Local Insecure File Permissions Vulnerability
Intel Data Center Manager SDK is a data center manager SDK software development kit from Intel USA. The product provides real-time power and cooling data for devices. A local insecure file permission vulnerability exists in Intel Data Center Manager SDK versions prior to 5.0.2. An authenticated...
Intel Data Center Manager SDK Elevation of Privilege Vulnerability
Intel Data Center Manager SDK is a data center management SDK software development kit from Intel USA. The product provides real-time power and cooling data for devices. A security vulnerability exists in the installation routine in IntelR Data Center Manager SDK versions prior to 5.0.2. A local...
Intel Data Center Manager SDK File Elevation of Privilege Vulnerability (CNVD-2019-05268)
Intel Data Center Manager SDK is a data center manager SDK software development kit from Intel USA. The product provides real-time power and cooling data for devices. A security vulnerability exists in Intel Data Center Manager SDK versions prior to 5.0.2. The vulnerability can be exploited by...
Intel Data Center Manager SDK
1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor : Intel Equipment: Data Center Manager SDK Vulnerabilities: Improper Authentication, Protection Mechanism Failure, Permission Issues, Key Management Errors, Insufficient Control Flow Management 2...
Intel Data Center Manager SDK Local Information Disclosure Vulnerability
Intel Data Center Manager SDK is a data center management SDK software development kit from Intel USA. The product provides real-time power and cooling data for devices. A security vulnerability exists in IntelR Data Center Manager SDK prior to version 5.0.2, which stems from the program failing ...
Intel Data Center Manager SDK File Local Insecure File Permissions Vulnerability (CNVD-2019-05267)
Intel Data Center Manager SDK is a data center manager SDK software development kit from Intel USA. The product provides real-time power and cooling data for devices. A local insecure file permission vulnerability exists in Intel Data Center Manager SDK versions prior to 5.0.2. An authenticated...
Intel Data Center Manager SDK Web Server Elevation of Privilege Vulnerability
Intel Data Center Manager SDK is a data center management SDK software development kit from Intel USA. The product provides real-time power and cooling data for devices. A security vulnerability exists in the web server of Intel Data Center Manager SDK versions prior to 5.0.2. An attacker could...
Intel Data Center Manager SDK Information Disclosure Vulnerability
Intel Data Center Manager SDK is a data center manager SDK software development kit from Intel USA. The product provides real-time power and cooling data for devices. An information disclosure vulnerability exists in Intel Data Center Manager SDK versions prior to 5.0.2. An authenticated user can...
Intel Data Center Manager SDK Local Information Disclosure Vulnerability (CNVD-2019-05274)
Intel Data Center Manager SDK is a data center management SDK software development kit from Intel USA. The product provides real-time power and cooling data for devices. A security vulnerability exists in the uninstall routine in IntelR Data Center Manager SDK versions prior to 5.0.2, which stems...
Intel Data Center Manager SDK Denial of Service Vulnerability
Intel Data Center Manager SDK is a data center manager SDK software development kit from Intel USA. The product provides real-time power and cooling data for devices. A security vulnerability exists in the encryption routines in Intel Data Center Manager SDK versions prior to 5.0.2. An attacker...
Intel Data Center Manager SDK File Elevation of Privilege Vulnerability
Intel Data Center Manager SDK is a data center manager SDK software development kit from Intel USA. The product provides real-time power and cooling data for devices. A security vulnerability exists in the installation routines in Intel Data Center Manager SDK versions prior to 5.0.2. An...
CVE-2019-0108
Improper file permissions for IntelR Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable disclosure of information via local access...
CVE-2019-0112
Improper flow control in crypto routines for IntelR Data Center Manager SDK before version 5.0.2 may allow a privileged user to potentially enable a denial of service via local access...
CVE-2019-0104
Insufficient file protection in uninstall routine for IntelR Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosure via local access...