Lucene search
+L

9 matches found

OSV
OSV
•added 2025/08/14 6:52 p.m.•6 views

MAL-2025-12067 Malicious code in @zalastax/nolb-jsd (npm)

The package @zalastax/nolb-jsd was found to contain malicious code...

7.2AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•7 views

Malicious code in @zalastax/nolb-jsd (npm)

The package @zalastax/nolb-jsd was found to contain malicious code...

7AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/19 12:00 a.m.•3 views

CVE-2021-31350: Improper Privilege Management

An Improper Privilege Management vulnerability in the gRPC framework, used by the Juniper Extension Toolkit JET API on Juniper Networks Junos OS and Junos OS Evolved, allows a network-based, low-privileged authenticated attacker to perform operations as root, leading to complete compromise of the...

9CVSS5.9AI score0.00873EPSS
SaveExploits0References3
Atlassian
Atlassian
•added 2020/10/07 10:08 p.m.•347 views

Jira Service Desk permissions error dialog allows Project Admins to upgrade the permission scheme

h3. Issue Summary For a specific use case, only some selected users may create issues using the Portal, so the permission to create issues by "Service Desk Customer - Portal" was removed. After the Permission change, Project Administrators, that should not have access to change the...

0.3AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2020/04/22 1:56 a.m.•161 views

DLL hijacking in Jira Server & JSD via Tomcat - CVE-2019-20419

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to execute arbitrary code via a DLL hijacking vulnerability in Tomcat. Affected versions: version 8.5.5 8.6.0 ≤ version 8.7.2 Fixed versions: 8.5.5 8.7.2 8.8.0...

7.8CVSS7.5AI score0.00845EPSS
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2018/03/15 1:17 a.m.•37 views

Honeypot strategy is no longer effectively preventing spam account signup

panel:title=Fix From 3.9.5 onwards we have turned off the honeypot in favour of using captcha anyone affected by this issue just needs to switch the CAPTCHA on...

7.7AI score
SaveExploits0
Atlassian
Atlassian
•added 2016/08/02 3:31 p.m.•32 views

JSON export doesn't differentiate public from internal comments

h4. +Summary+ Currently, when exporting a SD request to JSON format, it's not possible to tell which comment is internal or public from the JSON file. h4. +Steps to reproduce+ Go to Manage add-ons - All add-ons - jira-importers-plugin - Enable JSON export Create an SD request and add one internal...

6.8AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2016/01/20 12:46 p.m.•26 views

Customer can see Internal Comment created by Automation Action

h5. Environment - run JIRA from atlas-debug - JIRA 7.0.5 - JIRA Service Desk 3.0.5 h5. Steps to reproduce Create Service Desk project go to Administration - Automation tab click New rule - Custom rule add Trigger Issue Created add Action Add comment put some Comment text and select Internal as...

2AI score
SaveExploits0
Atlassian
Atlassian
•added 2016/01/20 12:46 p.m.•25 views

Customer can see Internal Comment created by Automation Action

h5. Environment - run JIRA from atlas-debug - JIRA 7.0.5 - JIRA Service Desk 3.0.5 h5. Steps to reproduce Create Service Desk project go to Administration - Automation tab click New rule - Custom rule add Trigger Issue Created add Action Add comment put some Comment text and select Internal as...

2AI score
SaveExploits0Affected Software1
Rows per page
Query Builder