Lucene search
K

6 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 5:39 a.m.1 views

SUSE CVE-2013-2135

Apache Struts 2 before 2.3.14.3 allows remote attackers to execute arbitrary OGNL code via a request with a crafted value that contains both "$" and "%" sequences, which causes the OGNL code to be evaluated twice...

9.3CVSS9.5AI score0.13828EPSS
Exploits0References3
0day.today
0day.today
added 2018/01/03 12:0 a.m.107 views

Atlassian Bamboo Code Execution / Argument Injection Vulnerabilities

Exploit for php platform in category web applications Atlassian Bamboo Code Execution / Argument Injection Vulnerabilities CVE ID: CVE-2017-14589. CVE-2017-14590. Product: Bamboo. Affected Bamboo product versions: version = 6.2.0 but less than 6.2.5 the fixed version for 6.2.x please upgrade your...

9CVSS0.4AI score0.02405EPSS
Exploits1
Atlassian
Atlassian
added 2014/12/16 12:6 a.m.13 views

OGNL Double Evaluation Vulnerability

We have discovered and fixed a vulnerability in our fork of WebWork. Attackers can use this vulnerability to execute Java code of their choice on systems that use this framework. The attacker needs to be able to access the Crucible web interface. All versions of Crucible up to and including 3.6.1...

3AI score
Exploits0Affected Software1
Atlassian
Atlassian
added 2014/12/16 12:6 a.m.23 views

OGNL Double Evaluation Vulnerability

We have discovered and fixed a vulnerability in our fork of WebWork. Attackers can use this vulnerability to execute Java code of their choice on systems that use this framework. The attacker needs to be able to access the Crucible web interface. All versions of Crucible up to and including 3.6.1...

3AI score
Exploits0
Atlassian
Atlassian
added 2014/12/16 12:2 a.m.19 views

OGNL Double Evaluation Vulnerability

We have discovered and fixed a vulnerability in our fork of WebWork. Attackers can use this vulnerability to execute Java code of their choice on systems that use this framework. The attacker needs to be able to access the FishEye web interface. All versions of FishEye up to and including 3.6.1 a...

2AI score
Exploits0
Atlassian
Atlassian
added 2014/12/16 12:2 a.m.17 views

OGNL Double Evaluation Vulnerability

We have discovered and fixed a vulnerability in our fork of WebWork. Attackers can use this vulnerability to execute Java code of their choice on systems that use this framework. The attacker needs to be able to access the FishEye web interface. All versions of FishEye up to and including 3.6.1 a...

2AI score
Exploits0Affected Software1
Rows per page
Query Builder