Lucene search
+L

3596 matches found

Cvelist
Cvelist
•added 2019/08/12 5:21 p.m.•31 views

CVE-2019-14965

An issue was discovered in Frappe Framework 10 through 12 before 12.0.4. A server side template injection SSTI issue exists...

9.6AI score0.02573EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/12 12:00 a.m.•8 views

CVE-2019-14965: Improper Control of Generation of Code

An issue was discovered in Frappe Framework 10 through 12 before 12.0.4. A server side template injection SSTI issue exists...

9.8CVSS5.7AI score0.02573EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/08/12 12:00 a.m.•5 views

PT-2019-13899

Name of the Vulnerable Software and Affected Versions Frappe Framework versions 10 through 12 before 12.0.4 Description A server-side template injection issue exists. This issue allows for the injection of templates on the server side, potentially leading to unauthorized access or data...

9.8CVSS0.02573EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
•added 2019/08/12 12:00 a.m.•33 views

Atlassian Jira 8.0.x < 8.0.3 Template Injection Vulnerability

According to its self-reported version number, the Atlassian Jira application running on the remote host is 4.4.x 7.6.14, 7.7.x 7.13.5, 8.0.x 8.0.3, 8.1.x 8.1.2, 8.2.x 8.2.3. It is, therefore, affected by a server-side template injection vulnerability that exists in the ContactAdministrators and...

9.8CVSS8.7AI score0.84621EPSS
SaveExploits3References2
Tenable Nessus
Tenable Nessus
•added 2019/08/12 12:00 a.m.•28 views

Atlassian Jira 8.2.x < 8.2.3 Template Injection Vulnerability

According to its self-reported version number, the Atlassian Jira application running on the remote host is 4.4.x 7.6.14, 7.7.x 7.13.5, 8.0.x 8.0.3, 8.1.x 8.1.2, 8.2.x 8.2.3. It is, therefore, affected by a server-side template injection vulnerability that exists in the ContactAdministrators and...

9.8CVSS8.7AI score0.84621EPSS
SaveExploits3References2
Tenable Nessus
Tenable Nessus
•added 2019/08/12 12:00 a.m.•336 views

Atlassian Jira 4.4.x < 7.6.14 Template Injection Vulnerability

According to its self-reported version number, the Atlassian Jira application running on the remote host is 4.4.x 7.6.14, 7.7.x 7.13.5, 8.0.x 8.0.3, 8.1.x 8.1.2, 8.2.x 8.2.3. It is, therefore, affected by a server-side template injection vulnerability that exists in the ContactAdministrators and...

9.8CVSS8.7AI score0.84621EPSS
SaveExploits3References2
Tenable Nessus
Tenable Nessus
•added 2019/08/12 12:00 a.m.•39 views

Atlassian Jira 7.7.x < 7.13.5 Template Injection Vulnerability

According to its self-reported version number, the Atlassian Jira application running on the remote host is 4.4.x 7.6.14, 7.7.x 7.13.5, 8.0.x 8.0.3, 8.1.x 8.1.2, 8.2.x 8.2.3. It is, therefore, affected by a server-side template injection vulnerability that exists in the ContactAdministrators and...

9.8CVSS8.7AI score0.84621EPSS
SaveExploits3References2
Tenable Nessus
Tenable Nessus
•added 2019/08/12 12:00 a.m.•48 views

Atlassian Jira 8.1.x < 8.1.2 Template Injection Vulnerability

According to its self-reported version number, the Atlassian Jira application running on the remote host is 4.4.x 7.6.14, 7.7.x 7.13.5, 8.0.x 8.0.3, 8.1.x 8.1.2, 8.2.x 8.2.3. It is, therefore, affected by a server-side template injection vulnerability that exists in the ContactAdministrators and...

9.8CVSS8.7AI score0.84621EPSS
SaveExploits3References2
OSV
OSV
•added 2019/08/09 8:15 p.m.•11 views

CVE-2019-11581

There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators and the SendBulkMail actions. An attacker is able to remotely execute code on systems that run a vulnerable version of Jira Server or Data Center. All versions of Jira Server and...

9.8CVSS8.3AI score0.84621EPSS
SaveExploits3References2
Prion
Prion
•added 2019/08/09 8:15 p.m.•31 views

Sql injection

There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators and the SendBulkMail actions. An attacker is able to remotely execute code on systems that run a vulnerable version of Jira Server or Data Center. All versions of Jira Server and...

9.3CVSS9.6AI score0.84621EPSS
SaveExploits3References1Affected Software2
Cvelist
Cvelist
•added 2019/08/09 7:30 p.m.•41 views

CVE-2019-11581

There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators and the SendBulkMail actions. An attacker is able to remotely execute code on systems that run a vulnerable version of Jira Server or Data Center. All versions of Jira Server and...

9.7AI score0.84621EPSS
SaveExploits3References1
Vulnrichment
Vulnrichment
•added 2019/08/09 7:30 p.m.•14 views

CVE-2019-11581

There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators and the SendBulkMail actions. An attacker is able to remotely execute code on systems that run a vulnerable version of Jira Server or Data Center. All versions of Jira Server and...

8.3AI score0.84621EPSS
SaveExploits3References1
CVE
CVE
•added 2019/08/09 7:30 p.m.•1298 views

CVE-2019-11581

CVE-2019-11581 affects Jira Server and Data Center (ContactAdministrators and SendBulkMail actions). The vulnerability is a server-side template injection that enables remote code execution when user-supplied input is rendered as a Velocity template. Affected versions include Jira Server/Data Cen...

9.8CVSS8.3AI score0.84621EPSS
SaveIn wildExploits3References2Affected Software1
attackerkb
attackerkb
•added 2019/08/09 12:00 a.m.•77 views

CVE-2019-11581 — Atlassian JIRA Template injection vulnerability RCE

There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators and the SendBulkMail actions. An attacker is able to remotely execute code on systems that run a vulnerable version of Jira Server or Data Center. All versions of Jira Server and...

9.8CVSS8.4AI score0.84621EPSS
SaveIn wildExploits3References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/09 12:00 a.m.•5 views

CVE-2019-11581: Improper Neutralization of Special Elements in Output Used by a Downstream Component

There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators and the SendBulkMail actions. An attacker is able to remotely execute code on systems that run a vulnerable version of Jira Server or Data Center. All versions of Jira Server and...

9.8CVSS8.3AI score0.84621EPSS
SaveExploits3References2
Tenable Nessus
Tenable Nessus
•added 2019/07/17 12:00 a.m.•88 views

Atlassian Confluence 6.13.x < 6.13.3 Multiple Vulnerabilities

According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to 6.6.12, 6.7.x prior to 6.12.3, 6.13.x prior to 6.13.3, or 6.14.x prior to 6.14.2. It is, therefore, affected by the following vulnerabilities : - A server-side request forger...

10CVSS8.7AI score0.99913EPSS
SaveExploits22References3
Tenable Nessus
Tenable Nessus
•added 2019/07/17 12:00 a.m.•79 views

Atlassian Confluence 6.7.x < 6.12.3 Multiple Vulnerabilities

According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to 6.6.12, 6.7.x prior to 6.12.3, 6.13.x prior to 6.13.3, or 6.14.x prior to 6.14.2. It is, therefore, affected by the following vulnerabilities : - A server-side request forger...

10CVSS8.7AI score0.99913EPSS
SaveExploits22References3
Tenable Nessus
Tenable Nessus
•added 2019/07/17 12:00 a.m.•55 views

Atlassian Confluence < 6.6.12 Multiple Vulnerabilities

According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to 6.6.12, 6.7.x prior to 6.12.3, 6.13.x prior to 6.13.3, or 6.14.x prior to 6.14.2. It is, therefore, affected by the following vulnerabilities : - A server-side request forger...

10CVSS8.7AI score0.99913EPSS
SaveExploits22References3
GithubExploit
GithubExploit
•added 2019/07/16 2:27 a.m.•123 views

Exploit for Injection in Atlassian Jira_Server

CVE-2019-11581 Atlassian JIRA Template injection vulnerabil...

9.8CVSS8.3AI score0.84621EPSS
SaveExploits3
Positive Technologies
Positive Technologies
•added 2019/07/15 12:00 a.m.•8 views

PT-2019-4356

Name of the Vulnerable Software and Affected Versions Atlassian Jira Server and Data Center versions 4.4.0 through 7.6.13 Atlassian Jira Server and Data Center versions 7.7.0 through 7.13.4 Atlassian Jira Server and Data Center versions 8.0.0 through 8.0.2 Atlassian Jira Server and Data Center...

10CVSS8.9AI score0.84621EPSS
SaveExploits3References15
Rows per page
Query Builder