Lucene search
+L

81 matches found

NVD
NVD
•added 2021/07/20 4:15 a.m.•37 views

CVE-2021-26082

The XML Export in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.17.0 allows remote attackers to inject arbitrary HTML or JavaScript via a stored cross site scripting vulnerability...

5.4CVSS0.00999EPSS
SaveExploits0References1
Prion
Prion
•added 2021/07/20 4:15 a.m.•21 views

Cross site scripting

The XML Export in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.17.0 allows remote attackers to inject arbitrary HTML or JavaScript via a stored cross site scripting vulnerability...

3.5CVSS5.3AI score0.00999EPSS
SaveExploits0References1Affected Software4
Cvelist
Cvelist
•added 2021/07/20 3:25 a.m.•43 views

CVE-2021-26082

The XML Export in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.17.0 allows remote attackers to inject arbitrary HTML or JavaScript via a stored cross site scripting vulnerability...

5.5AI score0.00999EPSS
SaveExploits0References1
CVE
CVE
•added 2021/07/20 3:25 a.m.•122 views

CVE-2021-26082

The CVE-2021-26082 issue affects Atlassian Jira Server/Data Center’s XML Export feature, allowing stored cross-site scripting via the XML Export path. Affected ranges: Jira Server/Data Center before 8.5.14; 8.6.0 before 8.13.6; 8.14.0 before 8.17.0. Root cause: improper handling in the XML Export...

5.4CVSS5.3AI score0.00999EPSS
SaveExploits0References1Affected Software4
Vulnrichment
Vulnrichment
•added 2021/07/20 3:25 a.m.•19 views

CVE-2021-26082

The XML Export in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.17.0 allows remote attackers to inject arbitrary HTML or JavaScript via a stored cross site scripting vulnerability...

6AI score0.00999EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/20 12:00 a.m.•3 views

CVE-2021-26082: Improper Neutralization of Input During Web Page Generation

The XML Export in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.17.0 allows remote attackers to inject arbitrary HTML or JavaScript via a stored cross site scripting vulnerability...

5.4CVSS5.2AI score0.00999EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/07/15 12:00 a.m.•9 views

CVE-2021-26082

The XML Export in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.17.0 allows remote attackers to inject arbitrary HTML or JavaScript via a stored cross site scripting vulnerability...

5.4CVSS5.3AI score0.00999EPSS
SaveExploits0References2Affected Software2
Atlassian
Atlassian
•added 2021/05/06 8:05 a.m.•79 views

Stored XSS on Jira Issue XML Export - CVE-2021-26082

Affected versions of Atlassian Jira Server allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in XML Export. The affected versions are before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.17.0. Affected...

5.4CVSS4.3AI score0.00999EPSS
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2021/05/06 8:05 a.m.•44 views

Stored XSS on Jira Issue XML Export - CVE-2021-26082

Affected versions of Atlassian Jira Server allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in XML Export. The affected versions are before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.17.0. Affected...

5.4CVSS5.1AI score0.00999EPSS
SaveExploits0
CNVD
CNVD
•added 2020/06/02 12:00 a.m.•17 views

Atlassian JIRA Server and Data Center Cross-Site Scripting Vulnerability

Atlassian JIRA Server and Atlassian JIRA Data Center are both products of Atlassian Australia.Atlassian JIRA Server is the server version of a defect tracking management system. Atlassian JIRA Server is the server version of a defect tracking management system that is used to track and manage all...

5.4CVSS6.2AI score0.01003EPSS
SaveExploits0References1
OSV
OSV
•added 2020/06/01 7:15 a.m.•7 views

CVE-2020-4021

Affected versions are: Before 8.5.5, and from 8.6.0 before 8.8.1 of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the XML export view...

5.4CVSS5.7AI score0.01003EPSS
SaveExploits0References1
Prion
Prion
•added 2020/06/01 7:15 a.m.•21 views

Cross site scripting

Affected versions are: Before 8.5.5, and from 8.6.0 before 8.8.1 of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the XML export view...

3.5CVSS5.3AI score0.01003EPSS
SaveExploits0References1Affected Software4
CVE
CVE
•added 2020/06/01 6:35 a.m.•98 views

CVE-2020-4021

CVE-2020-4021 affects Atlassian Jira Server and Data Center through an XSS in the XML export view. Affected: before 8.5.5, and 8.6.0 before 8.8.1. Fixed in 7.13.16, 8.5.5, 8.8.1, and 8.9.0. Remediation: upgrade to a fixed version.

5.4CVSS5.3AI score0.01003EPSS
SaveExploits0References1Affected Software4
Cvelist
Cvelist
•added 2020/06/01 6:35 a.m.•41 views

CVE-2020-4021

Affected versions are: Before 8.5.5, and from 8.6.0 before 8.8.1 of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the XML export view...

5.3AI score0.01003EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/01 12:00 a.m.•4 views

CVE-2020-4021: Improper Neutralization of Input During Web Page Generation

Affected versions are: Before 8.5.5, and from 8.6.0 before 8.8.1 of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the XML export view...

5.4CVSS5.4AI score0.01003EPSS
SaveExploits0References2
Atlassian
Atlassian
•added 2020/04/19 11:32 p.m.•121 views

XSS in XML export view - CVE-2020-4021

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the XML export view. Affected versions: version 7.13.16 8.0.0 ≤ version 8.5.5 8.6.0 ≤ version 8.8.1 Fixed versions: 7.13.16 8.5....

5.4CVSS5.6AI score0.01003EPSS
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2020/04/19 11:32 p.m.•40 views

XSS in XML export view - CVE-2020-4021

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the XML export view. Affected versions: version 7.13.16 8.0.0 ≤ version 8.5.5 8.6.0 ≤ version 8.8.1 Fixed versions: 7.13.16 8.5....

5.4CVSS5.6AI score0.01003EPSS
SaveExploits0
Openbugbounty
Openbugbounty
•added 2020/02/20 3:57 p.m.•15 views

shok-news.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1098140 Security Researcher geeknik Helped patch 8710 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting shok-news.com website and...

0.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2018/12/15 12:00 a.m.•1 views

PT-2018-3120

Name of the Vulnerable Software and Affected Versions Galaktika ERP affected versions not specified Description The issue is related to architectural weaknesses in components .res files of the Galaktika ERP system, which have the functionality to export to XML files. Exploitation of this issue ma...

7CVSS6.2AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2018/06/20 2:06 p.m.•22 views

Operative Framework HD - The Digital Investigation Framework, You Can Interact With Websites, Email Address, Company, People, Ip Address, And More

operative framework HD is the digital investigation framework, you can interact with websites, email address, company, people, ip address ... with basic/graphical view and export with XML, JSON. How to Install You need this packages mongoDB NPM Python 2 Create mongoDB database $ mongo $ use...

7.3AI score
SaveExploits0References1
Rows per page
Query Builder