Browse CVEs

HIGH 8.0 CVE-2026-21575 This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.11 of Sourcetree for Mac and Sourcetree for Windows. T… Sourcetree 3.4.13+ Fix from $1,9502026-07-21 HIGH 7.5 CVE-2026-21579 This High severity Information Disclosure vulnerability was introduced in versions 7.17.0, 7.19.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 10.0.2, 10.1.0,… Confluence Data Center after 10.2.13 Fix from $1,9502026-07-21 MEDIUM 6.5 CVE-2026-21577 This High severity DoS (Denial of Service) vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and 10.2… Confluence Data Center after 10.2.6 Fix from $1,6002026-07-21 HIGH 8.8 CVE-2026-21571 This Critical severity OS Command Injection vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.0.0, 11.1.0, 12.0.0, and 12.1… Bamboo 9.6.25 / 10.2.18+ Fix from $1,9502026-04-21 HIGH 8.8 CVE-2026-21570 This High severity RCE (Remote Code Execution)  vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.0.0, 11.1.0, 12.0.0, and 1… Bamboo 9.6.24 / 10.2.16+ Fix from $1,9502026-03-17 HIGH 7.9 CVE-2026-21569 This High severity XXE (XML External Entity Injection) vulnerability was introduced in version 7.1.0 of Crowd Data Center and Server. This XXE (X… Crowd 7.1.3+ Fix from $1,9502026-01-28 MEDIUM 5.4 CVE-2025-22169 Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive in… Jira Align 11.16.1+ Fix from $1,6002025-10-22 MEDIUM 5.4 CVE-2025-22175 Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive in… Jira Align 11.16.1+ Fix from $1,6002025-10-22 MEDIUM 6.5 CVE-2025-22167 This High severity Path Traversal (Arbitrary Write) vulnerability was introduced in versions: 9.12.0, 10.3.0 and remain present in 11.0.0 of Jira Sof… Jira Data Center 9.12.28 / 10.3.12+ Fix from $1,6002025-10-22 HIGH 7.5 CVE-2025-22166 This High severity DoS (Denial of Service) vulnerability was introduced in version 2.0 of Confluence Data Center. This DoS (Denial of Service) vul… Confluence Data Center 8.5.25 / 9.2.7+ Fix from $1,9502025-10-21 HIGH 8.1 CVE-2025-35115 Agiloft Release 28 downloads critical system packages over an insecure HTTP connection. An attacker in a Man-In-the-Middle position could replace or … Agiloft 30+ Fix from $1,9502025-08-26 HIGH 7.5 CVE-2025-35114 Agiloft Release 28 contains several accounts with default credentials that could allow local privilege escalation. The password hash is known for at … Agiloft 30+ Fix from $1,9502025-08-26 HIGH 7.2 CVE-2025-35113 Agiloft Release 28 does not properly neutralize special elements used in an EUI template engine, allowing an authenticated attacker to achieve remote… Agiloft 31+ Fix from $1,9502025-08-26 HIGH 7.3 CVE-2025-22165 This Medium severity ACE (Arbitrary Code Execution) vulnerability was introduced in version 4.2.8 of Sourcetree for Mac. This ACE (Arbitrary Code Ex… Sourcetree after 4.2.12 Fix from $1,9502025-07-24 HIGH 8.8 CVE-2025-22157 This High severity PrivEsc (Privilege Escalation) vulnerability was introduced in versions: 9.12.0, 10.3.0, 10.4.0, and 10.5.0 of Jira Core Data Cen… Jira Data Center 5.12.20 / 9.12.20+ Fix from $1,9502025-05-20 MEDIUM 6.4 CVE-2024-21703 This Medium severity Security Misconfiguration vulnerability was introduced in version 8.8.1 of Confluence Data Center and Server for Windows install… Confluence Data Center 7.19.18 / 8.5.5+ Fix from $1,6002024-11-27 HIGH 8.8 CVE-2024-21697 This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 4.2.8 of Sourcetree for Mac and 3.4.19 for Sourcetree for Win… Sourcetree Mitigation only Fix from $1,9502024-11-19 HIGH 8.2 CVE-2024-21690 This High severity Reflected XSS and CSRF (Cross-Site Request Forgery) vulnerability was introduced in versions 7.19.0, 7.20.0, 8.0.0, 8.1.0, 8.2.0, … Confluence Data Center after 8.9.4 Fix from $1,9502024-08-21 HIGH 8.0 CVE-2024-21689 This High severity RCE (Remote Code Execution) vulnerability CVE-2024-21689  was introduced in versions 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, and 9.6.0 … Bamboo 9.2.17 / 9.6.5+ Fix from $1,9502024-08-20 HIGH 8.1 CVE-2024-21687 This High severity File Inclusion vulnerability was introduced in versions 9.0.0, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0 and 9.6.0 of Bamboo Data Center a… Bamboo 9.2.16 / 9.6.4+ Fix from $1,9502024-07-16 HIGH 8.7 CVE-2024-21686 This High severity Stored XSS vulnerability was introduced in versions 7.13 of Confluence Data Center and Server. This Stored XSS vulnerability, wit… Confluence Data Center 7.19.22 / 8.5.9+ Fix from $1,9502024-07-16 MEDIUM 6.5 CVE-2024-21685 This High severity Information Disclosure vulnerability was introduced in versions 9.4.0, 9.12.0, and 9.15.0 of Jira Core Data Center. This Inf… Jira Data Center 9.4.21 / 9.12.8+ Fix from $1,6002024-06-18 HIGH 8.8 CVE-2024-21683EPSS 88% This High severity RCE (Remote Code Execution) vulnerability was introduced in version 5.2 of Confluence Data Center and Server. This RCE (Remote Co… Confluence Data Center 4.8.15 / 5.4.21+ Fix from $1,9502024-05-21 HIGH 8.8 CVE-2024-21677 This High severity Path Traversal vulnerability was introduced in version 6.13.0 of Confluence Data Center. This Path Traversal vulnerability, with a… Confluence Data Center 7.19.20 / 8.5.7+ Fix from $1,9502024-03-19 HIGH 7.2 CVE-2024-21682 This High severity Injection vulnerability was introduced in Assets Discovery 1.0 - 6.2.0 (all versions). Assets Discovery, which can be downloaded… Assets Discovery Data Center 6.2.1+ Fix from $1,9502024-02-20 HIGH 8.5 CVE-2024-21678 This High severity Stored XSS vulnerability was introduced in version 2.7.0 of Confluence Data Center. This Stored XSS vulnerability, with a CVSS … Confluence Data Center 7.19.19 / 8.5.5+ Fix from $1,9502024-02-20 HIGH 7.8 CVE-2023-22514 This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.14 of Sourcetree for Mac and Sourcetree for Windows. … Sourcetree 3.4.15 / 4.2.5+ Fix from $1,9502024-01-16 HIGH 7.5 CVE-2023-22512EPSS 14% This High severity DoS (Denial of Service) vulnerability was introduced in version 5.6.0 of Confluence Data Center and Server. With a CVSS Score of 7… Confluence Data Center 7.19.14 / 8.5.1+ Fix from $1,9502024-01-16 CRITICAL 9.8 CVE-2023-22527 KEVEPSS 100% A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an aff… Confluence Data Center 8.5.4+ Fix from $2,3002024-01-16 HIGH 8.8 CVE-2024-21672 This High severity Remote Code Execution (RCE) vulnerability was introduced in version 2.1.0 of Confluence Data Center and Server. Remote Code Execu… Confluence Data Center 7.19.18 / 8.5.5+ Fix from $1,9502024-01-16