Browse CVEs

CRITICAL 9.8 CVE-2019-3396 KEVEPSS 100% The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from version 6.7.0 before 6.12.3 (the … Confluence Server 6.6.12 / 6.12.3+ Fix from $2,3002019-03-25 HIGH 8.8 CVE-2018-20234EPSS 6% There was an argument injection vulnerability in Atlassian Sourcetree for macOS from version 1.2 before version 3.1.1 via filenames in Mercurial repo… Sourcetree 3.1.1+ Fix from $1,9502019-03-08 HIGH 8.8 CVE-2018-20235EPSS 7% There was an argument injection vulnerability in Atlassian Sourcetree for Windows from version 0.5a before version 3.0.15 via filenames in Mercurial … Sourcetree 3.0.15+ Fix from $1,9502019-03-08 HIGH 8.8 CVE-2018-20236EPSS 6% There was an command injection vulnerability in Sourcetree for Windows from version 0.5a before version 3.0.10 via URI handling. A remote attacker co… Sourcetree 3.0.10+ Fix from $1,9502019-03-08 MEDIUM 5.4 CVE-2018-20241 The Edit upload resource for a review in Atlassian Fisheye and Crucible before version 4.7.0 allows remote attackers to inject arbitrary HTML or Java… Crucible 4.7.0+ Fix from $1,6002019-02-20 HIGH 8.1 CVE-2018-20238 Various rest resources in Atlassian Crowd before version 3.2.7 and from version 3.3.0 before version 3.3.4 allow remote attackers to authenticate usi… Crowd 3.2.7 / 3.3.4+ Fix from $1,9502019-02-13 MEDIUM 6.5 CVE-2018-20237 Atlassian Confluence Server and Data Center before version 6.13.1 allows an authenticated user to download a deleted page via the word export feature. Confluence Data Center 6.13.1 / 6.14.0+ Fix from $1,6002019-02-13 MEDIUM 5.4 CVE-2018-13403 The two-dimensional filter statistics gadget in Atlassian Jira before version 7.6.10, from version 7.7.0 before version 7.12.4, and from version 7.13… Jira 7.6.10 / 7.13.1+ Fix from $1,6002019-02-13 MEDIUM 5.4 CVE-2018-20232 The labels widget gadget in Atlassian Jira before version 7.6.11 and from version 7.7.0 before version 7.13.1 allows remote attackers to inject arbit… Jira 7.6.11 / 7.13.1+ Fix from $1,6002019-02-13 MEDIUM 6.5 CVE-2018-20233 The Upload add-on resource in Atlassian Universal Plugin Manager before version 2.22.14 allows remote attackers who have system administrator privile… Universal Plugin Manager 2.22.14+ Fix from $1,6002019-01-18 HIGH 8.8 CVE-2018-1000418 An improper authorization vulnerability exists in Jenkins HipChat Plugin 2.2.0 and earlier in HipChatNotifier.java that allows attackers with Overall… Hipchat after 2.2.0 Fix from $1,9502019-01-09 HIGH 7.8 CVE-2018-1000423 An insufficiently protected credentials vulnerability exists in Jenkins Crowd 2 Integration Plugin 2.0.0 and earlier in CrowdSecurityRealm.java, Crow… Crowd2 after 2.0.0 Fix from $1,9502019-01-09 MEDIUM 6.5 CVE-2018-1000419 An improper authorization vulnerability exists in Jenkins HipChat Plugin 2.2.0 and earlier in HipChatNotifier.java that allows attackers with Overall… Hipchat after 2.2.0 Fix from $1,6002019-01-09 MEDIUM 6.5 CVE-2018-1000422 An improper authorization vulnerability exists in Jenkins Crowd 2 Integration Plugin 2.0.0 and earlier in CrowdSecurityRealm.java that allows attacke… Crowd2 after 2.0.0 Fix from $1,6002019-01-09 HIGH 8.8 CVE-2018-13396 There was an argument injection vulnerability in Sourcetree for macOS from version 1.0b2 before version 3.0.0 via Git subrepositories in Mercurial re… Sourcetree 3.0.0+ Fix from $1,9502018-11-05 HIGH 8.8 CVE-2018-13397 There was an argument injection vulnerability in Sourcetree for Windows from version 0.5.1.0 before version 3.0.0 via Git subrepositories in Mercuria… Sourcetree 3.0.0+ Fix from $1,9502018-11-05 MEDIUM 6.1 CVE-2018-13401 The XsrfErrorAction resource in Atlassian Jira before version 7.6.9, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5… Jira 7.6.9 / 7.7.5+ Fix from $1,6002018-10-23 MEDIUM 6.1 CVE-2018-13402 Many resources in Atlassian Jira before version 7.6.9, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, from version… Jira 7.6.9 / 7.7.5+ Fix from $1,6002018-10-23 HIGH 7.8 CVE-2018-13399 The Microsoft Windows Installer for Atlassian Fisheye and Crucible before version 4.6.1 allows local attackers to escalate privileges because of weak… Crucible 4.6.1+ Fix from $1,9502018-10-16 MEDIUM 6.5 CVE-2018-13398 The administrative smart-commits resource in Atlassian Fisheye and Crucible before version 4.5.4 allows remote attackers to modify smart-commit setti… Crucible 4.5.4+ Fix from $1,6002018-09-18 MEDIUM 6.1 CVE-2018-13395 Various resources in Atlassian Jira before version 7.6.8, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, from vers… Jira 7.6.8 / 7.7.5+ Fix from $1,6002018-08-28 MEDIUM 5.3 CVE-2018-13391 The ProfileLinkUserFormat component of Jira Server before version 7.6.8, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7… Jira 7.6.8 / 7.7.5+ Fix from $1,6002018-08-28 MEDIUM 6.5 CVE-2018-13393 The convertCommentToAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Confluence Questions was updated t… Questions For Confluence 2.6.6+ Fix from $1,6002018-08-15 MEDIUM 6.5 CVE-2018-13394 The acceptAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Confluence Questions was updated to a fixed … Questions For Confluence 2.6.6+ Fix from $1,6002018-08-15 MEDIUM 6.1 CVE-2018-13392 Several resources in Atlassian Fisheye and Crucible before version 4.6.0 allow remote attackers to inject arbitrary HTML or JavaScript via a cross si… Crucible 4.6.0+ Fix from $1,6002018-08-13 MEDIUM 6.1 CVE-2018-13390 Unauthenticated access to cloudtoken daemon on Linux via network from version 0.1.1 before version 0.1.24 allows attackers on the same subnet to gain… Cloudtoken 0.1.24+ Fix from $1,6002018-08-10 CRITICAL 9.8 CVE-2018-13385 There was an argument injection vulnerability in Sourcetree for macOS via filenames in Mercurial repositories. An attacker with permission to commit … Sourcetree 2.7.6+ Fix from $2,3002018-07-24 HIGH 8.1 CVE-2018-13386 There was an argument injection vulnerability in Sourcetree for Windows via filenames in Mercurial repositories. An attacker with permission to commi… Sourcetree 2.6.9+ Fix from $1,9502018-07-24 MEDIUM 5.9 CVE-2017-18104 The Webhooks component of Atlassian Jira before version 7.6.7 and from version 7.7.0 before version 7.11.0 allows remote attackers who are able to ob… Jira 7.6.7 / 7.11.0+ Fix from $1,6002018-07-24 MEDIUM 6.1 CVE-2018-5232 The EditIssue.jspa resource in Atlassian Jira before version 7.6.7 and from version 7.7.0 before version 7.10.1 allows remote attackers to inject arb… Jira 7.6.7 / 7.10.1+ Fix from $1,6002018-07-18