All CVEs — page 523 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
This flaw allows an attacker to upload arbitrary files outside the workspace by manipulating the file_path parameter in confluence_upload_attachment, potentially leading to unauthorized access to server-readable files.
The flaw allows an attacker to upload sensitive files to a Confluence page, which can then be retrieved, potentially exposing credentials or other host data.
This flaw allows an attacker to read arbitrary local files and attach them to a Jira issue by exploiting the MCP Atlassian server prior to version 0.22.0, leading to potential data exfiltration.
The flaw allows network callers to perform operations with the operator account's permissions via the HTTP MCP endpoint without proper authentication, posing a critical risk.
The flaw allows unauthenticated network callers to read files accessible to the MCP process and upload them to Jira or Confluence, posing a significant security risk.
This vulnerability allows an attacker to execute arbitrary code in the context of the current user, leading to potential full system compromise.
A stored Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager Forms JEE allows high-privileged attackers to inject malicious scripts, potentially gaining access to victim accounts or sessions.
A reflected Cross-Site Scripting (XSS) vulnerability in Adobe Connect allows attackers to inject malicious scripts, potentially gaining access to victim accounts or sessions.
A stored Cross-Site Scripting (XSS) vulnerability in Adobe Connect allows attackers to inject malicious scripts, potentially gaining access to victim accounts or sessions.
A stored Cross-Site Scripting (XSS) vulnerability in Adobe Connect allows attackers to inject malicious scripts, potentially gaining access to victim accounts or sessions.
The flaw is an Improper Input Validation vulnerability in Adobe Connect that could allow an attacker to execute arbitrary code. This matters because it could lead to unauthorized code execution in the context of the current user, potentially compromising the system.
A stored Cross-Site Scripting (XSS) vulnerability in Adobe Connect allows attackers to inject malicious scripts, potentially gaining access to victim accounts or sessions.
The flaw is an SQL injection vulnerability in Adobe Connect that allows a low-privileged attacker to execute arbitrary SQL commands, potentially gaining elevated access. This matters because it can lead to arbitrary code execution and unauthorized access to user accounts.
A stack-based buffer overflow vulnerability in Bridge allows for arbitrary code execution, posing a significant risk to users who open malicious files.