A vulnerability was found in Atlassian JIRA Server and Data Center up to 8.19.0 (Bug Tracking Software) and classified as critical. Affected by this issue is some unknown functionality of the file /plugins/servlet/audit/resource of the component Service Management Project Handler. Upgrading to version 8.19.1 eliminates this vulnerability.
Atlassian JIRA Server/Data Center up to 8.19.0 Service Management Project resource improper authentication
- Virtual Patching
- December 8, 2021
- 11:08 am
CVE-2024-20381 : CISCO IOS XR JSON-RPC API IMPROPER AUTHORIZATION
Description A vulnerability in the JSON-RPC API feature in ConfD that is used by the web-based management interfaces of Cisco
CVE-2024-44466 : COMFAST CF-XR11 2.7.2 HTTP POST REQUEST /USR/BIN/WEBMGNT SUB_424CB4 IFACE COMMAND INJECTION
Description COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub_424CB4. Attackers can send POST request messages to /usr/bin/webmgnt
CVE-2024-45013 : LINUX KERNEL UP TO 6.10.6 NVME_UNINIT_CTRL USE AFTER FREE
Description In the Linux kernel, the following vulnerability has been resolved: nvme: move stopping keep-alive into nvme_uninit_ctrl() Commit 4733b65d82bd (“nvme: