CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
In JetBrains YouTrack Mobile before 2021.2, access token protection on iOS is incomplete. |
| 09/11/2021 |
| CVE-2021-43187 | MEDIUM5.3 | In JetBrains YouTrack Mobile before 2021.2, the client-side cache on iOS could contain sensitive information. | 09/11/2021 |
| CVE-2021-43186 | MEDIUM5.4 | JetBrains YouTrack before 2021.3.24402 is vulnerable to stored XSS. | 09/11/2021 |
| CVE-2021-43185 | CRITICAL9.8 | JetBrains YouTrack before 2021.3.23639 is vulnerable to Host header injection. | 09/11/2021 |
| CVE-2021-43184 | MEDIUM5.4 | In JetBrains YouTrack before 2021.3.21051, stored XSS is possible. | 09/11/2021 |
| CVE-2021-43183 | CRITICAL9.8 | In JetBrains Hub before 2021.1.13690, the authentication throttling mechanism could be bypassed. | 09/11/2021 |
| CVE-2021-37554 | MEDIUM4.3 | In JetBrains YouTrack before 2021.3.21051, a user could see boards without having corresponding permissions. | 06/08/2021 |
| CVE-2021-37553 | HIGH7.5 | In JetBrains YouTrack before 2021.2.16363, an insecure PRNG was used. | 06/08/2021 |
| CVE-2021-37552 | MEDIUM5.4 | In JetBrains YouTrack before 2021.2.17925, stored XSS was possible. | 06/08/2021 |
| CVE-2021-37551 | MEDIUM5.3 | In JetBrains YouTrack before 2021.2.16363, system user passwords were hashed with SHA-256. | 06/08/2021 |
| CVE-2021-37550 | HIGH7.5 | In JetBrains YouTrack before 2021.2.16363, time-unsafe comparisons were used. | 06/08/2021 |
| CVE-2021-37549 | CRITICAL9.1 | In JetBrains YouTrack before 2021.1.11111, sandboxing in workflows was insufficient. | 06/08/2021 |
| CVE-2021-37548 | HIGH7.5 | In JetBrains TeamCity before 2021.1, passwords in cleartext sometimes could be stored in VCS. | 06/08/2021 |
| CVE-2021-37547 | MEDIUM5.3 | In JetBrains TeamCity before 2020.2.4, insufficient checks during file uploading were made. | 06/08/2021 |
| CVE-2021-37546 | MEDIUM5.3 | In JetBrains TeamCity before 2021.1, an insecure key generation mechanism for encrypted properties was used. | 06/08/2021 |
| CVE-2021-37545 | HIGH7.5 | In JetBrains TeamCity before 2021.1.1, insufficient authentication checks for agent requests were made. | 06/08/2021 |