CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
In JetBrains TeamCity before 2024.12 improper access control allowed unauthorized users to modify build logs |
| 20/12/2024 |
| CVE-2024-56348 | MEDIUM4.3 | In JetBrains TeamCity before 2024.12 improper access control allowed viewing details of unauthorized agents | 20/12/2024 |
| CVE-2024-47951 | MEDIUM5.4 | In JetBrains TeamCity before 2024.07.3 stored XSS was possible via server global settings | 08/10/2024 |
| CVE-2024-47950 | MEDIUM5.4 | In JetBrains TeamCity before 2024.07.3 stored XSS was possible in Backup configuration settings | 08/10/2024 |
| CVE-2024-47949 | HIGH7.5 | In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary location | 08/10/2024 |
| CVE-2024-47948 | HIGH7.5 | In JetBrains TeamCity before 2024.07.3 path traversal leading to information disclosure was possible via server backups | 08/10/2024 |
| CVE-2024-47161 | MEDIUM6.5 | In JetBrains TeamCity before 2024.07.3 password could be exposed via Sonar runner REST API | 08/10/2024 |
| CVE-2024-43810 | MEDIUM5.4 | In JetBrains TeamCity before 2024.07.1 reflected XSS was possible in the AWS Core plugin | 16/08/2024 |
| CVE-2024-43809 | MEDIUM6.1 | In JetBrains TeamCity before 2024.07.1 reflected XSS was possible on the agentPushPreset page | 16/08/2024 |
| CVE-2024-43808 | MEDIUM5.4 | In JetBrains TeamCity before 2024.07.1 self XSS was possible in the HashiCorp Vault plugin | 16/08/2024 |
| CVE-2024-43807 | MEDIUM5.4 | In JetBrains TeamCity before 2024.07.1 multiple stored XSS was possible on Clouds page | 16/08/2024 |
| CVE-2024-43114 | HIGH7.8 | In JetBrains TeamCity before 2024.07.1 possible privilege escalation due to incorrect directory permissions | 06/08/2024 |
| CVE-2024-41829 | HIGH7.5 | In JetBrains TeamCity before 2024.07 an OAuth code for JetBrains Space could be stolen via Space Application connection | 22/07/2024 |
| CVE-2024-41828 | MEDIUM6.5 | In JetBrains TeamCity before 2024.07 comparison of authorization tokens took non-constant time | 22/07/2024 |
| CVE-2024-41827 | CRITICAL9.8 | In JetBrains TeamCity before 2024.07 access tokens could continue working after deletion or expiration | 22/07/2024 |
| CVE-2024-41826 | MEDIUM4.8 | In JetBrains TeamCity before 2024.07 stored XSS was possible on Show Connection page | 22/07/2024 |