CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 10/10/2024 |
| CVE-2024-47162 | MEDIUM5.3 | In JetBrains YouTrack before 2024.3.44799 token could be revealed on Imports page | 19/09/2024 |
| CVE-2024-47160 | MEDIUM5.3 | In JetBrains YouTrack before 2024.3.44799 access to global app config data without appropriate permissions was possible | 19/09/2024 |
| CVE-2024-47159 | MEDIUM4.3 | In JetBrains YouTrack before 2024.3.44799 user without appropriate permissions could restore workflows attached to a project | 19/09/2024 |
| CVE-2024-38506 | HIGH8.1 | In JetBrains YouTrack before 2024.2.34646 user without appropriate permissions could enable the auto-attach option for workflows | 18/06/2024 |
| CVE-2024-38505 | HIGH7.5 | In JetBrains YouTrack before 2024.2.34646 user access token was sent to the third-party site | 18/06/2024 |
| CVE-2024-38504 | MEDIUM5.3 | In JetBrains YouTrack before 2024.2.34646 the Guest User Account was enabled for attaching files to articles | 18/06/2024 |
| CVE-2024-35299 | HIGH7.5 | In JetBrains YouTrack before 2024.1.29548 the SMTPS protocol communication lacked proper certificate hostname validation | 16/05/2024 |
| CVE-2024-28230 | MEDIUM6.5 | In JetBrains YouTrack before 2024.1.25893 attaching/detaching workflow to a project was possible without project admin permissions | 07/03/2024 |
| CVE-2024-28229 | MEDIUM6.5 | In JetBrains YouTrack before 2024.1.25893 user without appropriate permissions could restore issues and articles | 07/03/2024 |
| CVE-2024-28228 | MEDIUM5.3 | In JetBrains YouTrack before 2024.1.25893 creation comments on behalf of an arbitrary user in HelpDesk was possible | 07/03/2024 |
| CVE-2024-22370 | MEDIUM5.4 | In JetBrains YouTrack before 2023.3.22666 stored XSS via markdown was possible | 09/01/2024 |
| CVE-2023-50871 | MEDIUM4.3 | In JetBrains YouTrack before 2023.3.22268 authorization check for inline comments inside thread replies was missed | 15/12/2023 |
| CVE-2023-38068 | HIGH7.3 | In JetBrains YouTrack before 2023.1.16597 captcha was not properly validated for Helpdesk forms | 12/07/2023 |
| CVE-2023-35054 | MEDIUM5.4 | In JetBrains YouTrack before 2023.1.10518 stored XSS in a Markdown-rendering engine was possible | 12/06/2023 |
| CVE-2023-35053 | HIGH7.5 | In JetBrains YouTrack before 2023.1.10518 a DoS attack was possible via Helpdesk forms | 12/06/2023 |
| CVE-2022-28650 | MEDIUM5.4 | In JetBrains YouTrack before 2022.1.43700 it was possible to inject JavaScript into Markdown in the YouTrack Classic UI | 05/04/2022 |