CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| CRITICAL9.8 |
In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 authentication bypass was possible in specific edge cases |
| 29/05/2024 |
| CVE-2024-36378 | HIGH7.5 | In JetBrains TeamCity before 2024.03.2 server was susceptible to DoS attacks with incorrect auth tokens | 29/05/2024 |
| CVE-2024-36377 | HIGH8.1 | In JetBrains TeamCity before 2024.03.2 certain TeamCity API endpoints did not check user permissions | 29/05/2024 |
| CVE-2024-36376 | HIGH8.1 | In JetBrains TeamCity before 2024.03.2 users could perform actions that should not be available to them based on their permissions | 29/05/2024 |
| CVE-2024-36375 | MEDIUM5.3 | In JetBrains TeamCity before 2024.03.2 technical information regarding TeamCity server could be exposed | 29/05/2024 |
| CVE-2024-36374 | MEDIUM5.4 | In JetBrains TeamCity before 2024.03.2 stored XSS via build step settings was possible | 29/05/2024 |
| CVE-2024-36373 | MEDIUM5.4 | In JetBrains TeamCity before 2024.03.2 several stored XSS in untrusted builds settings were possible | 29/05/2024 |
| CVE-2024-36372 | MEDIUM6.1 | In JetBrains TeamCity before 2023.05.6 reflected XSS on the subscriptions page was possible | 29/05/2024 |
| CVE-2024-36371 | MEDIUM5.4 | In JetBrains TeamCity before 2023.05.6, 2023.11.5 stored XSS in Commit status publisher was possible | 29/05/2024 |
| CVE-2024-36370 | MEDIUM5.4 | In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via OAuth connection settings was possible | 29/05/2024 |
| CVE-2024-36369 | MEDIUM5.4 | In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via issue tracker integration was possible | 29/05/2024 |
| CVE-2024-36368 | MEDIUM5.4 | In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 reflected XSS via OAuth provider configuration was possible | 29/05/2024 |
| CVE-2024-36367 | MEDIUM6.1 | In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via third-party reports was possible | 29/05/2024 |
| CVE-2024-36366 | MEDIUM6.1 | In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 an XSS could be executed via certain report grouping and filtering operations | 29/05/2024 |
| CVE-2024-36365 | HIGH8.1 | In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, 2024.03.2 a third-party agent could impersonate a cloud agent | 29/05/2024 |
| CVE-2024-36364 | MEDIUM6.5 | In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 improper access control in Pull Requests and Commit status publisher build features was possible | 29/05/2024 |