CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| CVE-2022-24344 |
| MEDIUM5.4 |
JetBrains YouTrack before 2021.4.31698 was vulnerable to stored XSS on the Notification templates page. |
| 25/02/2022 |
| CVE-2022-24343 | MEDIUM4.3 | In JetBrains YouTrack before 2021.4.31698, a custom logo could be set by a user who has read-only permissions. | 25/02/2022 |
| CVE-2021-43186 | MEDIUM5.4 | JetBrains YouTrack before 2021.3.24402 is vulnerable to stored XSS. | 09/11/2021 |
| CVE-2021-43185 | CRITICAL9.8 | JetBrains YouTrack before 2021.3.23639 is vulnerable to Host header injection. | 09/11/2021 |
| CVE-2021-43184 | MEDIUM5.4 | In JetBrains YouTrack before 2021.3.21051, stored XSS is possible. | 09/11/2021 |
| CVE-2021-37554 | MEDIUM4.3 | In JetBrains YouTrack before 2021.3.21051, a user could see boards without having corresponding permissions. | 06/08/2021 |
| CVE-2021-37553 | HIGH7.5 | In JetBrains YouTrack before 2021.2.16363, an insecure PRNG was used. | 06/08/2021 |
| CVE-2021-37552 | MEDIUM5.4 | In JetBrains YouTrack before 2021.2.17925, stored XSS was possible. | 06/08/2021 |
| CVE-2021-37551 | MEDIUM5.3 | In JetBrains YouTrack before 2021.2.16363, system user passwords were hashed with SHA-256. | 06/08/2021 |
| CVE-2021-37550 | HIGH7.5 | In JetBrains YouTrack before 2021.2.16363, time-unsafe comparisons were used. | 06/08/2021 |
| CVE-2021-37549 | CRITICAL9.1 | In JetBrains YouTrack before 2021.1.11111, sandboxing in workflows was insufficient. | 06/08/2021 |
| CVE-2021-31905 | HIGH7.5 | In JetBrains YouTrack before 2020.6.8801, information disclosure in an issue preview was possible. | 11/05/2021 |
| CVE-2021-31903 | MEDIUM6.1 | In JetBrains YouTrack before 2021.1.9819, a pull request's title was sanitized insufficiently, leading to XSS. | 11/05/2021 |
| CVE-2021-31902 | HIGH7.5 | In JetBrains YouTrack before 2020.6.6600, access control during the exporting of issues was implemented improperly. | 11/05/2021 |
| CVE-2021-27733 | MEDIUM5.4 | In JetBrains YouTrack before 2020.6.6441, stored XSS was possible via an issue attachment. | 11/05/2021 |
| CVE-2021-25771 | MEDIUM4.3 | In JetBrains YouTrack before 2020.6.1099, project information could be potentially disclosed. | 03/02/2021 |