CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| HOCH7.5 |
In JetBrains YouTrack before 2020.4.6808, the YouTrack administrator wasn't able to access attachments. |
| 03/02/2021 |
| CVE-2021-25768 | MITTEL5.3 | In JetBrains YouTrack before 2020.4.4701, permissions for attachments actions were checked improperly. | 03/02/2021 |
| CVE-2021-25767 | MITTEL5.3 | In JetBrains YouTrack before 2020.6.1767, an issue's existence could be disclosed via YouTrack command execution. | 03/02/2021 |
| CVE-2021-25766 | MITTEL5.3 | In JetBrains YouTrack before 2020.4.4701, improper resource access checks were made. | 03/02/2021 |
| CVE-2021-25765 | HOCH8.8 | In JetBrains YouTrack before 2020.4.4701, CSRF via attachment upload was possible. | 03/02/2021 |
| CVE-2021-25763 | MITTEL5.3 | In JetBrains Ktor before 1.4.2, weak cipher suites were enabled by default. | 03/02/2021 |
| CVE-2021-25762 | MITTEL5.3 | In JetBrains Ktor before 1.4.3, HTTP Request Smuggling was possible. | 03/02/2021 |
| CVE-2021-25761 | MITTEL5.3 | In JetBrains Ktor before 1.5.0, a birthday attack on SessionStorage key was possible. | 03/02/2021 |
| CVE-2021-25760 | MITTEL5.3 | In JetBrains Hub before 2020.1.12669, information disclosure via the public API was possible. | 03/02/2021 |
| CVE-2021-25759 | MITTEL6.5 | In JetBrains Hub before 2020.1.12629, an authenticated user can delete 2FA settings of any other user. | 03/02/2021 |
| CVE-2021-25758 | HOCH7.8 | In JetBrains IntelliJ IDEA before 2020.3, potentially insecure deserialization of the workspace model could lead to local code execution. | 03/02/2021 |
| CVE-2021-25757 | MITTEL6.1 | In JetBrains Hub before 2020.1.12629, an open redirect was possible. | 03/02/2021 |
| CVE-2021-25756 | MITTEL5.3 | In JetBrains IntelliJ IDEA before 2020.2, HTTP links were used for several remote repositories instead of HTTPS. | 03/02/2021 |
| CVE-2021-25755 | NIEDRIG2.5 | In JetBrains Code With Me before 2020.3, an attacker on the local network, knowing a session ID, could get access to the encrypted traffic. | 03/02/2021 |
| CVE-2020-35667 | HOCH7.5 | JetBrains TeamCity Plugin before 2020.2.85695 SSRF. Vulnerability that could potentially expose user credentials. | 03/02/2021 |
| CVE-2020-29582 | MITTEL5.3 | In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such files and list directories due to insecure permissions. | 03/02/2021 |