CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 01/10/2019 |
| CVE-2019-15035 | MITTEL4.9 | An issue was discovered in JetBrains TeamCity 2018.2.4. A TeamCity Project administrator could get access to potentially confidential server-level data. The issue was fixed in TeamCity 2018.2.5 and 2019.1. | 01/10/2019 |
| CVE-2019-15042 | HOCH7.5 | An issue was discovered in JetBrains TeamCity 2018.2.4. It had no SSL certificate validation for some external https connections. This was fixed in TeamCity 2019.1. | 01/10/2019 |
| CVE-2019-14961 | MITTEL6.1 | JetBrains Upsource before 2019.1.1412 was not properly escaping HTML tags in a code block comments, leading to XSS. | 01/10/2019 |
| CVE-2019-15038 | HOCH7.5 | An issue was discovered in JetBrains TeamCity 2018.2.4. The TeamCity server was not using some security-related HTTP headers. The issue was fixed in TeamCity 2019.1. | 01/10/2019 |
| CVE-2019-14960 | HOCH7.8 | JetBrains Rider before 2019.1.2 was using an unsigned JetBrains.Rider.Unity.Editor.Plugin.Repacked.dll file. | 01/10/2019 |
| CVE-2019-14957 | MITTEL5.3 | The JetBrains Vim plugin before version 0.52 was storing individual project data in the global vim_settings.xml file. This xml file could be synchronized to a publicly accessible GitHub repository. | 01/10/2019 |
| CVE-2019-14955 | MITTEL5.3 | In JetBrains Hub versions earlier than 2018.4.11436, there was no option to force a user to change the password and no password expiration policy was implemented. | 01/10/2019 |
| CVE-2019-14953 | MITTEL6.1 | JetBrains YouTrack versions before 2019.2.53938 had a possible XSS through issue attachments when using the Firefox browser. | 01/10/2019 |
| CVE-2019-15039 | KRITISCH9.8 | An issue was discovered in JetBrains TeamCity 2018.2.4. It had a possible remote code execution issue. This was fixed in TeamCity 2019.1. | 01/10/2019 |
| CVE-2019-14954 | MITTEL5.9 | JetBrains IntelliJ IDEA before 2019.2 was resolving the markdown plantuml artifact download link via a cleartext http connection. | 01/10/2019 |
| CVE-2019-14952 | MITTEL6.1 | JetBrains YouTrack versions before 2019.1.52584 had a possible XSS in the issue titles. | 01/10/2019 |
| CVE-2019-15848 | MITTEL6.1 | JetBrains TeamCity 2019.1 and 2019.1.1 allows cross-site scripting (XSS), potentially making it possible to send an arbitrary HTTP request to a TeamCity server under the name of the currently logged-in user. | 05/09/2019 |
| CVE-2019-12852 | KRITISCH9.8 | An SSRF attack was possible on a JetBrains YouTrack server. The issue (1 of 2) was fixed in JetBrains YouTrack 2018.4.49168. | 03/07/2019 |
| CVE-2019-12846 | MITTEL4.3 | A user without the required permissions could gain access to some JetBrains TeamCity settings. The issue was fixed in TeamCity 2018.2.2. | 03/07/2019 |
| CVE-2019-12845 | MITTEL5.3 | The generated Kotlin DSL settings allowed usage of an unencrypted connection for resolving artifacts. The issue was fixed in JetBrains TeamCity 2018.2.3. | 03/07/2019 |
| CVE-2019-12844 | MITTEL6.1 | A possible stored JavaScript injection was detected on one of the JetBrains TeamCity pages. The issue was fixed in TeamCity 2018.2.3. | 03/07/2019 |