CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| CVE-2020-7912 |
| MITTEL5.3 |
In JetBrains YouTrack before 2019.2.59309, SMTP/Jabber settings could be accessed using backups. |
| 30/01/2020 |
| CVE-2019-18369 | MITTEL5.3 | In JetBrains YouTrack before 2019.2.55152, removing tags from the issues list without the corresponding permission was possible. | 31/10/2019 |
| CVE-2019-16171 | MITTEL6.1 | In JetBrains YouTrack through 2019.2.56594, stored XSS was found on the issue page. | 02/10/2019 |
| CVE-2019-15040 | HOCH8.8 | JetBrains YouTrack versions before 2019.1 had a CSRF vulnerability on the settings page. | 02/10/2019 |
| CVE-2019-14956 | MITTEL4.3 | JetBrains YouTrack before 2019.2.53938 was using incorrect settings, allowing a user without necessary permissions to get other project names. | 02/10/2019 |
| CVE-2019-15041 | MITTEL6.1 | JetBrains YouTrack versions before 2019.1.52545 allowed unbounded URL whitelisting because of Inclusion of Functionality from an Untrusted Control Sphere. | 01/10/2019 |
| CVE-2019-14953 | MITTEL6.1 | JetBrains YouTrack versions before 2019.2.53938 had a possible XSS through issue attachments when using the Firefox browser. | 01/10/2019 |
| CVE-2019-14952 | MITTEL6.1 | JetBrains YouTrack versions before 2019.1.52584 had a possible XSS in the issue titles. | 01/10/2019 |
| CVE-2019-12852 | KRITISCH9.8 | An SSRF attack was possible on a JetBrains YouTrack server. The issue (1 of 2) was fixed in JetBrains YouTrack 2018.4.49168. | 03/07/2019 |
| CVE-2019-12867 | KRITISCH9.8 | Certain actions could cause privilege escalation for issue attachments in JetBrains YouTrack. The issue was fixed in 2018.4.49168. | 03/07/2019 |
| CVE-2019-12866 | KRITISCH9.8 | An Insecure Direct Object Reference, with Authorization Bypass through a User-Controlled Key, was possible in JetBrains YouTrack. The issue was fixed in 2018.4.49168. | 03/07/2019 |
| CVE-2019-12851 | HOCH8.8 | A CSRF vulnerability was detected in one of the admin endpoints of JetBrains YouTrack. The issue was fixed in YouTrack 2018.4.49852. | 03/07/2019 |
| CVE-2019-12850 | KRITISCH9.8 | A query injection was possible in JetBrains YouTrack. The issue was fixed in YouTrack 2018.4.49168. | 03/07/2019 |