CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| MOYENNE6.1 |
JetBrains TeamCity before 2020.1.2 was vulnerable to URL injection. |
| 16/11/2020 |
| CVE-2020-27629 | MOYENNE5.3 | In JetBrains TeamCity before 2020.1.5, secure dependency parameters could be not masked in depending builds when there are no internal artifacts. | 16/11/2020 |
| CVE-2020-27628 | MOYENNE4.3 | In JetBrains TeamCity before 2020.1.5, the Guest user had access to audit records. | 16/11/2020 |
| CVE-2020-15831 | MOYENNE6.1 | JetBrains TeamCity before 2019.2.3 is vulnerable to reflected XSS in the administration UI. | 08/08/2020 |
| CVE-2020-15830 | MOYENNE6.1 | JetBrains TeamCity before 2019.2.3 is vulnerable to stored XSS in the administration UI. | 08/08/2020 |
| CVE-2020-15829 | MOYENNE5.3 | In JetBrains TeamCity before 2019.2.3, password parameters could be disclosed via build logs. | 08/08/2020 |
| CVE-2020-15828 | MOYENNE6.5 | In JetBrains TeamCity before 2020.1.1, project parameter values can be retrieved by a user without appropriate permissions. | 08/08/2020 |
| CVE-2020-15826 | MOYENNE4.3 | In JetBrains TeamCity before 2020.1, users are able to assign more permissions than they have. | 08/08/2020 |
| CVE-2020-15825 | ÉLEVÉE8.8 | In JetBrains TeamCity before 2020.1, users with the Modify Group permission can elevate other users' privileges. | 08/08/2020 |
| CVE-2020-11938 | MOYENNE4.9 | In JetBrains TeamCity 2018.2 through 2019.2.1, a project administrator was able to see scrambled password parameters used in a project. The issue was resolved in 2019.2.2. | 22/04/2020 |
| CVE-2020-11689 | MOYENNE6.5 | In JetBrains TeamCity before 2019.2.1, a user without appropriate permissions was able to import settings from the settings.kts file. | 22/04/2020 |
| CVE-2020-11688 | ÉLEVÉE7.5 | In JetBrains TeamCity before 2019.2.1, the application state is kept alive after a user ends his session. | 22/04/2020 |
| CVE-2020-11687 | ÉLEVÉE7.5 | In JetBrains TeamCity before 2019.2.2, password values were shown in an unmasked format on several pages. | 22/04/2020 |
| CVE-2020-11686 | FAIBLE2.7 | In JetBrains TeamCity before 2019.1.4, a project administrator was able to retrieve some TeamCity server settings. | 22/04/2020 |
| CVE-2020-7911 | MOYENNE6.1 | In JetBrains TeamCity before 2019.2, several user-level pages were vulnerable to XSS. | 30/01/2020 |
| CVE-2020-7910 | MOYENNE5.4 | JetBrains TeamCity before 2019.2 was vulnerable to a stored XSS attack by a user with the developer role. | 30/01/2020 |