CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 06/03/2024 |
| CVE-2024-28173 | MOYENNE4.3 | In JetBrains TeamCity between 2023.11 and 2023.11.4 custom build parameters of the "password" type could be disclosed | 06/03/2024 |
| CVE-2024-27199KEV | ÉLEVÉE7.3 | In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible | 04/03/2024 |
| CVE-2024-27198KEV | CRITIQUE9.8 | In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible | 04/03/2024 |
| CVE-2024-24943 | MOYENNE5.5 | In JetBrains Toolbox App before 2.2 a DoS attack was possible via a malicious SVG image | 06/02/2024 |
| CVE-2024-24942 | MOYENNE5.3 | In JetBrains TeamCity before 2023.11.3 path traversal allowed reading data within JAR archives | 06/02/2024 |
| CVE-2024-24941 | MOYENNE5.3 | In JetBrains IntelliJ IDEA before 2023.3.3 a plugin for JetBrains Space was able to send an authentication token to an inappropriate URL | 06/02/2024 |
| CVE-2024-24940 | MOYENNE4.3 | In JetBrains IntelliJ IDEA before 2023.3.3 path traversal was possible when unpacking archives | 06/02/2024 |
| CVE-2024-24939 | MOYENNE5.3 | In JetBrains Rider before 2023.3.3 logging of environment variables containing secret values was possible | 06/02/2024 |
| CVE-2024-24938 | MOYENNE5.3 | In JetBrains TeamCity before 2023.11.2 limited directory traversal was possible in the Kotlin DSL documentation | 06/02/2024 |
| CVE-2024-24937 | MOYENNE5.4 | In JetBrains TeamCity before 2023.11.2 stored XSS via agent distribution was possible | 06/02/2024 |
| CVE-2024-24936 | MOYENNE5.3 | In JetBrains TeamCity before 2023.11.2 access control at the S3 Artifact Storage plugin endpoint was missed | 06/02/2024 |
| CVE-2024-23917 | CRITIQUE9.8 | In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible | 06/02/2024 |
| CVE-2024-22370 | MOYENNE5.4 | In JetBrains YouTrack before 2023.3.22666 stored XSS via markdown was possible | 09/01/2024 |
| CVE-2023-51655 | CRITIQUE9.8 | In JetBrains IntelliJ IDEA before 2023.3.2 code execution was possible in Untrusted Project mode via a malicious plugin repository specified in the project configuration | 21/12/2023 |
| CVE-2023-50871 | MOYENNE4.3 | In JetBrains YouTrack before 2023.3.22268 authorization check for inline comments inside thread replies was missed | 15/12/2023 |
| CVE-2023-50870 | ÉLEVÉE8.8 | In JetBrains TeamCity before 2023.11.1 a CSRF on login was possible | 15/12/2023 |