CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 03/02/2021 |
| CVE-2021-25766 | MOYENNE5.3 | In JetBrains YouTrack before 2020.4.4701, improper resource access checks were made. | 03/02/2021 |
| CVE-2021-25765 | ÉLEVÉE8.8 | In JetBrains YouTrack before 2020.4.4701, CSRF via attachment upload was possible. | 03/02/2021 |
| CVE-2020-25208 | MOYENNE5.3 | In JetBrains YouTrack before 2020.4.4701, an attacker could enumerate users via the REST API without appropriate permissions. | 03/02/2021 |
| CVE-2020-27626 | MOYENNE5.3 | JetBrains YouTrack before 2020.3.5333 was vulnerable to SSRF. | 16/11/2020 |
| CVE-2020-27625 | MOYENNE5.3 | In JetBrains YouTrack before 2020.3.888, notifications might have mentioned inaccessible issues. | 16/11/2020 |
| CVE-2020-27624 | MOYENNE5.3 | JetBrains YouTrack before 2020.3.888 was vulnerable to SSRF. | 16/11/2020 |
| CVE-2020-25210 | MOYENNE5.3 | In JetBrains YouTrack before 2020.3.7955, an attacker could access workflow rules without appropriate access grants. | 16/11/2020 |
| CVE-2020-25209 | ÉLEVÉE7.5 | In JetBrains YouTrack before 2020.3.6638, improper access control for some subresources leads to information disclosure via the REST API. | 16/11/2020 |
| CVE-2020-24366 | FAIBLE3.3 | Sensitive information could be disclosed in the JetBrains YouTrack application before 2020.2.0 for Android via application backups. | 16/11/2020 |
| CVE-2020-15822 | ÉLEVÉE7.3 | In JetBrains YouTrack before 2020.2.10514, SSRF is possible because URL filtering can be escaped. | 19/10/2020 |
| CVE-2020-24618 | MOYENNE6.5 | In JetBrains YouTrack versions before 2020.3.4313, 2020.2.11008, 2020.1.11011, 2019.1.65514, 2019.2.65515, and 2019.3.65516, an attacker can retrieve an issue description without appropriate access. | 27/08/2020 |
| CVE-2020-15823 | ÉLEVÉE7.5 | JetBrains YouTrack before 2020.2.8873 is vulnerable to SSRF in the Workflow component. | 08/08/2020 |
| CVE-2020-15821 | MOYENNE6.5 | In JetBrains YouTrack before 2020.2.6881, a user without permission is able to create an article draft. | 08/08/2020 |
| CVE-2020-15820 | MOYENNE5.3 | In JetBrains YouTrack before 2020.2.6881, the markdown parser could disclose hidden file existence. | 08/08/2020 |
| CVE-2020-15819 | MOYENNE5.3 | JetBrains YouTrack before 2020.2.10643 was vulnerable to SSRF that allowed scanning internal ports. | 08/08/2020 |
| CVE-2020-15818 | MOYENNE5.3 | In JetBrains YouTrack before 2020.2.8527, the subtasks workflow could disclose issue existence. | 08/08/2020 |