CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| CRITICO9.8 |
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible |
| 19/09/2023 |
| CVE-2023-41250 | MEDIO6.1 | In JetBrains TeamCity before 2023.05.3 reflected XSS was possible during user registration | 25/08/2023 |
| CVE-2023-41249 | MEDIO6.1 | In JetBrains TeamCity before 2023.05.3 reflected XSS was possible during copying Build Step | 25/08/2023 |
| CVE-2023-41248 | MEDIO5.4 | In JetBrains TeamCity before 2023.05.3 stored XSS was possible during Cloud Profiles configuration | 25/08/2023 |
| CVE-2023-39175 | MEDIO6.1 | In JetBrains TeamCity before 2023.05.2 reflected XSS via GitHub integration was possible | 25/07/2023 |
| CVE-2023-39174 | ALTO7.5 | In JetBrains TeamCity before 2023.05.2 a ReDoS attack was possible via integration with issue trackers | 25/07/2023 |
| CVE-2023-39173 | ALTO8.8 | In JetBrains TeamCity before 2023.05.2 a token with limited permissions could be used to gain full account access | 25/07/2023 |
| CVE-2023-38067 | MEDIO6.5 | In JetBrains TeamCity before 2023.05.1 build parameters of the "password" type could be written to the agent log | 12/07/2023 |
| CVE-2023-38066 | MEDIO6.1 | In JetBrains TeamCity before 2023.05.1 reflected XSS via the Referer header was possible during artifact downloads | 12/07/2023 |
| CVE-2023-38065 | MEDIO5.4 | In JetBrains TeamCity before 2023.05.1 stored XSS while viewing the build log was possible | 12/07/2023 |
| CVE-2023-38064 | MEDIO6.5 | In JetBrains TeamCity before 2023.05.1 build chain parameters of the "password" type could be written to the agent log | 12/07/2023 |
| CVE-2023-38063 | MEDIO5.4 | In JetBrains TeamCity before 2023.05.1 stored XSS while running custom builds was possible | 12/07/2023 |
| CVE-2023-38062 | MEDIO6.5 | In JetBrains TeamCity before 2023.05.1 parameters of the "password" type could be shown in the UI in certain composite build configurations | 12/07/2023 |
| CVE-2023-38061 | MEDIO5.4 | In JetBrains TeamCity before 2023.05.1 stored XSS when using a custom theme was possible | 12/07/2023 |
| CVE-2015-1313 | MEDIO6.5 | JetBrains TeamCity 8 and 9 before 9.0.2 allows bypass of account-creation restrictions via a crafted request because the required request data can be deduced by reading HTML and JavaScript files that are returned to the web browser after an initial unauthenticated request. | 29/06/2023 |
| CVE-2023-34229 | MEDIO5.4 | In JetBrains TeamCity before 2023.05 stored XSS in GitLab Connection page was possible | 31/05/2023 |