CVE 検索
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
| 中5.4 |
In JetBrains TeamCity before 2024.07.3 stored XSS was possible in Backup configuration settings |
| 08/10/2024 |
| CVE-2024-47949 | 高7.5 | In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary location | 08/10/2024 |
| CVE-2024-47948 | 高7.5 | In JetBrains TeamCity before 2024.07.3 path traversal leading to information disclosure was possible via server backups | 08/10/2024 |
| CVE-2024-47161 | 中6.5 | In JetBrains TeamCity before 2024.07.3 password could be exposed via Sonar runner REST API | 08/10/2024 |
| CVE-2024-47162 | 中5.3 | In JetBrains YouTrack before 2024.3.44799 token could be revealed on Imports page | 19/09/2024 |
| CVE-2024-47160 | 中5.3 | In JetBrains YouTrack before 2024.3.44799 access to global app config data without appropriate permissions was possible | 19/09/2024 |
| CVE-2024-47159 | 中4.3 | In JetBrains YouTrack before 2024.3.44799 user without appropriate permissions could restore workflows attached to a project | 19/09/2024 |
| CVE-2024-46970 | 中6.1 | In JetBrains IntelliJ IDEA before 2024.1 hTML injection via the project name was possible | 16/09/2024 |
| CVE-2024-43810 | 中5.4 | In JetBrains TeamCity before 2024.07.1 reflected XSS was possible in the AWS Core plugin | 16/08/2024 |
| CVE-2024-43809 | 中6.1 | In JetBrains TeamCity before 2024.07.1 reflected XSS was possible on the agentPushPreset page | 16/08/2024 |
| CVE-2024-43808 | 中5.4 | In JetBrains TeamCity before 2024.07.1 self XSS was possible in the HashiCorp Vault plugin | 16/08/2024 |
| CVE-2024-43807 | 中5.4 | In JetBrains TeamCity before 2024.07.1 multiple stored XSS was possible on Clouds page | 16/08/2024 |
| CVE-2024-43114 | 高7.8 | In JetBrains TeamCity before 2024.07.1 possible privilege escalation due to incorrect directory permissions | 06/08/2024 |
| CVE-2024-41829 | 高7.5 | In JetBrains TeamCity before 2024.07 an OAuth code for JetBrains Space could be stolen via Space Application connection | 22/07/2024 |
| CVE-2024-41828 | 中6.5 | In JetBrains TeamCity before 2024.07 comparison of authorization tokens took non-constant time | 22/07/2024 |
| CVE-2024-41827 | 緊急9.8 | In JetBrains TeamCity before 2024.07 access tokens could continue working after deletion or expiration | 22/07/2024 |