CVE 検索
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
| 高7.5 |
In JetBrains TeamCity version before 2022.10, Project Viewer could see scrambled secure values in the MetaRunner settings |
| 03/11/2022 |
| CVE-2022-44622 | 中5.3 | In JetBrains TeamCity version between 2021.2 and 2022.10 access permissions for secure token health items were excessive | 03/11/2022 |
| CVE-2022-40979 | 中5.3 | In JetBrains TeamCity before 2022.04.4 environmental variables of "password" type could be logged when using custom Perforce executable | 23/09/2022 |
| CVE-2022-40978 | 高7.8 | The installer of JetBrains IntelliJ IDEA before 2022.2.2 was vulnerable to EXE search order hijacking | 19/09/2022 |
| CVE-2022-38180 | 中6.5 | In JetBrains Ktor before 2.1.0 the wrong authentication provider could be selected in some cases | 12/08/2022 |
| CVE-2022-38179 | 中6.1 | JetBrains Ktor before 2.1.0 was vulnerable to the Reflect File Download attack | 12/08/2022 |
| CVE-2022-38133 | 中5.3 | In JetBrains TeamCity before 2022.04.3 the private SSH key could be written to the server log in some cases | 10/08/2022 |
| CVE-2022-37396 | 高7.8 | In JetBrains Rider before 2022.2 Trust and Open Project dialog could be bypassed, leading to local code execution | 03/08/2022 |
| CVE-2022-37010 | 低3.3 | In JetBrains IntelliJ IDEA before 2022.2 email address validation in the "Git User Name Is Not Defined" dialog was missed | 28/07/2022 |
| CVE-2022-37009 | 高7.8 | In JetBrains IntelliJ IDEA before 2022.2 local code execution via a Vagrant executable was possible | 28/07/2022 |
| CVE-2022-36322 | 高8.8 | In JetBrains TeamCity before 2022.04.2 build parameter injection was possible | 20/07/2022 |
| CVE-2022-36321 | 中6.5 | In JetBrains TeamCity before 2022.04.2 the private SSH key could be written to the build log in some cases | 20/07/2022 |
| CVE-2022-34894 | 中5.3 | In JetBrains Hub before 2022.2.14799, insufficient access control allowed the hijacking of untrusted services | 01/07/2022 |
| CVE-2022-29930 | 中4.9 | SHA1 implementation in JetBrains Ktor Native 2.0.0 was returning the same value. The issue was fixed in Ktor version 2.0.1. | 12/05/2022 |
| CVE-2022-29929 | 中6.1 | In JetBrains TeamCity before 2022.04 potential XSS via Referrer header was possible | 12/05/2022 |
| CVE-2022-29928 | 中4.9 | In JetBrains TeamCity before 2022.04 leak of secrets in TeamCity agent logs was possible | 12/05/2022 |