CVE 検索
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
In JetBrains TeamCity before 2025.11.3 disabling versioned settings left a credentials config on disk |
| 25/02/2026 |
| CVE-2026-28195 | 中4.3 | In JetBrains TeamCity before 2025.11.3 missing authorization allowed project developers to add parameters to build configurations | 25/02/2026 |
| CVE-2026-28194 | 中6.1 | In JetBrains TeamCity before 2025.11.3 open redirect was possible in the React project creation flow | 25/02/2026 |
| CVE-2026-28193 | 中5.3 | In JetBrains YouTrack before 2025.3.121962 apps were able to send requests to the app permissions endpoint | 25/02/2026 |
| CVE-2026-25848 | 緊急9.8 | In JetBrains Hub before 2025.3.119807 authentication bypass allowing administrative actions was possible | 09/02/2026 |
| CVE-2026-25847 | 中6.1 | In JetBrains PyCharm before 2025.3.2 a DOM-based XSS on Jupyter viewer page was possible | 09/02/2026 |
| CVE-2026-25846 | 中6.5 | In JetBrains YouTrack before 2025.3.119033 access tokens could be exposed in Mailbox logs | 09/02/2026 |
| CVE-2025-68269 | 中5.4 | In JetBrains IntelliJ IDEA before 2025.3 missing confirmation allowed opening of untrusted remote projects over SSH | 16/12/2025 |
| CVE-2025-68268 | 中6.1 | In JetBrains TeamCity before 2025.11.1 reflected XSS was possible on the storage settings page | 16/12/2025 |
| CVE-2025-68267 | 中6.5 | In JetBrains TeamCity before 2025.11.1 excessive privileges were possible due to storing GitHub personal access token instead of an installation token | 16/12/2025 |
| CVE-2025-68166 | 中6.1 | In JetBrains TeamCity before 2025.11 a DOM-based XSS was possible on the OAuth connections tab | 16/12/2025 |
| CVE-2025-68165 | 中6.1 | In JetBrains TeamCity before 2025.11 reflected XSS was possible on VCS Root setup | 16/12/2025 |
| CVE-2025-68164 | 低2.7 | In JetBrains TeamCity before 2025.11 port enumeration was possible via the Perforce connection test | 16/12/2025 |
| CVE-2025-68163 | 中4.8 | In JetBrains TeamCity before 2025.11 stored XSS was possible on agentpushInstall page | 16/12/2025 |
| CVE-2025-68162 | 低2.7 | In JetBrains TeamCity before 2025.11 maven embedder allowed loading extensions via project configuration | 16/12/2025 |
| CVE-2025-67742 | 高7.5 | In JetBrains TeamCity before 2025.11 path traversal was possible via file upload | 11/12/2025 |