CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 보통6.1 |
In JetBrains TeamCity before 2025.03.2 open redirect was possible on editing VCS Root page |
| 20/05/2025 |
| CVE-2025-47853 | 보통5.4 | In JetBrains TeamCity before 2025.03.2 stored XSS via Jira integration was possible | 20/05/2025 |
| CVE-2025-47852 | 보통5.4 | In JetBrains TeamCity before 2025.03.2 stored XSS via YouTrack integration was possible | 20/05/2025 |
| CVE-2025-47851 | 보통5.4 | In JetBrains TeamCity before 2025.03.2 stored XSS via GitHub Checks Webhook was possible | 20/05/2025 |
| CVE-2025-47850 | 보통5.3 | In JetBrains YouTrack before 2025.1.74704 restricted attachments could become visible after issue cloning | 20/05/2025 |
| CVE-2025-46618 | 보통6.1 | In JetBrains TeamCity before 2025.03.1 stored XSS was possible on Data Directory tab | 25/04/2025 |
| CVE-2025-46433 | 심각9.8 | In JetBrains TeamCity before 2025.03.1 improper path validation in loggingPreset parameter was possible | 25/04/2025 |
| CVE-2025-46432 | 보통6.5 | In JetBrains TeamCity before 2025.03.1 base64-encoded credentials could be exposed in build logs | 25/04/2025 |
| CVE-2025-43016 | 높음7.5 | In JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug session | 25/04/2025 |
| CVE-2025-43015 | 보통6.5 | In JetBrains RubyMine before 2025.1 remote Interpreter overwrote ports to listen on all interfaces | 17/04/2025 |
| CVE-2025-43014 | 보통6.5 | In JetBrains Toolbox App before 2.6 the SSH plugin established connections without sufficient user confirmation | 17/04/2025 |
| CVE-2025-43013 | 높음7.5 | In JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication was possible | 17/04/2025 |
| CVE-2025-43012 | 심각9.8 | In JetBrains Toolbox App before 2.6 command injection in SSH plugin was possible | 17/04/2025 |
| CVE-2025-42921 | 보통6.5 | In JetBrains Toolbox App before 2.6 host key verification was missing in SSH plugin | 17/04/2025 |
| CVE-2025-32054 | 낮음3.3 | In JetBrains IntelliJ IDEA before 2024.3, 2024.2.4 source code could be logged in the idea.log file | 03/04/2025 |
| CVE-2025-31141 | 높음7.5 | In JetBrains TeamCity before 2025.03 exception could lead to credential leakage on Cloud Profiles page | 27/03/2025 |