CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 보통6.1 |
JetBrains TeamCity before 2020.1.2 was vulnerable to URL injection. |
| 16/11/2020 |
| CVE-2020-27629 | 보통5.3 | In JetBrains TeamCity before 2020.1.5, secure dependency parameters could be not masked in depending builds when there are no internal artifacts. | 16/11/2020 |
| CVE-2020-27628 | 보통4.3 | In JetBrains TeamCity before 2020.1.5, the Guest user had access to audit records. | 16/11/2020 |
| CVE-2020-15831 | 보통6.1 | JetBrains TeamCity before 2019.2.3 is vulnerable to reflected XSS in the administration UI. | 08/08/2020 |
| CVE-2020-15830 | 보통6.1 | JetBrains TeamCity before 2019.2.3 is vulnerable to stored XSS in the administration UI. | 08/08/2020 |
| CVE-2020-15829 | 보통5.3 | In JetBrains TeamCity before 2019.2.3, password parameters could be disclosed via build logs. | 08/08/2020 |
| CVE-2020-15828 | 보통6.5 | In JetBrains TeamCity before 2020.1.1, project parameter values can be retrieved by a user without appropriate permissions. | 08/08/2020 |
| CVE-2020-15826 | 보통4.3 | In JetBrains TeamCity before 2020.1, users are able to assign more permissions than they have. | 08/08/2020 |
| CVE-2020-15825 | 높음8.8 | In JetBrains TeamCity before 2020.1, users with the Modify Group permission can elevate other users' privileges. | 08/08/2020 |
| CVE-2020-11938 | 보통4.9 | In JetBrains TeamCity 2018.2 through 2019.2.1, a project administrator was able to see scrambled password parameters used in a project. The issue was resolved in 2019.2.2. | 22/04/2020 |
| CVE-2020-11689 | 보통6.5 | In JetBrains TeamCity before 2019.2.1, a user without appropriate permissions was able to import settings from the settings.kts file. | 22/04/2020 |
| CVE-2020-11688 | 높음7.5 | In JetBrains TeamCity before 2019.2.1, the application state is kept alive after a user ends his session. | 22/04/2020 |
| CVE-2020-11687 | 높음7.5 | In JetBrains TeamCity before 2019.2.2, password values were shown in an unmasked format on several pages. | 22/04/2020 |
| CVE-2020-11686 | 낮음2.7 | In JetBrains TeamCity before 2019.1.4, a project administrator was able to retrieve some TeamCity server settings. | 22/04/2020 |
| CVE-2020-7911 | 보통6.1 | In JetBrains TeamCity before 2019.2, several user-level pages were vulnerable to XSS. | 30/01/2020 |
| CVE-2020-7910 | 보통5.4 | JetBrains TeamCity before 2019.2 was vulnerable to a stored XSS attack by a user with the developer role. | 30/01/2020 |