CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 08/10/2024 |
| CVE-2024-47950 | 보통5.4 | In JetBrains TeamCity before 2024.07.3 stored XSS was possible in Backup configuration settings | 08/10/2024 |
| CVE-2024-47949 | 높음7.5 | In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary location | 08/10/2024 |
| CVE-2024-47948 | 높음7.5 | In JetBrains TeamCity before 2024.07.3 path traversal leading to information disclosure was possible via server backups | 08/10/2024 |
| CVE-2024-47161 | 보통6.5 | In JetBrains TeamCity before 2024.07.3 password could be exposed via Sonar runner REST API | 08/10/2024 |
| CVE-2024-47162 | 보통5.3 | In JetBrains YouTrack before 2024.3.44799 token could be revealed on Imports page | 19/09/2024 |
| CVE-2024-47160 | 보통5.3 | In JetBrains YouTrack before 2024.3.44799 access to global app config data without appropriate permissions was possible | 19/09/2024 |
| CVE-2024-47159 | 보통4.3 | In JetBrains YouTrack before 2024.3.44799 user without appropriate permissions could restore workflows attached to a project | 19/09/2024 |
| CVE-2024-46970 | 보통6.1 | In JetBrains IntelliJ IDEA before 2024.1 hTML injection via the project name was possible | 16/09/2024 |
| CVE-2024-43810 | 보통5.4 | In JetBrains TeamCity before 2024.07.1 reflected XSS was possible in the AWS Core plugin | 16/08/2024 |
| CVE-2024-43809 | 보통6.1 | In JetBrains TeamCity before 2024.07.1 reflected XSS was possible on the agentPushPreset page | 16/08/2024 |
| CVE-2024-43808 | 보통5.4 | In JetBrains TeamCity before 2024.07.1 self XSS was possible in the HashiCorp Vault plugin | 16/08/2024 |
| CVE-2024-43807 | 보통5.4 | In JetBrains TeamCity before 2024.07.1 multiple stored XSS was possible on Clouds page | 16/08/2024 |
| CVE-2024-43114 | 높음7.8 | In JetBrains TeamCity before 2024.07.1 possible privilege escalation due to incorrect directory permissions | 06/08/2024 |
| CVE-2024-41829 | 높음7.5 | In JetBrains TeamCity before 2024.07 an OAuth code for JetBrains Space could be stolen via Space Application connection | 22/07/2024 |
| CVE-2024-41828 | 보통6.5 | In JetBrains TeamCity before 2024.07 comparison of authorization tokens took non-constant time | 22/07/2024 |
| CVE-2024-41827 | 심각9.8 | In JetBrains TeamCity before 2024.07 access tokens could continue working after deletion or expiration | 22/07/2024 |