CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 01/06/2023 |
| CVE-2023-34229 | 보통5.4 | In JetBrains TeamCity before 2023.05 stored XSS in GitLab Connection page was possible | 31/05/2023 |
| CVE-2023-34228 | 보통6.5 | In JetBrains TeamCity before 2023.05 authentication checks were missing – 2FA was not checked for some sensitive account actions | 31/05/2023 |
| CVE-2023-34227 | 높음7.5 | In JetBrains TeamCity before 2023.05 a specific endpoint was vulnerable to brute force attacks | 31/05/2023 |
| CVE-2023-34226 | 보통6.1 | In JetBrains TeamCity before 2023.05 reflected XSS in the Subscriptions page was possible | 31/05/2023 |
| CVE-2023-34225 | 보통5.4 | In JetBrains TeamCity before 2023.05 stored XSS in the NuGet feed page was possible | 31/05/2023 |
| CVE-2023-34224 | 보통4.8 | In JetBrains TeamCity before 2023.05 open redirect during oAuth configuration was possible | 31/05/2023 |
| CVE-2023-34223 | 보통5.3 | In JetBrains TeamCity before 2023.05 parameters of the "password" type from build dependencies could be logged in some cases | 31/05/2023 |
| CVE-2023-34222 | 보통6.1 | In JetBrains TeamCity before 2023.05 possible XSS in the Plugin Vendor URL was possible | 31/05/2023 |
| CVE-2023-34221 | 보통5.4 | In JetBrains TeamCity before 2023.05 stored XSS in the Show Connection page was possible | 31/05/2023 |
| CVE-2023-34220 | 보통5.4 | In JetBrains TeamCity before 2023.05 stored XSS in the Commit Status Publisher window was possible | 31/05/2023 |
| CVE-2023-34219 | 보통4.3 | In JetBrains TeamCity before 2023.05 improper permission checks allowed users without appropriate permissions to edit Build Configuration settings via REST API | 31/05/2023 |
| CVE-2023-34218 | 심각9.8 | In JetBrains TeamCity before 2023.05 bypass of permission checks allowing to perform admin actions was possible | 31/05/2023 |
| CVE-2022-48481 | 높음7.8 | In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possible | 28/04/2023 |
| CVE-2022-48477 | 심각9.8 | In JetBrains Hub before 2023.1.15725 SSRF protection in Auth Module integration was missing
| 24/04/2023 |
| CVE-2022-48476 | 높음7.5 | In JetBrains Ktor before 2.3.0 path traversal in the `resolveResource` method was possible
| 24/04/2023 |
| CVE-2022-48435 | 낮음3.3 | In JetBrains PhpStorm before 2023.1 source code could be logged in the local idea.log file | 04/04/2023 |