CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 높음7.5 |
In JetBrains YouTrack before 2020.4.6808, the YouTrack administrator wasn't able to access attachments. |
| 03/02/2021 |
| CVE-2021-25768 | 보통5.3 | In JetBrains YouTrack before 2020.4.4701, permissions for attachments actions were checked improperly. | 03/02/2021 |
| CVE-2021-25767 | 보통5.3 | In JetBrains YouTrack before 2020.6.1767, an issue's existence could be disclosed via YouTrack command execution. | 03/02/2021 |
| CVE-2021-25766 | 보통5.3 | In JetBrains YouTrack before 2020.4.4701, improper resource access checks were made. | 03/02/2021 |
| CVE-2021-25765 | 높음8.8 | In JetBrains YouTrack before 2020.4.4701, CSRF via attachment upload was possible. | 03/02/2021 |
| CVE-2021-25763 | 보통5.3 | In JetBrains Ktor before 1.4.2, weak cipher suites were enabled by default. | 03/02/2021 |
| CVE-2021-25762 | 보통5.3 | In JetBrains Ktor before 1.4.3, HTTP Request Smuggling was possible. | 03/02/2021 |
| CVE-2021-25761 | 보통5.3 | In JetBrains Ktor before 1.5.0, a birthday attack on SessionStorage key was possible. | 03/02/2021 |
| CVE-2021-25760 | 보통5.3 | In JetBrains Hub before 2020.1.12669, information disclosure via the public API was possible. | 03/02/2021 |
| CVE-2021-25759 | 보통6.5 | In JetBrains Hub before 2020.1.12629, an authenticated user can delete 2FA settings of any other user. | 03/02/2021 |
| CVE-2021-25758 | 높음7.8 | In JetBrains IntelliJ IDEA before 2020.3, potentially insecure deserialization of the workspace model could lead to local code execution. | 03/02/2021 |
| CVE-2021-25757 | 보통6.1 | In JetBrains Hub before 2020.1.12629, an open redirect was possible. | 03/02/2021 |
| CVE-2021-25756 | 보통5.3 | In JetBrains IntelliJ IDEA before 2020.2, HTTP links were used for several remote repositories instead of HTTPS. | 03/02/2021 |
| CVE-2021-25755 | 낮음2.5 | In JetBrains Code With Me before 2020.3, an attacker on the local network, knowing a session ID, could get access to the encrypted traffic. | 03/02/2021 |
| CVE-2020-35667 | 높음7.5 | JetBrains TeamCity Plugin before 2020.2.85695 SSRF. Vulnerability that could potentially expose user credentials. | 03/02/2021 |
| CVE-2020-29582 | 보통5.3 | In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such files and list directories due to insecure permissions. | 03/02/2021 |