CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 낮음3.8 |
In JetBrains TeamCity before 2025.07.1 sMTP injection was possible allowing modification of email content |
| 20/08/2025 |
| CVE-2025-57732 | 보통6.3 | In JetBrains TeamCity before 2025.07.1 privilege escalation was possible due to incorrect directory ownership | 20/08/2025 |
| CVE-2025-54538 | 보통5.5 | In JetBrains TeamCity before 2025.07 password exposure was possible via command line in the "hg pull" command | 28/07/2025 |
| CVE-2025-54537 | 보통5.5 | In JetBrains TeamCity before 2025.07 user credentials were stored in plain text in memory snapshots | 28/07/2025 |
| CVE-2025-54536 | 높음8.8 | In JetBrains TeamCity before 2025.07 a CSRF was possible on GraphQL endpoint | 28/07/2025 |
| CVE-2025-54535 | 높음7.5 | In JetBrains TeamCity before 2025.07 password reset and email verification tokens were using weak hashing algorithms | 28/07/2025 |
| CVE-2025-54534 | 보통4.8 | In JetBrains TeamCity before 2025.07 reflected XSS was possible on the agentpushPreset page | 28/07/2025 |
| CVE-2025-54533 | 보통4.3 | In JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via VCS configuration | 28/07/2025 |
| CVE-2025-54532 | 보통4.3 | In JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via snapshot dependencies | 28/07/2025 |
| CVE-2025-54531 | 심각9.4 | In JetBrains TeamCity before 2025.07 path traversal was possible via plugin unpacking on Windows | 28/07/2025 |
| CVE-2025-54530 | 심각9.8 | In JetBrains TeamCity before 2025.07 privilege escalation was possible due to incorrect directory permissions | 28/07/2025 |
| CVE-2025-54529 | 높음7.5 | In JetBrains TeamCity before 2025.07 a CSRF was possible in external OAuth login integration | 28/07/2025 |
| CVE-2025-54528 | 높음8.8 | In JetBrains TeamCity before 2025.07 a CSRF was possible in GitHub App connection flow | 28/07/2025 |
| CVE-2025-52879 | 보통4.8 | In JetBrains TeamCity before 2025.03.3 reflected XSS in the NPM Registry integration was possible | 23/06/2025 |
| CVE-2025-52878 | 보통4.3 | In JetBrains TeamCity before 2025.03.3 usernames were exposed to the users without proper permissions | 23/06/2025 |
| CVE-2025-52877 | 보통4.8 | In JetBrains TeamCity before 2025.03.3 reflected XSS on diskUsageBuildsStats page was possible | 23/06/2025 |