CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 보통5.4 |
JetBrains Space through 2020-04-22 allows stored XSS in Chats. |
| 22/04/2020 |
| CVE-2020-11694 | 높음7.5 | In JetBrains PyCharm 2019.2.5 and 2019.3 on Windows, Apple Notarization Service credentials were included. This is fixed in 2019.2.6 and 2019.3.3. | 10/04/2020 |
| CVE-2020-7907 | 높음7.5 | In the JetBrains Scala plugin before 2019.2.1, some artefact dependencies were resolved over unencrypted connections. | 21/02/2020 |
| CVE-2020-7914 | 높음7.5 | In JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file read operations over the network. This issue was fixed in 2019.3. | 31/01/2020 |
| CVE-2020-7913 | 보통6.1 | JetBrains YouTrack 2019.2 before 2019.2.59309 was vulnerable to XSS via an issue description. | 30/01/2020 |
| CVE-2020-7912 | 보통5.3 | In JetBrains YouTrack before 2019.2.59309, SMTP/Jabber settings could be accessed using backups. | 30/01/2020 |
| CVE-2020-7911 | 보통6.1 | In JetBrains TeamCity before 2019.2, several user-level pages were vulnerable to XSS. | 30/01/2020 |
| CVE-2020-7910 | 보통5.4 | JetBrains TeamCity before 2019.2 was vulnerable to a stored XSS attack by a user with the developer role. | 30/01/2020 |
| CVE-2020-7909 | 높음7.5 | In JetBrains TeamCity before 2019.1.5, some server-stored passwords could be shown via the web UI. | 30/01/2020 |
| CVE-2020-7908 | 보통4.3 | In JetBrains TeamCity before 2019.1.5, reverse tabnabbing was possible on several pages. | 30/01/2020 |
| CVE-2020-7906 | 높음7.5 | In JetBrains Rider versions 2019.3 EAP2 through 2019.3 EAP7, there were unsigned binaries provided by the Windows installer. This issue was fixed in release version 2019.3. | 30/01/2020 |
| CVE-2020-7905 | 높음7.5 | Ports listened to by JetBrains IntelliJ IDEA before 2019.3 were exposed to the network. | 30/01/2020 |
| CVE-2020-7904 | 높음7.4 | In JetBrains IntelliJ IDEA before 2019.3, some Maven repositories were accessed via HTTP instead of HTTPS. | 30/01/2020 |
| CVE-2020-5207 | 높음7.5 | In Ktor before 1.3.0, request smuggling is possible when running behind a proxy that doesn't handle Content-Length and Transfer-Encoding properly or doesn't handle \n as a headers separator. | 27/01/2020 |
| CVE-2019-18412 | 높음7.5 | JetBrains IDETalk plugin before version 193.4099.10 allows XXE | 15/01/2020 |
| CVE-2019-19389 | 보통5.4 | JetBrains Ktor framework before version 1.2.6 was vulnerable to HTTP Response Splitting. | 26/12/2019 |