CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
In JetBrains TeamCity before 2025.03.2 stored XSS via YouTrack integration was possible |
| 20/05/2025 |
| CVE-2025-47851 | 보통5.4 | In JetBrains TeamCity before 2025.03.2 stored XSS via GitHub Checks Webhook was possible | 20/05/2025 |
| CVE-2025-46618 | 보통6.1 | In JetBrains TeamCity before 2025.03.1 stored XSS was possible on Data Directory tab | 25/04/2025 |
| CVE-2025-46433 | 심각9.8 | In JetBrains TeamCity before 2025.03.1 improper path validation in loggingPreset parameter was possible | 25/04/2025 |
| CVE-2025-46432 | 보통6.5 | In JetBrains TeamCity before 2025.03.1 base64-encoded credentials could be exposed in build logs | 25/04/2025 |
| CVE-2025-31141 | 높음7.5 | In JetBrains TeamCity before 2025.03 exception could lead to credential leakage on Cloud Profiles page | 27/03/2025 |
| CVE-2025-31140 | 보통6.1 | In JetBrains TeamCity before 2025.03 stored XSS was possible on Cloud Profiles page | 27/03/2025 |
| CVE-2025-31139 | 보통6.5 | In JetBrains TeamCity before 2025.03 base64 encoded password could be exposed in build log | 27/03/2025 |
| CVE-2025-26493 | 보통6.1 | In JetBrains TeamCity before 2024.12.2 several DOM-based XSS were possible on the Code Inspection Report tab | 11/02/2025 |
| CVE-2025-26492 | 심각9.1 | In JetBrains TeamCity before 2024.12.2 improper Kubernetes connection settings could expose sensitive resources | 11/02/2025 |
| CVE-2025-24461 | 보통6.5 | In JetBrains TeamCity before 2024.12.1 decryption of connection secrets without proper permissions was possible via Test Connection endpoint | 21/01/2025 |
| CVE-2025-24460 | 보통4.3 | In JetBrains TeamCity before 2024.12.1 improper access control allowed to see Projects’ names in the agent pool | 21/01/2025 |
| CVE-2025-24459 | 보통6.1 | In JetBrains TeamCity before 2024.12.1 reflected XSS was possible on the Vault Connection page | 21/01/2025 |
| CVE-2024-56356 | 높음7.1 | In JetBrains TeamCity before 2024.12 insecure XMLParser configuration could lead to potential XXE attack | 20/12/2024 |
| CVE-2024-56355 | 보통5.4 | In JetBrains TeamCity before 2024.12 missing Content-Type header in RemoteBuildLogController response could lead to XSS | 20/12/2024 |
| CVE-2024-56354 | 보통4.9 | In JetBrains TeamCity before 2024.12 password field value were accessible to users with view settings permission | 20/12/2024 |