CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 20/05/2025 |
| CVE-2025-47850 | 보통5.3 | In JetBrains YouTrack before 2025.1.74704 restricted attachments could become visible after issue cloning | 20/05/2025 |
| CVE-2025-24458 | 높음7.8 | In JetBrains YouTrack before 2024.3.55417 account takeover was possible via spoofed email and Helpdesk integration | 21/01/2025 |
| CVE-2025-24457 | 보통5.5 | In JetBrains YouTrack before 2024.3.55417 permanent tokens could be exposed in logs | 21/01/2025 |
| CVE-2024-54158 | 보통5.3 | In JetBrains YouTrack before 2024.3.52635 potential spoofing attack was possible via lack of Punycode encoding | 04/12/2024 |
| CVE-2024-54157 | 보통6.5 | In JetBrains YouTrack before 2024.3.52635 potential ReDoS was possible due to vulnerable RegExp in Ruby syntax detector | 04/12/2024 |
| CVE-2024-54156 | 보통6.5 | In JetBrains YouTrack before 2024.3.52635 multiple merge functions were vulnerable to prototype pollution attack | 04/12/2024 |
| CVE-2024-54155 | 보통5.3 | In JetBrains YouTrack before 2024.3.51866 improper access control allowed listing of project names during app import without authentication | 04/12/2024 |
| CVE-2024-54154 | 심각9.8 | In JetBrains YouTrack before 2024.3.51866 system takeover was possible through path traversal in plugin sandbox | 04/12/2024 |
| CVE-2024-54153 | 보통6.5 | In JetBrains YouTrack before 2024.3.51866 unauthenticated database backup download was possible via vulnerable query parameter | 04/12/2024 |
| CVE-2024-50582 | 보통5.4 | In JetBrains YouTrack before 2024.3.47707 stored XSS was possible due to improper HTML sanitization in markdown elements | 28/10/2024 |
| CVE-2024-50581 | 보통5.4 | In JetBrains YouTrack before 2024.3.47707 improper HTML sanitization could lead to XSS attack via comment tag | 28/10/2024 |
| CVE-2024-50580 | 보통5.4 | In JetBrains YouTrack before 2024.3.47707 multiple XSS were possible due to insecure markdown parsing and custom rendering rule | 28/10/2024 |
| CVE-2024-50579 | 보통6.1 | In JetBrains YouTrack before 2024.3.47707 reflected XSS due to insecure link sanitization was possible | 28/10/2024 |
| CVE-2024-50578 | 보통5.4 | In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via sprint value on agile boards page | 28/10/2024 |
| CVE-2024-50577 | 보통5.4 | In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via Angular template injection in Hub settings | 28/10/2024 |
| CVE-2024-50576 | 보통5.4 | In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via vendor URL in App manifest | 28/10/2024 |