CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 보통5.3 |
In JetBrains TeamCity before 2024.12 improper access control allowed unauthorized users to modify build logs |
| 20/12/2024 |
| CVE-2024-56348 | 보통4.3 | In JetBrains TeamCity before 2024.12 improper access control allowed viewing details of unauthorized agents | 20/12/2024 |
| CVE-2024-47951 | 보통5.4 | In JetBrains TeamCity before 2024.07.3 stored XSS was possible via server global settings | 08/10/2024 |
| CVE-2024-47950 | 보통5.4 | In JetBrains TeamCity before 2024.07.3 stored XSS was possible in Backup configuration settings | 08/10/2024 |
| CVE-2024-47949 | 높음7.5 | In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary location | 08/10/2024 |
| CVE-2024-47948 | 높음7.5 | In JetBrains TeamCity before 2024.07.3 path traversal leading to information disclosure was possible via server backups | 08/10/2024 |
| CVE-2024-47161 | 보통6.5 | In JetBrains TeamCity before 2024.07.3 password could be exposed via Sonar runner REST API | 08/10/2024 |
| CVE-2024-43810 | 보통5.4 | In JetBrains TeamCity before 2024.07.1 reflected XSS was possible in the AWS Core plugin | 16/08/2024 |
| CVE-2024-43809 | 보통6.1 | In JetBrains TeamCity before 2024.07.1 reflected XSS was possible on the agentPushPreset page | 16/08/2024 |
| CVE-2024-43808 | 보통5.4 | In JetBrains TeamCity before 2024.07.1 self XSS was possible in the HashiCorp Vault plugin | 16/08/2024 |
| CVE-2024-43807 | 보통5.4 | In JetBrains TeamCity before 2024.07.1 multiple stored XSS was possible on Clouds page | 16/08/2024 |
| CVE-2024-43114 | 높음7.8 | In JetBrains TeamCity before 2024.07.1 possible privilege escalation due to incorrect directory permissions | 06/08/2024 |
| CVE-2024-41829 | 높음7.5 | In JetBrains TeamCity before 2024.07 an OAuth code for JetBrains Space could be stolen via Space Application connection | 22/07/2024 |
| CVE-2024-41828 | 보통6.5 | In JetBrains TeamCity before 2024.07 comparison of authorization tokens took non-constant time | 22/07/2024 |
| CVE-2024-41827 | 심각9.8 | In JetBrains TeamCity before 2024.07 access tokens could continue working after deletion or expiration | 22/07/2024 |
| CVE-2024-41826 | 보통4.8 | In JetBrains TeamCity before 2024.07 stored XSS was possible on Show Connection page | 22/07/2024 |