CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| CVE-2022-24344 |
| 보통5.4 |
JetBrains YouTrack before 2021.4.31698 was vulnerable to stored XSS on the Notification templates page. |
| 25/02/2022 |
| CVE-2022-24343 | 보통4.3 | In JetBrains YouTrack before 2021.4.31698, a custom logo could be set by a user who has read-only permissions. | 25/02/2022 |
| CVE-2021-43186 | 보통5.4 | JetBrains YouTrack before 2021.3.24402 is vulnerable to stored XSS. | 09/11/2021 |
| CVE-2021-43185 | 심각9.8 | JetBrains YouTrack before 2021.3.23639 is vulnerable to Host header injection. | 09/11/2021 |
| CVE-2021-43184 | 보통5.4 | In JetBrains YouTrack before 2021.3.21051, stored XSS is possible. | 09/11/2021 |
| CVE-2021-37554 | 보통4.3 | In JetBrains YouTrack before 2021.3.21051, a user could see boards without having corresponding permissions. | 06/08/2021 |
| CVE-2021-37553 | 높음7.5 | In JetBrains YouTrack before 2021.2.16363, an insecure PRNG was used. | 06/08/2021 |
| CVE-2021-37552 | 보통5.4 | In JetBrains YouTrack before 2021.2.17925, stored XSS was possible. | 06/08/2021 |
| CVE-2021-37551 | 보통5.3 | In JetBrains YouTrack before 2021.2.16363, system user passwords were hashed with SHA-256. | 06/08/2021 |
| CVE-2021-37550 | 높음7.5 | In JetBrains YouTrack before 2021.2.16363, time-unsafe comparisons were used. | 06/08/2021 |
| CVE-2021-37549 | 심각9.1 | In JetBrains YouTrack before 2021.1.11111, sandboxing in workflows was insufficient. | 06/08/2021 |
| CVE-2021-31905 | 높음7.5 | In JetBrains YouTrack before 2020.6.8801, information disclosure in an issue preview was possible. | 11/05/2021 |
| CVE-2021-31903 | 보통6.1 | In JetBrains YouTrack before 2021.1.9819, a pull request's title was sanitized insufficiently, leading to XSS. | 11/05/2021 |
| CVE-2021-31902 | 높음7.5 | In JetBrains YouTrack before 2020.6.6600, access control during the exporting of issues was implemented improperly. | 11/05/2021 |
| CVE-2021-27733 | 보통5.4 | In JetBrains YouTrack before 2020.6.6441, stored XSS was possible via an issue attachment. | 11/05/2021 |
| CVE-2021-25771 | 보통4.3 | In JetBrains YouTrack before 2020.6.1099, project information could be potentially disclosed. | 03/02/2021 |