CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 16/05/2024 |
| CVE-2024-35300 | 보통6.1 | In JetBrains TeamCity between 2024.03 and 2024.03.1 several stored XSS in the available updates page were possible | 16/05/2024 |
| CVE-2024-31140 | 보통4.9 | In JetBrains TeamCity before 2024.03 server administrators could remove arbitrary files from the server by installing tools | 28/03/2024 |
| CVE-2024-31139 | 높음8.1 | In JetBrains TeamCity before 2024.03 xXE was possible in the Maven build steps detector | 28/03/2024 |
| CVE-2024-31138 | 보통5.4 | In JetBrains TeamCity before 2024.03 xSS was possible via Agent Distribution settings | 28/03/2024 |
| CVE-2024-31137 | 보통6.1 | In JetBrains TeamCity before 2024.03 reflected XSS was possible via Space connection configuration | 28/03/2024 |
| CVE-2024-31136 | 높음7.4 | In JetBrains TeamCity before 2024.03 2FA could be bypassed by providing a special URL parameter | 28/03/2024 |
| CVE-2024-31135 | 보통6.1 | In JetBrains TeamCity before 2024.03 open redirect was possible on the login page | 28/03/2024 |
| CVE-2024-31134 | 보통6.5 | In JetBrains TeamCity before 2024.03 authenticated users without administrative permissions could register other users when self-registration was disabled | 28/03/2024 |
| CVE-2024-29880 | 높음7.8 | In JetBrains TeamCity before 2023.11 users with access to the agent machine might obtain permissions of the user running the agent process | 21/03/2024 |
| CVE-2024-28174 | 보통5.8 | In JetBrains TeamCity before 2023.11.4 presigned URL generation requests in S3 Artifact Storage plugin were authorized improperly | 06/03/2024 |
| CVE-2024-28173 | 보통4.3 | In JetBrains TeamCity between 2023.11 and 2023.11.4 custom build parameters of the "password" type could be disclosed | 06/03/2024 |
| CVE-2024-27199KEV | 높음7.3 | In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible | 04/03/2024 |
| CVE-2024-27198KEV | 심각9.8 | In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible | 04/03/2024 |
| CVE-2024-24942 | 보통5.3 | In JetBrains TeamCity before 2023.11.3 path traversal allowed reading data within JAR archives | 06/02/2024 |
| CVE-2024-24938 | 보통5.3 | In JetBrains TeamCity before 2023.11.2 limited directory traversal was possible in the Kotlin DSL documentation | 06/02/2024 |
| CVE-2024-24937 | 보통5.4 | In JetBrains TeamCity before 2023.11.2 stored XSS via agent distribution was possible | 06/02/2024 |