CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 낮음2.3 |
In JetBrains TeamCity before 2025.11.3 disabling versioned settings left a credentials config on disk |
| 25/02/2026 |
| CVE-2026-28195 | 보통4.3 | In JetBrains TeamCity before 2025.11.3 missing authorization allowed project developers to add parameters to build configurations | 25/02/2026 |
| CVE-2026-28194 | 보통6.1 | In JetBrains TeamCity before 2025.11.3 open redirect was possible in the React project creation flow | 25/02/2026 |
| CVE-2026-28193 | 보통5.3 | In JetBrains YouTrack before 2025.3.121962 apps were able to send requests to the app permissions endpoint | 25/02/2026 |
| CVE-2026-25848 | 심각9.8 | In JetBrains Hub before 2025.3.119807 authentication bypass allowing administrative actions was possible | 09/02/2026 |
| CVE-2026-25847 | 보통6.1 | In JetBrains PyCharm before 2025.3.2 a DOM-based XSS on Jupyter viewer page was possible | 09/02/2026 |
| CVE-2026-25846 | 보통6.5 | In JetBrains YouTrack before 2025.3.119033 access tokens could be exposed in Mailbox logs | 09/02/2026 |
| CVE-2025-68269 | 보통5.4 | In JetBrains IntelliJ IDEA before 2025.3 missing confirmation allowed opening of untrusted remote projects over SSH | 16/12/2025 |
| CVE-2025-68268 | 보통6.1 | In JetBrains TeamCity before 2025.11.1 reflected XSS was possible on the storage settings page | 16/12/2025 |
| CVE-2025-68267 | 보통6.5 | In JetBrains TeamCity before 2025.11.1 excessive privileges were possible due to storing GitHub personal access token instead of an installation token | 16/12/2025 |
| CVE-2025-68166 | 보통6.1 | In JetBrains TeamCity before 2025.11 a DOM-based XSS was possible on the OAuth connections tab | 16/12/2025 |
| CVE-2025-68165 | 보통6.1 | In JetBrains TeamCity before 2025.11 reflected XSS was possible on VCS Root setup | 16/12/2025 |
| CVE-2025-68164 | 낮음2.7 | In JetBrains TeamCity before 2025.11 port enumeration was possible via the Perforce connection test | 16/12/2025 |
| CVE-2025-68163 | 보통4.8 | In JetBrains TeamCity before 2025.11 stored XSS was possible on agentpushInstall page | 16/12/2025 |
| CVE-2025-68162 | 낮음2.7 | In JetBrains TeamCity before 2025.11 maven embedder allowed loading extensions via project configuration | 16/12/2025 |
| CVE-2025-67742 | 높음7.5 | In JetBrains TeamCity before 2025.11 path traversal was possible via file upload | 11/12/2025 |