CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 보통5.3 |
In JetBrains YouTrack before 2019.2.59309, SMTP/Jabber settings could be accessed using backups. |
| 30/01/2020 |
| CVE-2019-18369 | 보통5.3 | In JetBrains YouTrack before 2019.2.55152, removing tags from the issues list without the corresponding permission was possible. | 31/10/2019 |
| CVE-2019-16171 | 보통6.1 | In JetBrains YouTrack through 2019.2.56594, stored XSS was found on the issue page. | 02/10/2019 |
| CVE-2019-15040 | 높음8.8 | JetBrains YouTrack versions before 2019.1 had a CSRF vulnerability on the settings page. | 02/10/2019 |
| CVE-2019-14956 | 보통4.3 | JetBrains YouTrack before 2019.2.53938 was using incorrect settings, allowing a user without necessary permissions to get other project names. | 02/10/2019 |
| CVE-2019-15041 | 보통6.1 | JetBrains YouTrack versions before 2019.1.52545 allowed unbounded URL whitelisting because of Inclusion of Functionality from an Untrusted Control Sphere. | 01/10/2019 |
| CVE-2019-14953 | 보통6.1 | JetBrains YouTrack versions before 2019.2.53938 had a possible XSS through issue attachments when using the Firefox browser. | 01/10/2019 |
| CVE-2019-14952 | 보통6.1 | JetBrains YouTrack versions before 2019.1.52584 had a possible XSS in the issue titles. | 01/10/2019 |
| CVE-2019-12852 | 심각9.8 | An SSRF attack was possible on a JetBrains YouTrack server. The issue (1 of 2) was fixed in JetBrains YouTrack 2018.4.49168. | 03/07/2019 |
| CVE-2019-12867 | 심각9.8 | Certain actions could cause privilege escalation for issue attachments in JetBrains YouTrack. The issue was fixed in 2018.4.49168. | 03/07/2019 |
| CVE-2019-12866 | 심각9.8 | An Insecure Direct Object Reference, with Authorization Bypass through a User-Controlled Key, was possible in JetBrains YouTrack. The issue was fixed in 2018.4.49168. | 03/07/2019 |
| CVE-2019-12851 | 높음8.8 | A CSRF vulnerability was detected in one of the admin endpoints of JetBrains YouTrack. The issue was fixed in YouTrack 2018.4.49852. | 03/07/2019 |
| CVE-2019-12850 | 심각9.8 | A query injection was possible in JetBrains YouTrack. The issue was fixed in YouTrack 2018.4.49168. | 03/07/2019 |