CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 높음7.5 |
In JetBrains YouTrack before 2025.3.104432 missing TLS certificate validation enabled data disclosure |
| 10/11/2025 |
| CVE-2025-64684 | 높음7.5 | In JetBrains YouTrack before 2025.3.104432 information disclosure was possible via the feedback form | 10/11/2025 |
| CVE-2025-64683 | 높음7.5 | In JetBrains Hub before 2025.3.104432 information disclosure was possible via the Users API | 10/11/2025 |
| CVE-2025-64682 | 낮음3.7 | In JetBrains Hub before 2025.3.104432 a race condition allowed bypass of the Agent-user limit | 10/11/2025 |
| CVE-2025-64681 | 낮음3.7 | In JetBrains Hub before 2025.3.104992 a race condition allowed bypass of the user limit via invitations | 10/11/2025 |
| CVE-2025-64457 | 높음7.0 | In JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race condition | 10/11/2025 |
| CVE-2025-64456 | 높음7.8 | In JetBrains ReSharper before 2025.2.4 missing signature verification in DPA Collector allows local privilege escalation | 10/11/2025 |
| CVE-2025-59458 | 심각9.8 | In JetBrains Junie before 252.284.66,
251.284.66,
243.284.66,
252.284.61,
251.284.61,
243.284.61,
252.284.50,
252.284.54,
251.284.54,
251.284.50,
243.284.54,
243.284.50 code execution was possible due to improper command validation | 17/09/2025 |
| CVE-2025-59457 | 높음7.7 | In JetBrains TeamCity before 2025.07.2 missing Git URL validation allowed credential leakage on Windows | 17/09/2025 |
| CVE-2025-59456 | 보통5.5 | In JetBrains TeamCity before 2025.07.2 path traversal was possible during project archive upload | 17/09/2025 |
| CVE-2025-59455 | 보통4.2 | In JetBrains TeamCity before 2025.07.2 project isolation bypass was possible due to race condition | 17/09/2025 |
| CVE-2025-58335 | 높음7.5 | In JetBrains Junie before 252.284.66,
251.284.66,
243.284.66,
252.284.61,
251.284.61,
243.284.61,
252.284.50,
252.284.54,
251.284.54,
251.284.50,
243.284.54,
243.284.50 information disclosure was possible via search_project function | 28/08/2025 |
| CVE-2025-58334 | 높음8.8 | In JetBrains IDE Services before 2025.5.0.1086,
2025.4.2.2164 users without appropriate permissions could assign high-privileged role for themselves | 28/08/2025 |
| CVE-2025-57734 | 보통6.5 | In JetBrains TeamCity before 2025.07.1 aWS credentials were exposed in Docker script files | 20/08/2025 |
| CVE-2025-57733 | 낮음3.8 | In JetBrains TeamCity before 2025.07.1 sMTP injection was possible allowing modification of email content | 20/08/2025 |
| CVE-2025-57732 | 보통6.3 | In JetBrains TeamCity before 2025.07.1 privilege escalation was possible due to incorrect directory ownership | 20/08/2025 |