CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 12/03/2025 |
| CVE-2025-26493 | 中危6.1 | In JetBrains TeamCity before 2024.12.2 several DOM-based XSS were possible on the Code Inspection Report tab | 11/02/2025 |
| CVE-2025-26492 | 严重9.1 | In JetBrains TeamCity before 2024.12.2 improper Kubernetes connection settings could expose sensitive resources | 11/02/2025 |
| CVE-2025-23385 | 高危7.8 | In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, ETW Host Service before 16.43, Local Privilege Escalation via the ETW Host Service was possible | 28/01/2025 |
| CVE-2025-24461 | 中危6.5 | In JetBrains TeamCity before 2024.12.1 decryption of connection secrets without proper permissions was possible via Test Connection endpoint | 21/01/2025 |
| CVE-2025-24460 | 中危4.3 | In JetBrains TeamCity before 2024.12.1 improper access control allowed to see Projects’ names in the agent pool | 21/01/2025 |
| CVE-2025-24459 | 中危6.1 | In JetBrains TeamCity before 2024.12.1 reflected XSS was possible on the Vault Connection page | 21/01/2025 |
| CVE-2025-24458 | 高危7.8 | In JetBrains YouTrack before 2024.3.55417 account takeover was possible via spoofed email and Helpdesk integration | 21/01/2025 |
| CVE-2025-24457 | 中危5.5 | In JetBrains YouTrack before 2024.3.55417 permanent tokens could be exposed in logs | 21/01/2025 |
| CVE-2025-24456 | 高危8.8 | In JetBrains Hub before 2024.3.55417 privilege escalation was possible via LDAP authentication mapping | 21/01/2025 |
| CVE-2024-56356 | 高危7.1 | In JetBrains TeamCity before 2024.12 insecure XMLParser configuration could lead to potential XXE attack | 20/12/2024 |
| CVE-2024-56355 | 中危5.4 | In JetBrains TeamCity before 2024.12 missing Content-Type header in RemoteBuildLogController response could lead to XSS | 20/12/2024 |
| CVE-2024-56354 | 中危4.9 | In JetBrains TeamCity before 2024.12 password field value were accessible to users with view settings permission | 20/12/2024 |
| CVE-2024-56353 | 中危6.5 | In JetBrains TeamCity before 2024.12 backup file exposed user credentials and session cookies | 20/12/2024 |
| CVE-2024-56352 | 中危5.4 | In JetBrains TeamCity before 2024.12 stored XSS was possible via image name on the agent details page | 20/12/2024 |
| CVE-2024-56351 | 高危8.8 | In JetBrains TeamCity before 2024.12 access tokens were not revoked after removing user roles | 20/12/2024 |