VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

Severity

严重高危中危低危Exploited in the wild (KEV)

Language / ecosystem

JavaScript / TypeScript (npm)Python (PyPI)PHP (Packagist)Java / Kotlin (Maven)GoRuby (RubyGems).NET (NuGet)

Stack

JavaScript / Node.js

Next.jsNuxtReactAngularSvelte / SvelteKitAstroRemixViteExpressNestJSFastifyNode.jsaxios

PHP

LaravelSymfonyPHP

Python

DjangoFlaskFastAPI / Starlette

Ruby

Ruby on Rails

Java

Spring

GinFiber

CMS

WordPressWooCommerceDrupalGhostStrapi

Servers & databases

nginxApache HTTP ServerMySQLPostgreSQLRedis

Vendor1

jetbrainsoracleibmgoogleadobemicrosoftmozillaciscoapacheappleredhatjenkinshpAll vendors →

jetbrains products

teamcity 283youtrack 157intellij idea 77hub 37ktor 21pycharm 12toolbox 11rider 9webstorm 9goland 8kotlin 7phpstorm 6youtrack mobile 6upsource 5

402,942 vulnerabilities · 1,766 actively exploited (CISA KEV)

jetbrains ✕Clear filters

661 results

ID	Severity	Summary	Published
CVE-2024-49580	中危5.3	In JetBrains Ktor before 2.3.13 improper caching in HttpCache Plugin could lead to response information disclosure	17/10/2024
CVE-2024-49579	中危6.1	In JetBrains YouTrack before 2024.3.47197 insecure plugin iframe allowed arbitrary JavaScript execution and unauthorized API requests	17/10/2024
CVE-2024-48902	中危5.4	In JetBrains YouTrack before 2024.3.46677 improper access control allowed users with project update permission to delete applications via API	10/10/2024
CVE-2024-47951	中危5.4	In JetBrains TeamCity before 2024.07.3 stored XSS was possible via server global settings