CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 中危5.3 |
In JetBrains TeamCity before 2024.03.3 private key could be exposed via testing GitHub App Connection |
| 01/07/2024 |
| CVE-2024-38507 | 中危5.4 | In JetBrains Hub before 2024.2.34646 stored XSS via project description was possible | 18/06/2024 |
| CVE-2024-38506 | 高危8.1 | In JetBrains YouTrack before 2024.2.34646 user without appropriate permissions could enable the auto-attach option for workflows | 18/06/2024 |
| CVE-2024-38505 | 高危7.5 | In JetBrains YouTrack before 2024.2.34646 user access token was sent to the third-party site | 18/06/2024 |
| CVE-2024-38504 | 中危5.3 | In JetBrains YouTrack before 2024.2.34646 the Guest User Account was enabled for attaching files to articles | 18/06/2024 |
| CVE-2024-37051 | 高危7.5 | GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion 2023.1.7, 2023.2.4, 2023.3.5, 2024.1.3, 2024.2 EAP2; DataGrip 2023.1.3, 2023.2.4, 2023.3.5, 2024.1.4; DataSpell 2023.1.6 | 10/06/2024 |
| CVE-2024-36470 | 严重9.8 | In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 authentication bypass was possible in specific edge cases | 29/05/2024 |
| CVE-2024-36378 | 高危7.5 | In JetBrains TeamCity before 2024.03.2 server was susceptible to DoS attacks with incorrect auth tokens | 29/05/2024 |
| CVE-2024-36377 | 高危8.1 | In JetBrains TeamCity before 2024.03.2 certain TeamCity API endpoints did not check user permissions | 29/05/2024 |
| CVE-2024-36376 | 高危8.1 | In JetBrains TeamCity before 2024.03.2 users could perform actions that should not be available to them based on their permissions | 29/05/2024 |
| CVE-2024-36375 | 中危5.3 | In JetBrains TeamCity before 2024.03.2 technical information regarding TeamCity server could be exposed | 29/05/2024 |
| CVE-2024-36374 | 中危5.4 | In JetBrains TeamCity before 2024.03.2 stored XSS via build step settings was possible | 29/05/2024 |
| CVE-2024-36373 | 中危5.4 | In JetBrains TeamCity before 2024.03.2 several stored XSS in untrusted builds settings were possible | 29/05/2024 |
| CVE-2024-36372 | 中危6.1 | In JetBrains TeamCity before 2023.05.6 reflected XSS on the subscriptions page was possible | 29/05/2024 |
| CVE-2024-36371 | 中危5.4 | In JetBrains TeamCity before 2023.05.6, 2023.11.5 stored XSS in Commit status publisher was possible | 29/05/2024 |
| CVE-2024-36370 | 中危5.4 | In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via OAuth connection settings was possible | 29/05/2024 |