CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 29/05/2024 |
| CVE-2024-36365 | 高危8.1 | In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, 2024.03.2 a third-party agent could impersonate a cloud agent | 29/05/2024 |
| CVE-2024-36364 | 中危6.5 | In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 improper access control in Pull Requests and Commit status publisher build features was possible | 29/05/2024 |
| CVE-2024-36363 | 中危5.4 | In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 several Stored XSS in code inspection reports were possible | 29/05/2024 |
| CVE-2024-36362 | 中危6.5 | In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, 2024.03.2 path traversal allowing to read files from server was possible | 29/05/2024 |
| CVE-2024-35302 | 中危6.1 | In JetBrains TeamCity before 2023.11 stored XSS during restore from backup was possible | 16/05/2024 |
| CVE-2024-35301 | 中危5.5 | In JetBrains TeamCity before 2024.03.1 commit status publisher didn't check project scope of the GitHub App token | 16/05/2024 |
| CVE-2024-35300 | 中危6.1 | In JetBrains TeamCity between 2024.03 and 2024.03.1 several stored XSS in the available updates page were possible | 16/05/2024 |
| CVE-2024-35299 | 高危7.5 | In JetBrains YouTrack before 2024.1.29548 the SMTPS protocol communication lacked proper certificate hostname validation | 16/05/2024 |
| CVE-2024-31140 | 中危4.9 | In JetBrains TeamCity before 2024.03 server administrators could remove arbitrary files from the server by installing tools | 28/03/2024 |
| CVE-2024-31139 | 高危8.1 | In JetBrains TeamCity before 2024.03 xXE was possible in the Maven build steps detector | 28/03/2024 |
| CVE-2024-31138 | 中危5.4 | In JetBrains TeamCity before 2024.03 xSS was possible via Agent Distribution settings | 28/03/2024 |
| CVE-2024-31137 | 中危6.1 | In JetBrains TeamCity before 2024.03 reflected XSS was possible via Space connection configuration | 28/03/2024 |
| CVE-2024-31136 | 高危7.4 | In JetBrains TeamCity before 2024.03 2FA could be bypassed by providing a special URL parameter | 28/03/2024 |
| CVE-2024-31135 | 中危6.1 | In JetBrains TeamCity before 2024.03 open redirect was possible on the login page | 28/03/2024 |
| CVE-2024-31134 | 中危6.5 | In JetBrains TeamCity before 2024.03 authenticated users without administrative permissions could register other users when self-registration was disabled | 28/03/2024 |
| CVE-2024-29880 | 高危7.8 | In JetBrains TeamCity before 2023.11 users with access to the agent machine might obtain permissions of the user running the agent process | 21/03/2024 |