CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 06/03/2024 |
| CVE-2024-28173 | 中危4.3 | In JetBrains TeamCity between 2023.11 and 2023.11.4 custom build parameters of the "password" type could be disclosed | 06/03/2024 |
| CVE-2024-27199KEV | 高危7.3 | In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible | 04/03/2024 |
| CVE-2024-27198KEV | 严重9.8 | In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible | 04/03/2024 |
| CVE-2024-24943 | 中危5.5 | In JetBrains Toolbox App before 2.2 a DoS attack was possible via a malicious SVG image | 06/02/2024 |
| CVE-2024-24942 | 中危5.3 | In JetBrains TeamCity before 2023.11.3 path traversal allowed reading data within JAR archives | 06/02/2024 |
| CVE-2024-24941 | 中危5.3 | In JetBrains IntelliJ IDEA before 2023.3.3 a plugin for JetBrains Space was able to send an authentication token to an inappropriate URL | 06/02/2024 |
| CVE-2024-24940 | 中危4.3 | In JetBrains IntelliJ IDEA before 2023.3.3 path traversal was possible when unpacking archives | 06/02/2024 |
| CVE-2024-24939 | 中危5.3 | In JetBrains Rider before 2023.3.3 logging of environment variables containing secret values was possible | 06/02/2024 |
| CVE-2024-24938 | 中危5.3 | In JetBrains TeamCity before 2023.11.2 limited directory traversal was possible in the Kotlin DSL documentation | 06/02/2024 |
| CVE-2024-24937 | 中危5.4 | In JetBrains TeamCity before 2023.11.2 stored XSS via agent distribution was possible | 06/02/2024 |
| CVE-2024-24936 | 中危5.3 | In JetBrains TeamCity before 2023.11.2 access control at the S3 Artifact Storage plugin endpoint was missed | 06/02/2024 |
| CVE-2024-23917 | 严重9.8 | In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible | 06/02/2024 |
| CVE-2024-22370 | 中危5.4 | In JetBrains YouTrack before 2023.3.22666 stored XSS via markdown was possible | 09/01/2024 |
| CVE-2023-51655 | 严重9.8 | In JetBrains IntelliJ IDEA before 2023.3.2 code execution was possible in Untrusted Project mode via a malicious plugin repository specified in the project configuration | 21/12/2023 |
| CVE-2023-50871 | 中危4.3 | In JetBrains YouTrack before 2023.3.22268 authorization check for inline comments inside thread replies was missed | 15/12/2023 |
| CVE-2023-50870 | 高危8.8 | In JetBrains TeamCity before 2023.11.1 a CSRF on login was possible | 15/12/2023 |