CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 中危6.1 |
In JetBrains TeamCity before 2023.05.3 reflected XSS was possible during user registration |
| 25/08/2023 |
| CVE-2023-41249 | 中危6.1 | In JetBrains TeamCity before 2023.05.3 reflected XSS was possible during copying Build Step | 25/08/2023 |
| CVE-2023-41248 | 中危5.4 | In JetBrains TeamCity before 2023.05.3 stored XSS was possible during Cloud Profiles configuration | 25/08/2023 |
| CVE-2023-39261 | 高危7.8 | In JetBrains IntelliJ IDEA before 2023.2 plugin for Space was requesting excessive permissions | 26/07/2023 |
| CVE-2023-39175 | 中危6.1 | In JetBrains TeamCity before 2023.05.2 reflected XSS via GitHub integration was possible | 25/07/2023 |
| CVE-2023-39174 | 高危7.5 | In JetBrains TeamCity before 2023.05.2 a ReDoS attack was possible via integration with issue trackers | 25/07/2023 |
| CVE-2023-39173 | 高危8.8 | In JetBrains TeamCity before 2023.05.2 a token with limited permissions could be used to gain full account access | 25/07/2023 |
| CVE-2023-38069 | 低危3.3 | In JetBrains IntelliJ IDEA before 2023.1.4 license dialog could be suppressed in certain cases | 12/07/2023 |
| CVE-2023-38068 | 高危7.3 | In JetBrains YouTrack before 2023.1.16597 captcha was not properly validated for Helpdesk forms | 12/07/2023 |
| CVE-2023-38067 | 中危6.5 | In JetBrains TeamCity before 2023.05.1 build parameters of the "password" type could be written to the agent log | 12/07/2023 |
| CVE-2023-38066 | 中危6.1 | In JetBrains TeamCity before 2023.05.1 reflected XSS via the Referer header was possible during artifact downloads | 12/07/2023 |
| CVE-2023-38065 | 中危5.4 | In JetBrains TeamCity before 2023.05.1 stored XSS while viewing the build log was possible | 12/07/2023 |
| CVE-2023-38064 | 中危6.5 | In JetBrains TeamCity before 2023.05.1 build chain parameters of the "password" type could be written to the agent log | 12/07/2023 |
| CVE-2023-38063 | 中危5.4 | In JetBrains TeamCity before 2023.05.1 stored XSS while running custom builds was possible | 12/07/2023 |
| CVE-2023-38062 | 中危6.5 | In JetBrains TeamCity before 2023.05.1 parameters of the "password" type could be shown in the UI in certain composite build configurations | 12/07/2023 |
| CVE-2023-38061 | 中危5.4 | In JetBrains TeamCity before 2023.05.1 stored XSS when using a custom theme was possible | 12/07/2023 |