CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
In JetBrains YouTrack Mobile before 2021.2, access token protection on iOS is incomplete. |
| 09/11/2021 |
| CVE-2021-43187 | 中危5.3 | In JetBrains YouTrack Mobile before 2021.2, the client-side cache on iOS could contain sensitive information. | 09/11/2021 |
| CVE-2021-43186 | 中危5.4 | JetBrains YouTrack before 2021.3.24402 is vulnerable to stored XSS. | 09/11/2021 |
| CVE-2021-43185 | 严重9.8 | JetBrains YouTrack before 2021.3.23639 is vulnerable to Host header injection. | 09/11/2021 |
| CVE-2021-43184 | 中危5.4 | In JetBrains YouTrack before 2021.3.21051, stored XSS is possible. | 09/11/2021 |
| CVE-2021-43183 | 严重9.8 | In JetBrains Hub before 2021.1.13690, the authentication throttling mechanism could be bypassed. | 09/11/2021 |
| CVE-2021-37554 | 中危4.3 | In JetBrains YouTrack before 2021.3.21051, a user could see boards without having corresponding permissions. | 06/08/2021 |
| CVE-2021-37553 | 高危7.5 | In JetBrains YouTrack before 2021.2.16363, an insecure PRNG was used. | 06/08/2021 |
| CVE-2021-37552 | 中危5.4 | In JetBrains YouTrack before 2021.2.17925, stored XSS was possible. | 06/08/2021 |
| CVE-2021-37551 | 中危5.3 | In JetBrains YouTrack before 2021.2.16363, system user passwords were hashed with SHA-256. | 06/08/2021 |
| CVE-2021-37550 | 高危7.5 | In JetBrains YouTrack before 2021.2.16363, time-unsafe comparisons were used. | 06/08/2021 |
| CVE-2021-37549 | 严重9.1 | In JetBrains YouTrack before 2021.1.11111, sandboxing in workflows was insufficient. | 06/08/2021 |
| CVE-2021-37548 | 高危7.5 | In JetBrains TeamCity before 2021.1, passwords in cleartext sometimes could be stored in VCS. | 06/08/2021 |
| CVE-2021-37547 | 中危5.3 | In JetBrains TeamCity before 2020.2.4, insufficient checks during file uploading were made. | 06/08/2021 |
| CVE-2021-37546 | 中危5.3 | In JetBrains TeamCity before 2021.1, an insecure key generation mechanism for encrypted properties was used. | 06/08/2021 |
| CVE-2021-37545 | 高危7.5 | In JetBrains TeamCity before 2021.1.1, insufficient authentication checks for agent requests were made. | 06/08/2021 |