CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 高危7.5 |
In JetBrains YouTrack before 2020.4.6808, the YouTrack administrator wasn't able to access attachments. |
| 03/02/2021 |
| CVE-2021-25768 | 中危5.3 | In JetBrains YouTrack before 2020.4.4701, permissions for attachments actions were checked improperly. | 03/02/2021 |
| CVE-2021-25767 | 中危5.3 | In JetBrains YouTrack before 2020.6.1767, an issue's existence could be disclosed via YouTrack command execution. | 03/02/2021 |
| CVE-2021-25766 | 中危5.3 | In JetBrains YouTrack before 2020.4.4701, improper resource access checks were made. | 03/02/2021 |
| CVE-2021-25765 | 高危8.8 | In JetBrains YouTrack before 2020.4.4701, CSRF via attachment upload was possible. | 03/02/2021 |
| CVE-2021-25763 | 中危5.3 | In JetBrains Ktor before 1.4.2, weak cipher suites were enabled by default. | 03/02/2021 |
| CVE-2021-25762 | 中危5.3 | In JetBrains Ktor before 1.4.3, HTTP Request Smuggling was possible. | 03/02/2021 |
| CVE-2021-25761 | 中危5.3 | In JetBrains Ktor before 1.5.0, a birthday attack on SessionStorage key was possible. | 03/02/2021 |
| CVE-2021-25760 | 中危5.3 | In JetBrains Hub before 2020.1.12669, information disclosure via the public API was possible. | 03/02/2021 |
| CVE-2021-25759 | 中危6.5 | In JetBrains Hub before 2020.1.12629, an authenticated user can delete 2FA settings of any other user. | 03/02/2021 |
| CVE-2021-25758 | 高危7.8 | In JetBrains IntelliJ IDEA before 2020.3, potentially insecure deserialization of the workspace model could lead to local code execution. | 03/02/2021 |
| CVE-2021-25757 | 中危6.1 | In JetBrains Hub before 2020.1.12629, an open redirect was possible. | 03/02/2021 |
| CVE-2021-25756 | 中危5.3 | In JetBrains IntelliJ IDEA before 2020.2, HTTP links were used for several remote repositories instead of HTTPS. | 03/02/2021 |
| CVE-2021-25755 | 低危2.5 | In JetBrains Code With Me before 2020.3, an attacker on the local network, knowing a session ID, could get access to the encrypted traffic. | 03/02/2021 |
| CVE-2020-35667 | 高危7.5 | JetBrains TeamCity Plugin before 2020.2.85695 SSRF. Vulnerability that could potentially expose user credentials. | 03/02/2021 |
| CVE-2020-29582 | 中危5.3 | In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such files and list directories due to insecure permissions. | 03/02/2021 |