CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 中危6.5 |
In JetBrains Ktor before 1.4.1, HTTP request smuggling was possible. |
| 16/11/2020 |
| CVE-2020-27629 | 中危5.3 | In JetBrains TeamCity before 2020.1.5, secure dependency parameters could be not masked in depending builds when there are no internal artifacts. | 16/11/2020 |
| CVE-2020-27628 | 中危4.3 | In JetBrains TeamCity before 2020.1.5, the Guest user had access to audit records. | 16/11/2020 |
| CVE-2020-27626 | 中危5.3 | JetBrains YouTrack before 2020.3.5333 was vulnerable to SSRF. | 16/11/2020 |
| CVE-2020-27625 | 中危5.3 | In JetBrains YouTrack before 2020.3.888, notifications might have mentioned inaccessible issues. | 16/11/2020 |
| CVE-2020-27624 | 中危5.3 | JetBrains YouTrack before 2020.3.888 was vulnerable to SSRF. | 16/11/2020 |
| CVE-2020-25210 | 中危5.3 | In JetBrains YouTrack before 2020.3.7955, an attacker could access workflow rules without appropriate access grants. | 16/11/2020 |
| CVE-2020-25209 | 高危7.5 | In JetBrains YouTrack before 2020.3.6638, improper access control for some subresources leads to information disclosure via the REST API. | 16/11/2020 |
| CVE-2020-25207 | 严重9.8 | JetBrains ToolBox before version 1.18 is vulnerable to Remote Code Execution via a browser protocol handler. | 16/11/2020 |
| CVE-2020-25013 | 高危7.5 | JetBrains ToolBox before version 1.18 is vulnerable to a Denial of Service attack via a browser protocol handler. | 16/11/2020 |
| CVE-2020-24366 | 低危3.3 | Sensitive information could be disclosed in the JetBrains YouTrack application before 2020.2.0 for Android via application backups. | 16/11/2020 |
| CVE-2020-15822 | 高危7.3 | In JetBrains YouTrack before 2020.2.10514, SSRF is possible because URL filtering can be escaped. | 19/10/2020 |
| CVE-2020-24618 | 中危6.5 | In JetBrains YouTrack versions before 2020.3.4313, 2020.2.11008, 2020.1.11011, 2019.1.65514, 2019.2.65515, and 2019.3.65516, an attacker can retrieve an issue description without appropriate access. | 27/08/2020 |
| CVE-2020-15831 | 中危6.1 | JetBrains TeamCity before 2019.2.3 is vulnerable to reflected XSS in the administration UI. | 08/08/2020 |
| CVE-2020-15830 | 中危6.1 | JetBrains TeamCity before 2019.2.3 is vulnerable to stored XSS in the administration UI. | 08/08/2020 |
| CVE-2020-15829 | 中危5.3 | In JetBrains TeamCity before 2019.2.3, password parameters could be disclosed via build logs. | 08/08/2020 |