CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| CVE-2019-18366 | 中危5.3 | In JetBrains TeamCity before 2019.1.2, secure values could be exposed to users with the "View build runtime parameters and data" permission. | 31/10/2019 |
| CVE-2019-18365 | 中危4.3 | In JetBrains TeamCity before 2019.1.4, reverse tabnabbing was possible on several pages. | 31/10/2019 |
| CVE-2019-18364 | 严重9.8 | In JetBrains TeamCity before 2019.1.4, insecure Java Deserialization could potentially allow remote code execution. | 31/10/2019 |
| CVE-2019-18363 | 中危5.3 | In JetBrains TeamCity before 2019.1.2, access could be gained to the history of builds of a deleted build configuration under some circumstances. | 31/10/2019 |
| CVE-2019-18362 | 中危5.3 | JetBrains MPS before 2019.2.2 exposed listening ports to the network. | 31/10/2019 |
| CVE-2019-18361 | 中危5.3 | JetBrains IntelliJ IDEA before 2019.2 allows local user privilege escalation, potentially leading to arbitrary code execution. | 31/10/2019 |
| CVE-2019-18360 | 中危5.3 | In JetBrains Hub versions earlier than 2019.1.11738, username enumeration was possible through password recovery. | 31/10/2019 |
| CVE-2019-16407 | 高危7.3 | JetBrains ReSharper installers for versions before 2019.2 had a DLL Hijacking vulnerability. | 02/10/2019 |
| CVE-2019-16171 | 中危6.1 | In JetBrains YouTrack through 2019.2.56594, stored XSS was found on the issue page. | 02/10/2019 |
| CVE-2019-15040 | 高危8.8 | JetBrains YouTrack versions before 2019.1 had a CSRF vulnerability on the settings page. | 02/10/2019 |
| CVE-2019-15037 | 中危6.1 | An issue was discovered in JetBrains TeamCity 2018.2.4. It had several XSS vulnerabilities on the settings pages. The issues were fixed in TeamCity 2019.1. | 02/10/2019 |
| CVE-2019-15036 | 高危7.2 | An issue was discovered in JetBrains TeamCity 2018.2.4. A TeamCity Project administrator could execute any command on the server machine. The issue was fixed in TeamCity 2018.2.5 and 2019.1. | 02/10/2019 |
| CVE-2019-14959 | 中危5.9 | JetBrains Toolbox before 1.15.5605 was resolving an internal URL via a cleartext http connection. | 02/10/2019 |
| CVE-2019-14958 | 高危7.5 | JetBrains PyCharm before 2019.2 was allocating a buffer of unknown size for one of the connection processes. In a very specific situation, it could lead to a remote invocation of an OOM error message because of Uncontrolled Memory Allocation. | 02/10/2019 |
| CVE-2019-14956 | 中危4.3 | JetBrains YouTrack before 2019.2.53938 was using incorrect settings, allowing a user without necessary permissions to get other project names. | 02/10/2019 |
| CVE-2019-12737 | 中危5.3 | UserHashedTableAuth in JetBrains Ktor framework before 1.2.0-rc uses a One-Way Hash with a Predictable Salt for storing user credentials. | 02/10/2019 |