CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 高危7.5 |
In JetBrains IntelliJ IDEA before 2025.2 credentials disclosure was possible via remote reference |
| 20/08/2025 |
| CVE-2025-54538 | 中危5.5 | In JetBrains TeamCity before 2025.07 password exposure was possible via command line in the "hg pull" command | 28/07/2025 |
| CVE-2025-54537 | 中危5.5 | In JetBrains TeamCity before 2025.07 user credentials were stored in plain text in memory snapshots | 28/07/2025 |
| CVE-2025-54536 | 高危8.8 | In JetBrains TeamCity before 2025.07 a CSRF was possible on GraphQL endpoint | 28/07/2025 |
| CVE-2025-54535 | 高危7.5 | In JetBrains TeamCity before 2025.07 password reset and email verification tokens were using weak hashing algorithms | 28/07/2025 |
| CVE-2025-54534 | 中危4.8 | In JetBrains TeamCity before 2025.07 reflected XSS was possible on the agentpushPreset page | 28/07/2025 |
| CVE-2025-54533 | 中危4.3 | In JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via VCS configuration | 28/07/2025 |
| CVE-2025-54532 | 中危4.3 | In JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via snapshot dependencies | 28/07/2025 |
| CVE-2025-54531 | 严重9.4 | In JetBrains TeamCity before 2025.07 path traversal was possible via plugin unpacking on Windows | 28/07/2025 |
| CVE-2025-54530 | 严重9.8 | In JetBrains TeamCity before 2025.07 privilege escalation was possible due to incorrect directory permissions | 28/07/2025 |
| CVE-2025-54529 | 高危7.5 | In JetBrains TeamCity before 2025.07 a CSRF was possible in external OAuth login integration | 28/07/2025 |
| CVE-2025-54528 | 高危8.8 | In JetBrains TeamCity before 2025.07 a CSRF was possible in GitHub App connection flow | 28/07/2025 |
| CVE-2025-54527 | 中危6.1 | In JetBrains YouTrack before 2025.2.86935,
2025.2.87167,
2025.3.87341,
2025.3.87344 improper iframe configuration in widget sandbox allows popups to bypass security restrictions | 28/07/2025 |
| CVE-2025-53959 | 高危7.6 | In JetBrains YouTrack before 2025.2.86069,
2024.3.85077,
2025.1.86199 email spoofing via an administrative API was possible | 15/07/2025 |
| CVE-2025-52879 | 中危4.8 | In JetBrains TeamCity before 2025.03.3 reflected XSS in the NPM Registry integration was possible | 23/06/2025 |
| CVE-2025-52878 | 中危4.3 | In JetBrains TeamCity before 2025.03.3 usernames were exposed to the users without proper permissions | 23/06/2025 |