Vulnerabilities (CVE)

Filtered by vendor Jetbrains Subscribe
Total 396 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-29815 1 Jetbrains 1 Intellij Idea 2024-02-28 4.6 MEDIUM 6.7 MEDIUM
In JetBrains IntelliJ IDEA before 2022.1 local code execution via workspace settings was possible
CVE-2021-43196 1 Jetbrains 1 Teamcity 2024-02-28 5.0 MEDIUM 7.5 HIGH
In JetBrains TeamCity before 2021.1, information disclosure via the Docker Registry connection dialog is possible.
CVE-2021-43190 2 Google, Jetbrains 2 Android, Youtrack Mobile 2024-02-28 5.0 MEDIUM 5.3 MEDIUM
In JetBrains YouTrack Mobile before 2021.2, task hijacking on Android is possible.
CVE-2021-43183 1 Jetbrains 1 Hub 2024-02-28 7.5 HIGH 9.8 CRITICAL
In JetBrains Hub before 2021.1.13690, the authentication throttling mechanism could be bypassed.
CVE-2021-43181 1 Jetbrains 1 Hub 2024-02-28 4.3 MEDIUM 6.1 MEDIUM
In JetBrains Hub before 2021.1.13690, stored XSS is possible.
CVE-2021-43198 1 Jetbrains 1 Teamcity 2024-02-28 3.5 LOW 5.4 MEDIUM
In JetBrains TeamCity before 2021.1.2, stored XSS is possible.
CVE-2021-43193 1 Jetbrains 1 Teamcity 2024-02-28 7.5 HIGH 9.8 CRITICAL
In JetBrains TeamCity before 2021.1.2, remote code execution via the agent push functionality is possible.
CVE-2021-43180 1 Jetbrains 1 Hub 2024-02-28 5.0 MEDIUM 7.5 HIGH
In JetBrains Hub before 2021.1.13690, information disclosure via avatar metadata is possible.
CVE-2021-43195 1 Jetbrains 1 Teamcity 2024-02-28 5.0 MEDIUM 5.3 MEDIUM
In JetBrains TeamCity before 2021.1.2, some HTTP security headers were missing.
CVE-2021-43186 1 Jetbrains 1 Youtrack 2024-02-28 3.5 LOW 5.4 MEDIUM
JetBrains YouTrack before 2021.3.24402 is vulnerable to stored XSS.
CVE-2021-43192 2 Apple, Jetbrains 2 Iphone Os, Youtrack Mobile 2024-02-28 5.0 MEDIUM 5.3 MEDIUM
In JetBrains YouTrack Mobile before 2021.2, iOS URL scheme hijacking is possible.
CVE-2021-43189 2 Google, Jetbrains 2 Android, Youtrack Mobile 2024-02-28 7.5 HIGH 7.3 HIGH
In JetBrains YouTrack Mobile before 2021.2, access token protection on Android is incomplete.
CVE-2021-43203 1 Jetbrains 1 Ktor 2024-02-28 5.0 MEDIUM 7.5 HIGH
In JetBrains Ktor before 1.6.4, nonce verification during the OAuth2 authentication process is implemented improperly.
CVE-2021-43187 2 Apple, Jetbrains 2 Iphone Os, Youtrack Mobile 2024-02-28 5.0 MEDIUM 5.3 MEDIUM
In JetBrains YouTrack Mobile before 2021.2, the client-side cache on iOS could contain sensitive information.
CVE-2021-43197 1 Jetbrains 1 Teamcity 2024-02-28 4.3 MEDIUM 6.1 MEDIUM
In JetBrains TeamCity before 2021.1.2, email notifications could include unescaped HTML for XSS.
CVE-2021-43194 1 Jetbrains 1 Teamcity 2024-02-28 5.0 MEDIUM 5.3 MEDIUM
In JetBrains TeamCity before 2021.1.2, user enumeration was possible.
CVE-2021-43200 1 Jetbrains 1 Teamcity 2024-02-28 7.5 HIGH 9.8 CRITICAL
In JetBrains TeamCity before 2021.1.2, permission checks in the Agent Push functionality were insufficient.
CVE-2021-43184 1 Jetbrains 1 Youtrack 2024-02-28 3.5 LOW 5.4 MEDIUM
In JetBrains YouTrack before 2021.3.21051, stored XSS is possible.
CVE-2021-43202 1 Jetbrains 1 Teamcity 2024-02-28 7.5 HIGH 9.8 CRITICAL
In JetBrains TeamCity before 2021.1.3, the X-Frame-Options header is missing in some cases.
CVE-2021-43182 1 Jetbrains 1 Hub 2024-02-28 5.0 MEDIUM 7.5 HIGH
In JetBrains Hub before 2021.1.13415, a DoS via user information is possible.