Vulnerabilities (CVE)

Filtered by vendor Jetbrains Subscribe
Total 398 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-47161 1 Jetbrains 1 Teamcity 2024-10-11 N/A 6.5 MEDIUM
In JetBrains TeamCity before 2024.07.3 password could be exposed via Sonar runner REST API
CVE-2024-47159 1 Jetbrains 1 Youtrack 2024-09-24 N/A 4.3 MEDIUM
In JetBrains YouTrack before 2024.3.44799 user without appropriate permissions could restore workflows attached to a project
CVE-2024-47160 1 Jetbrains 1 Youtrack 2024-09-24 N/A 5.3 MEDIUM
In JetBrains YouTrack before 2024.3.44799 access to global app config data without appropriate permissions was possible
CVE-2024-47162 1 Jetbrains 1 Youtrack 2024-09-24 N/A 5.3 MEDIUM
In JetBrains YouTrack before 2024.3.44799 token could be revealed on Imports page
CVE-2024-46970 1 Jetbrains 1 Intellij Idea 2024-09-20 N/A 6.1 MEDIUM
In JetBrains IntelliJ IDEA before 2024.1 hTML injection via the project name was possible
CVE-2024-39879 1 Jetbrains 1 Teamcity 2024-09-17 N/A 5.3 MEDIUM
In JetBrains TeamCity before 2024.03.3 application token could be exposed in EC2 Cloud Profile settings
CVE-2024-39878 1 Jetbrains 1 Teamcity 2024-09-17 N/A 5.3 MEDIUM
In JetBrains TeamCity before 2024.03.3 private key could be exposed via testing GitHub App Connection
CVE-2024-43114 1 Jetbrains 1 Teamcity 2024-09-11 N/A 7.8 HIGH
In JetBrains TeamCity before 2024.07.1 possible privilege escalation due to incorrect directory permissions
CVE-2024-38507 1 Jetbrains 1 Hub 2024-08-23 N/A 5.4 MEDIUM
In JetBrains Hub before 2024.2.34646 stored XSS via project description was possible
CVE-2024-38506 1 Jetbrains 1 Youtrack 2024-08-23 N/A 8.1 HIGH
In JetBrains YouTrack before 2024.2.34646 user without appropriate permissions could enable the auto-attach option for workflows
CVE-2024-38505 1 Jetbrains 1 Youtrack 2024-08-23 N/A 7.5 HIGH
In JetBrains YouTrack before 2024.2.34646 user access token was sent to the third-party site
CVE-2024-38504 1 Jetbrains 1 Youtrack 2024-08-23 N/A 5.3 MEDIUM
In JetBrains YouTrack before 2024.2.34646 the Guest User Account was enabled for attaching files to articles
CVE-2024-24938 1 Jetbrains 1 Teamcity 2024-08-22 N/A 5.3 MEDIUM
In JetBrains TeamCity before 2023.11.2 limited directory traversal was possible in the Kotlin DSL documentation
CVE-2024-43810 1 Jetbrains 1 Teamcity 2024-08-19 N/A 5.4 MEDIUM
In JetBrains TeamCity before 2024.07.1 reflected XSS was possible in the AWS Core plugin
CVE-2024-43809 1 Jetbrains 1 Teamcity 2024-08-19 N/A 6.1 MEDIUM
In JetBrains TeamCity before 2024.07.1 reflected XSS was possible on the agentPushPreset page
CVE-2024-43808 1 Jetbrains 1 Teamcity 2024-08-19 N/A 5.4 MEDIUM
In JetBrains TeamCity before 2024.07.1 self XSS was possible in the HashiCorp Vault plugin
CVE-2024-43807 1 Jetbrains 1 Teamcity 2024-08-19 N/A 5.4 MEDIUM
In JetBrains TeamCity before 2024.07.1 multiple stored XSS was possible on Clouds page
CVE-2024-41829 1 Jetbrains 1 Teamcity 2024-08-14 N/A 7.5 HIGH
In JetBrains TeamCity before 2024.07 an OAuth code for JetBrains Space could be stolen via Space Application connection
CVE-2024-41824 1 Jetbrains 1 Teamcity 2024-08-07 N/A 6.5 MEDIUM
In JetBrains TeamCity before 2024.07 parameters of the "password" type could leak into the build log in some specific cases
CVE-2024-41825 1 Jetbrains 1 Teamcity 2024-08-07 N/A 5.4 MEDIUM
In JetBrains TeamCity before 2024.07 stored XSS was possible on the Code Inspection tab