Vulnerabilities (CVE)

Filtered by vendor Jetbrains Subscribe
Total 396 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-46970 1 Jetbrains 1 Intellij Idea 2024-09-20 N/A 6.1 MEDIUM
In JetBrains IntelliJ IDEA before 2024.1 hTML injection via the project name was possible
CVE-2024-39879 1 Jetbrains 1 Teamcity 2024-09-17 N/A 5.3 MEDIUM
In JetBrains TeamCity before 2024.03.3 application token could be exposed in EC2 Cloud Profile settings
CVE-2024-39878 1 Jetbrains 1 Teamcity 2024-09-17 N/A 5.3 MEDIUM
In JetBrains TeamCity before 2024.03.3 private key could be exposed via testing GitHub App Connection
CVE-2024-43114 1 Jetbrains 1 Teamcity 2024-09-11 N/A 7.8 HIGH
In JetBrains TeamCity before 2024.07.1 possible privilege escalation due to incorrect directory permissions
CVE-2024-38507 1 Jetbrains 1 Hub 2024-08-23 N/A 5.4 MEDIUM
In JetBrains Hub before 2024.2.34646 stored XSS via project description was possible
CVE-2024-38506 1 Jetbrains 1 Youtrack 2024-08-23 N/A 8.1 HIGH
In JetBrains YouTrack before 2024.2.34646 user without appropriate permissions could enable the auto-attach option for workflows
CVE-2024-38505 1 Jetbrains 1 Youtrack 2024-08-23 N/A 7.5 HIGH
In JetBrains YouTrack before 2024.2.34646 user access token was sent to the third-party site
CVE-2024-38504 1 Jetbrains 1 Youtrack 2024-08-23 N/A 5.3 MEDIUM
In JetBrains YouTrack before 2024.2.34646 the Guest User Account was enabled for attaching files to articles
CVE-2024-24938 1 Jetbrains 1 Teamcity 2024-08-22 N/A 5.3 MEDIUM
In JetBrains TeamCity before 2023.11.2 limited directory traversal was possible in the Kotlin DSL documentation
CVE-2024-43810 1 Jetbrains 1 Teamcity 2024-08-19 N/A 5.4 MEDIUM
In JetBrains TeamCity before 2024.07.1 reflected XSS was possible in the AWS Core plugin
CVE-2024-43809 1 Jetbrains 1 Teamcity 2024-08-19 N/A 6.1 MEDIUM
In JetBrains TeamCity before 2024.07.1 reflected XSS was possible on the agentPushPreset page
CVE-2024-43808 1 Jetbrains 1 Teamcity 2024-08-19 N/A 5.4 MEDIUM
In JetBrains TeamCity before 2024.07.1 self XSS was possible in the HashiCorp Vault plugin
CVE-2024-43807 1 Jetbrains 1 Teamcity 2024-08-19 N/A 5.4 MEDIUM
In JetBrains TeamCity before 2024.07.1 multiple stored XSS was possible on Clouds page
CVE-2024-41829 1 Jetbrains 1 Teamcity 2024-08-14 N/A 7.5 HIGH
In JetBrains TeamCity before 2024.07 an OAuth code for JetBrains Space could be stolen via Space Application connection
CVE-2024-41824 1 Jetbrains 1 Teamcity 2024-08-07 N/A 6.5 MEDIUM
In JetBrains TeamCity before 2024.07 parameters of the "password" type could leak into the build log in some specific cases
CVE-2024-41825 1 Jetbrains 1 Teamcity 2024-08-07 N/A 5.4 MEDIUM
In JetBrains TeamCity before 2024.07 stored XSS was possible on the Code Inspection tab
CVE-2024-41826 1 Jetbrains 1 Teamcity 2024-08-07 N/A 4.8 MEDIUM
In JetBrains TeamCity before 2024.07 stored XSS was possible on Show Connection page
CVE-2024-41827 1 Jetbrains 1 Teamcity 2024-08-07 N/A 9.8 CRITICAL
In JetBrains TeamCity before 2024.07 access tokens could continue working after deletion or expiration
CVE-2024-41828 1 Jetbrains 1 Teamcity 2024-08-07 N/A 6.5 MEDIUM
In JetBrains TeamCity before 2024.07 comparison of authorization tokens took non-constant time
CVE-2024-37051 1 Jetbrains 13 Aqua, Clion, Datagrip and 10 more 2024-07-05 N/A 7.5 HIGH
GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion 2023.1.7, 2023.2.4, 2023.3.5, 2024.1.3, 2024.2 EAP2; DataGrip 2023.1.3, 2023.2.4, 2023.3.5, 2024.1.4; DataSpell 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.2, 2024.2 EAP1; GoLand 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; MPS 2023.2.1, 2023.3.1, 2024.1 EAP2; PhpStorm 2023.1.6, 2023.2.6, 2023.3.7, 2024.1.3, 2024.2 EAP3; PyCharm 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.3, 2024.2 EAP2; Rider 2023.1.7, 2023.2.5, 2023.3.6, 2024.1.3; RubyMine 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP4; RustRover 2024.1.1; WebStorm 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.4