Total
168 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2024-47949 | 1 Jetbrains | 1 Teamcity | 2024-10-11 | N/A | 7.5 HIGH |
In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary location | |||||
CVE-2024-47948 | 1 Jetbrains | 1 Teamcity | 2024-10-11 | N/A | 7.5 HIGH |
In JetBrains TeamCity before 2024.07.3 path traversal leading to information disclosure was possible via server backups | |||||
CVE-2024-47161 | 1 Jetbrains | 1 Teamcity | 2024-10-11 | N/A | 6.5 MEDIUM |
In JetBrains TeamCity before 2024.07.3 password could be exposed via Sonar runner REST API | |||||
CVE-2024-43114 | 1 Jetbrains | 1 Teamcity | 2024-09-11 | N/A | 7.8 HIGH |
In JetBrains TeamCity before 2024.07.1 possible privilege escalation due to incorrect directory permissions | |||||
CVE-2024-43810 | 1 Jetbrains | 1 Teamcity | 2024-08-19 | N/A | 5.4 MEDIUM |
In JetBrains TeamCity before 2024.07.1 reflected XSS was possible in the AWS Core plugin | |||||
CVE-2024-43809 | 1 Jetbrains | 1 Teamcity | 2024-08-19 | N/A | 6.1 MEDIUM |
In JetBrains TeamCity before 2024.07.1 reflected XSS was possible on the agentPushPreset page | |||||
CVE-2024-43808 | 1 Jetbrains | 1 Teamcity | 2024-08-19 | N/A | 5.4 MEDIUM |
In JetBrains TeamCity before 2024.07.1 self XSS was possible in the HashiCorp Vault plugin | |||||
CVE-2024-43807 | 1 Jetbrains | 1 Teamcity | 2024-08-19 | N/A | 5.4 MEDIUM |
In JetBrains TeamCity before 2024.07.1 multiple stored XSS was possible on Clouds page |