Filtered by vendor Jetbrains
Subscriptions
Total
469 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2024-27199 | 1 Jetbrains | 1 Teamcity | 2025-05-30 | 7.3 High |
| In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible | ||||
| CVE-2025-47851 | 1 Jetbrains | 1 Teamcity | 2025-05-28 | 4.8 Medium |
| In JetBrains TeamCity before 2025.03.2 stored XSS via GitHub Checks Webhook was possible | ||||
| CVE-2025-47852 | 1 Jetbrains | 1 Teamcity | 2025-05-28 | 4.8 Medium |
| In JetBrains TeamCity before 2025.03.2 stored XSS via YouTrack integration was possible | ||||
| CVE-2025-47853 | 1 Jetbrains | 1 Teamcity | 2025-05-28 | 4.8 Medium |
| In JetBrains TeamCity before 2025.03.2 stored XSS via Jira integration was possible | ||||
| CVE-2025-47854 | 1 Jetbrains | 1 Teamcity | 2025-05-28 | 4.3 Medium |
| In JetBrains TeamCity before 2025.03.2 open redirect was possible on editing VCS Root page | ||||
| CVE-2025-26492 | 1 Jetbrains | 1 Teamcity | 2025-05-16 | 7.7 High |
| In JetBrains TeamCity before 2024.12.2 improper Kubernetes connection settings could expose sensitive resources | ||||
| CVE-2025-26493 | 1 Jetbrains | 1 Teamcity | 2025-05-16 | 4.6 Medium |
| In JetBrains TeamCity before 2024.12.2 several DOM-based XSS were possible on the Code Inspection Report tab | ||||
| CVE-2025-31139 | 1 Jetbrains | 1 Teamcity | 2025-05-16 | 4.3 Medium |
| In JetBrains TeamCity before 2025.03 base64 encoded password could be exposed in build log | ||||
| CVE-2025-31140 | 1 Jetbrains | 1 Teamcity | 2025-05-16 | 4.6 Medium |
| In JetBrains TeamCity before 2025.03 stored XSS was possible on Cloud Profiles page | ||||
| CVE-2025-31141 | 1 Jetbrains | 1 Teamcity | 2025-05-16 | 2.7 Low |
| In JetBrains TeamCity before 2025.03 exception could lead to credential leakage on Cloud Profiles page | ||||
| CVE-2025-46432 | 1 Jetbrains | 1 Teamcity | 2025-05-16 | 4.3 Medium |
| In JetBrains TeamCity before 2025.03.1 base64-encoded credentials could be exposed in build logs | ||||
| CVE-2025-46433 | 1 Jetbrains | 1 Teamcity | 2025-05-16 | 4.9 Medium |
| In JetBrains TeamCity before 2025.03.1 improper path validation in loggingPreset parameter was possible | ||||
| CVE-2025-46618 | 1 Jetbrains | 1 Teamcity | 2025-05-16 | 3.5 Low |
| In JetBrains TeamCity before 2025.03.1 stored XSS was possible on Data Directory tab | ||||
| CVE-2024-24940 | 1 Jetbrains | 1 Intellij Idea | 2025-05-15 | 2.8 Low |
| In JetBrains IntelliJ IDEA before 2023.3.3 path traversal was possible when unpacking archives | ||||
| CVE-2022-44624 | 1 Jetbrains | 1 Teamcity | 2025-05-02 | 6.5 Medium |
| In JetBrains TeamCity version before 2022.10, Password parameters could be exposed in the build log if they contained special characters | ||||
| CVE-2022-44646 | 1 Jetbrains | 1 Teamcity | 2025-05-02 | 2.2 Low |
| In JetBrains TeamCity version before 2022.10, no audit items were added upon editing a user's settings | ||||
| CVE-2022-44622 | 1 Jetbrains | 1 Teamcity | 2025-05-02 | 2.7 Low |
| In JetBrains TeamCity version between 2021.2 and 2022.10 access permissions for secure token health items were excessive | ||||
| CVE-2022-44623 | 1 Jetbrains | 1 Teamcity | 2025-04-30 | 6.5 Medium |
| In JetBrains TeamCity version before 2022.10, Project Viewer could see scrambled secure values in the MetaRunner settings | ||||
| CVE-2022-45471 | 1 Jetbrains | 1 Hub | 2025-04-28 | 3.5 Low |
| In JetBrains Hub before 2022.3.15181 Throttling was missed when sending emails to a particular email address | ||||
| CVE-2025-43015 | 1 Jetbrains | 1 Rubymine | 2025-04-25 | 8.3 High |
| In JetBrains RubyMine before 2025.1 remote Interpreter overwrote ports to listen on all interfaces | ||||