Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 791

Export CSV
CVE-2022-28651

In JetBrains IntelliJ IDEA before 2021.3.3 it was possible to get passwords from protected fields

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Intellij Idea
CVE-2022-28650

In JetBrains YouTrack before 2022.1.43700 it was possible to inject JavaScript into Markdown in the YouTrack Classic UI

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Youtrack
CVE-2022-28649

In JetBrains YouTrack before 2022.1.43563 it was possible to include an iframe from a third-party domain in the issue description

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Youtrack
CVE-2022-28648

In JetBrains YouTrack before 2022.1.43563 HTML code from the issue description was being rendered

CVSS 3.1 · 5.7 Medium EPSS 1.4% KEV · Not listed
Vendors
Jetbrains
Products
Youtrack
CVE-2022-25264

In JetBrains TeamCity before 2021.2.3, environment variables of the "password" type could be logged in some cases.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Teamcity
CVE-2022-25263

JetBrains TeamCity before 2021.2.3 was vulnerable to OS command injection in the Agent Push feature configuration.

CVSS 3.1 · 9.8 Critical EPSS 2.0% KEV · Not listed
Vendors
Jetbrains
Products
Teamcity
CVE-2022-25262

In JetBrains Hub before 2022.1.14434, SAML request takeover was possible.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Jetbrains
Products
Hub
CVE-2022-25260

JetBrains Hub before 2021.1.14276 was vulnerable to blind Server-Side Request Forgery (SSRF).

CVSS 3.1 · 9.1 Critical EPSS 2.4% KEV · Not listed
Vendors
Jetbrains
Products
Hub
CVE-2022-25259

JetBrains Hub before 2021.1.14276 was vulnerable to reflected XSS.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Hub
CVE-2022-24442

JetBrains YouTrack before 2021.4.40426 was vulnerable to SSTI (Server-Side Template Injection) via FreeMarker templates.

CVSS 3.1 · 9.8 Critical EPSS 3.8% KEV · Not listed
Vendors
Jetbrains
Products
Youtrack
CVE-2022-24347

JetBrains YouTrack before 2021.4.36872 was vulnerable to stored XSS via a project icon.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Youtrack
CVE-2022-24346

In JetBrains IntelliJ IDEA before 2021.3.1, local code execution via RLO (Right-to-Left Override) characters was possible.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Intellij Idea
CVE-2022-24345

In JetBrains IntelliJ IDEA before 2021.2.4, local code execution (without permission from a user) upon opening a project was possible.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Intellij Idea
CVE-2022-24344

JetBrains YouTrack before 2021.4.31698 was vulnerable to stored XSS on the Notification templates page.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Youtrack
CVE-2022-24343

In JetBrains YouTrack before 2021.4.31698, a custom logo could be set by a user who has read-only permissions.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Youtrack
CVE-2022-24342

In JetBrains TeamCity before 2021.2.1, URL injection leading to CSRF was possible.

CVSS 3.1 · 8.8 High EPSS 3.3% KEV · Not listed
Vendors
Jetbrains
Products
Teamcity
CVE-2022-24341

In JetBrains TeamCity before 2021.2.1, editing a user account to change its password didn't terminate sessions of the edited user.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Teamcity
CVE-2022-24340

In JetBrains TeamCity before 2021.2.1, XXE during the parsing of the configuration file was possible.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Jetbrains
Products
Teamcity