Threat database

252 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	5.5	EPSS 0.2%	CVE-2025-58335Junie · CWE-356 Medium5.5EPSS 0.2%2025-08-28CVE Database V5CVE-2025-58335 In JetBrains Junie before 252.284.66, 251.284.66, 243.284.66, 252.284.61, 251.284.61, 243.284.61, 252.284.50, 252.284.54, 251.284.54, 251.284.50, 243.284.54, 243.284.50 information disclosure was possible via search_project function EPSS 0.2%Vulnerability JetBrains #cwe-356 Germany+7	CVE Database V5	2025-08-28
High	8.1	EPSS 0.3%	CVE-2025-58334IDE Services · CWE-862 High8.1EPSS 0.3%2025-08-28CVE Database V5CVE-2025-58334 In JetBrains IDE Services before 2025.5.0.1086, 2025.4.2.2164 users without appropriate permissions could assign high-privileged role for themselves EPSS 0.3%Vulnerability JetBrains #cwe-862 United States+9	CVE Database V5	2025-08-28
Medium	4.3	EPSS 0.8%	CVE-2025-57734TeamCity · CWE-538 Medium4.3EPSS 0.8%2025-08-20CVE Database V5CVE-2025-57734 In JetBrains TeamCity before 2025.07.1 aWS credentials were exposed in Docker script files EPSS 0.8%Vulnerability JetBrains #cwe-538 Germany+6	CVE Database V5	2025-08-20
Medium	5.5	EPSS 0.3%	CVE-2025-57733TeamCity · CWE-77 Medium5.5EPSS 0.3%2025-08-20CVE Database V5CVE-2025-57733 In JetBrains TeamCity before 2025.07.1 sMTP injection was possible allowing modification of email content EPSS 0.3%Vulnerability JetBrains #cwe-77 Germany+7	CVE Database V5	2025-08-20
High	7.5	EPSS 0.1%	CVE-2025-57732TeamCity · CWE-282 High7.5EPSS 0.1%2025-08-20CVE Database V5CVE-2025-57732 In JetBrains TeamCity before 2025.07.1 privilege escalation was possible due to incorrect directory ownership EPSS 0.1%Vulnerability JetBrains #cwe-282 United States+9	CVE Database V5	2025-08-20
High	8.7	EPSS 0.3%	CVE-2025-57731YouTrack · CWE-79 High8.7EPSS 0.3%2025-08-20CVE Database V5CVE-2025-57731 In JetBrains YouTrack before 2025.2.92387 stored XSS was possible via Mermaid diagram content EPSS 0.3%Vulnerability JetBrains #cwe-79 Germany+8	CVE Database V5	2025-08-20
Medium	5.2	EPSS 0.4%	CVE-2025-57730IntelliJ IDEA · CWE-80 Medium5.2EPSS 0.4%2025-08-20CVE Database V5CVE-2025-57730 In JetBrains IntelliJ IDEA before 2025.2 hTML injection was possible via Remote Development feature EPSS 0.4%Vulnerability JetBrains #cwe-80 Germany+6	CVE Database V5	2025-08-20
Medium	6.5	EPSS 0.1%	CVE-2025-57729IntelliJ IDEA · CWE-829 Medium6.5EPSS 0.1%2025-08-20CVE Database V5CVE-2025-57729 In JetBrains IntelliJ IDEA before 2025.2 unexpected plugin startup was possible due to automatic LSP server start EPSS 0.1%Vulnerability JetBrains #cwe-829 United States+9	CVE Database V5	2025-08-20
Medium	6.5	EPSS 0.2%	CVE-2025-57728IntelliJ IDEA · CWE-863 Medium6.5EPSS 0.2%2025-08-20CVE Database V5CVE-2025-57728 In JetBrains IntelliJ IDEA before 2025.2 improper access control allowed Code With Me guest to discover hidden files EPSS 0.2%Vulnerability JetBrains #cwe-863 Germany+7	CVE Database V5	2025-08-20
Medium	4.7	EPSS 0.2%	CVE-2025-57727IntelliJ IDEA · CWE-319 Medium4.7EPSS 0.2%2025-08-20CVE Database V5CVE-2025-57727 In JetBrains IntelliJ IDEA before 2025.2 credentials disclosure was possible via remote reference EPSS 0.2%Vulnerability JetBrains #cwe-319 Germany+8	CVE Database V5	2025-08-20
Medium	5.5	EPSS 0.3%	CVE-2025-54538TeamCity · CWE-312 Medium5.5EPSS 0.3%2025-07-28CVE Database V5CVE-2025-54538 In JetBrains TeamCity before 2025.07 password exposure was possible via command line in the "hg pull" command EPSS 0.3%Vulnerability JetBrains #cwe-312 Germany+8	CVE Database V5	2025-07-28
Medium	5.5	EPSS 0.3%	CVE-2025-54537TeamCity · CWE-312 Medium5.5EPSS 0.3%2025-07-28CVE Database V5CVE-2025-54537 In JetBrains TeamCity before 2025.07 user credentials were stored in plain text in memory snapshots EPSS 0.3%Vulnerability JetBrains #cwe-312 Germany+7	CVE Database V5	2025-07-28
Medium	5.4	EPSS 0.2%	CVE-2025-54536TeamCity · CWE-352 Medium5.4EPSS 0.2%2025-07-28CVE Database V5CVE-2025-54536 In JetBrains TeamCity before 2025.07 a CSRF was possible on GraphQL endpoint EPSS 0.2%Vulnerability JetBrains #cwe-352 Germany+8	CVE Database V5	2025-07-28
Medium	5.8	EPSS 0.2%	CVE-2025-54535TeamCity · CWE-328 Medium5.8EPSS 0.2%2025-07-28CVE Database V5CVE-2025-54535 In JetBrains TeamCity before 2025.07 password reset and email verification tokens were using weak hashing algorithms EPSS 0.2%Vulnerability JetBrains #cwe-328 Germany+7	CVE Database V5	2025-07-28
Medium	4.8	EPSS 0.9%	CVE-2025-54534TeamCity · CWE-79 Medium4.8EPSS 0.9%2025-07-28CVE Database V5CVE-2025-54534 In JetBrains TeamCity before 2025.07 reflected XSS was possible on the agentpushPreset page EPSS 0.9%Vulnerability JetBrains #cwe-79 Germany+9	CVE Database V5	2025-07-28
Medium	4.3	EPSS 0.2%	CVE-2025-54533TeamCity · CWE-863 Medium4.3EPSS 0.2%2025-07-28CVE Database V5CVE-2025-54533 In JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via VCS configuration EPSS 0.2%Vulnerability JetBrains #cwe-863 Germany+7	CVE Database V5	2025-07-28
Medium	4.3	EPSS 0.2%	CVE-2025-54532TeamCity · CWE-863 Medium4.3EPSS 0.2%2025-07-28CVE Database V5CVE-2025-54532 In JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via snapshot dependencies EPSS 0.2%Vulnerability JetBrains #cwe-863 Germany+8	CVE Database V5	2025-07-28
High	7.7	EPSS 0.3%	CVE-2025-54531TeamCity · CWE-23 High7.7EPSS 0.3%2025-07-28CVE Database V5CVE-2025-54531 In JetBrains TeamCity before 2025.07 path traversal was possible via plugin unpacking on Windows EPSS 0.3%Vulnerability JetBrains #cwe-23 United States+9	CVE Database V5	2025-07-28
High	7.5	EPSS 0.2%	CVE-2025-54530TeamCity · CWE-276 High7.5EPSS 0.2%2025-07-28CVE Database V5CVE-2025-54530 In JetBrains TeamCity before 2025.07 privilege escalation was possible due to incorrect directory permissions EPSS 0.2%Vulnerability JetBrains #cwe-276 United States+7	CVE Database V5	2025-07-28
Low	3.7	EPSS 0.1%	CVE-2025-54529TeamCity · CWE-352 Low3.7EPSS 0.1%2025-07-28CVE Database V5CVE-2025-54529 In JetBrains TeamCity before 2025.07 a CSRF was possible in external OAuth login integration EPSS 0.1%Vulnerability JetBrains #cwe-352 Germany+6	CVE Database V5	2025-07-28

Showing 221–240 of 252 results