Filter
AND
Versions
Jetbrains TeamcityIn JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible
9.8
EPSS
0.09%
First published (updated )
Jetbrains TeamcityJetBrains TeamCity Authentication Bypass Vulnerability
First published (updated )
Jetbrains TeamcityIn JetBrains TeamCity before 2023.05 bypass of permission checks allowing to perform admin actions w…
9.8
First published (updated )
Jetbrains TeamcityIn JetBrains TeamCity before 2024.07 access tokens could continue working after deletion or expirati…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Jetbrains TeamcityJetBrains TeamCity Authentication Bypass Vulnerability
First published (updated )
Jetbrains TeamcityIn JetBrains TeamCity before 2020.2.4, there was an insecure deserialization.
9.8
First published (updated )
Jetbrains TeamcityIn JetBrains TeamCity before 2020.2.3, argument injection leading to remote code execution was possi…
9.8
First published (updated )
Jetbrains TeamcityIn JetBrains TeamCity before 2020.2.4 on Windows, arbitrary code execution on TeamCity Server was po…
9.8
First published (updated )
Jetbrains TeamcityIn JetBrains TeamCity before 2021.1.3, the X-Frame-Options header is missing in some cases.
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Jetbrains TeamcityIn JetBrains TeamCity before 2021.1.2, permission checks in the Agent Push functionality were insuff…
9.8
First published (updated )
Jetbrains TeamcityIn JetBrains TeamCity before 2021.1.2, remote code execution via the agent push functionality is pos…
9.8
First published (updated )
Jetbrains TeamcityIn JetBrains TeamCity before 2019.1.4, insecure Java Deserialization could potentially allow remote …
9.8
First published (updated )
Jetbrains TeamcityOS Command Injection, Command Injection
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Jetbrains TeamcityOS Command Injection, Command Injection
9.8
First published (updated )
Jetbrains TeamcityIn JetBrains TeamCity before 2021.1.4, GitLab authentication impersonation was possible.
9.8
First published (updated )
Jetbrains TeamcityIn JetBrains TeamCity before 2022.10.2 jVMTI was enabled by default on agents.
9.8
First published (updated )
SolarWinds Access Rights ManagerSolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability
9.6
EPSS
0.06%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SolarWinds Access Rights ManagerSolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability
9.6
EPSS
0.06%
First published (updated )
SolarWinds Access Rights ManagerSolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability
9.6
EPSS
0.06%
First published (updated )
SolarWinds Access Rights ManagerSolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution
First published (updated )
Jetbrains TeamcityIn JetBrains TeamCity before 2020.2.3, account takeover was potentially possible during a password r…
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Jetbrains TeamcityIn JetBrains TeamCity before 2020.1, users with the Modify Group permission can elevate other users'…
8.8
First published (updated )
Jetbrains TeamcityIn JetBrains TeamCity before 2023.05.2 a token with limited permissions could be used to gain full a…
8.8
First published (updated )
Jetbrains TeamcityIn JetBrains TeamCity before 2022.04.2 build parameter injection was possible
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.