EUVD-2021-24105

Malware in sbrugna...

CVE-2021-37544

In JetBrains TeamCity before 2020.2.4, there was an insecure deserialization...

CVE-2021-37544

In JetBrains TeamCity before 2020.2.4, there was an insecure deserialization...

CVE-2021-37547

In JetBrains TeamCity before 2020.2.4, insufficient checks during file uploading were made...

CVE-2021-37544

In JetBrains TeamCity before 2020.2.4, there was an insecure deserialization...

Jetbrains JetBrains TeamCity 代码问题漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains Jetbrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. An insecure deserialization vulnerabilit...

Jetbrains JetBrains TeamCity 安全漏洞

JetBrains TeamCity is a distributed build management and continuous integration tool from JetBrains Jetbrains, a Czech company. The tool provides continuous unit testing, code quality analysis and build issue analysis reports.A security vulnerability exists in versions of JetBrains TeamCity prior...

CVE-2021-31914

In JetBrains TeamCity before 2020.2.4 on Windows, arbitrary code execution on TeamCity Server was possible...

CVE-2021-31915

In JetBrains TeamCity before 2020.2.4, OS command injection leading to remote code execution was possible...

Jetbrains JetBrains TeamCity 操作系统命令注入漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. A remote code execution vulnerability exists in...

Jetbrains JetBrains TeamCity 安全漏洞

TeamCity is a Java-based build management and continuous integration server from JetBrains. An arbitrary code execution vulnerability exists in JetBrains TeamCity versions prior to 2020.2.4. An attacker can exploit this vulnerability to execute arbitrary code on TeamCity Server...

Solarwinds Orion Platform 代码问题漏洞

Solarwinds Orion Platform is a network fault and network performance management platform from Solarwinds, Inc. The platform provides real-time monitoring and analysis of network devices and supports a customizable web interface, multiple user opinions, and a mapped view of the entire network. A...

Gradle Enterprise Information Disclosure Vulnerability

Gradle Enterprise improves developer productivity by speeding up builds, improving build reliability, and accelerating build debugging. An information disclosure vulnerability exists in Gradle Enterprise 2017.1 - 2020.2.4. The vulnerability stems from unrestricted access to the Advanced System...

Gradle Enterprise Session Reuse Vulnerability

Gradle Enterprise improves developer productivity by speeding up builds, improving build reliability, and accelerating build debugging. A session reuse vulnerability exists in Gradle Enterprise 2018.5 - 2020.2.4. The vulnerability stems from implicitly logging user login information. An attacker ...

Gradle Enterprise Cross-Site Request Forgery Vulnerability

Gradle is a set of JVM-based project build tools , it supports maven, Ivy repository and so on. A cross-site request forgery vulnerability exists in Gradle Enterprise versions 2018.2 through 2020.2.4. The vulnerability stems from a WEB application that does not adequately validate that a request ...

CVE-2020-15769

An issue was discovered in Gradle Enterprise 2020.2 - 2020.2.4. An XSS issue exists via the request URL...

Cross site scripting

An issue was discovered in Gradle Enterprise 2020.2 - 2020.2.4. An XSS issue exists via the request URL...

PT-2020-14621 · Gradle · Gradle Enterprise

Name of the Vulnerable Software and Affected Versions: Gradle Enterprise versions 2018.5 through 2020.2.4 Description: An issue was discovered where an attacker with physical access to the browser of a user who has recently logged in to Gradle Enterprise and since closed their browser could reope...