CVE-2024-41825

In JetBrains TeamCity before 2024.07 stored XSS was possible on the Code Inspection tab...

EUVD-2024-39207

Malicious code in bioql PyPI...

EUVD-2024-39206

Malicious code in bioql PyPI...

PT-2024-33346 · Unknown · Archer Platform

Name of the Vulnerable Software and Affected Versions: Archer Platform versions 2024.03 through 2024.07 Description: The issue is related to an authorization bypass vulnerability concerning supporting application files. A remote unprivileged attacker could potentially exploit this to elevate thei...

CVE-2024-41828

In JetBrains TeamCity before 2024.07 comparison of authorization tokens took non-constant time...

CVE-2024-41824

In JetBrains TeamCity before 2024.07 parameters of the "password" type could leak into the build log in some specific cases...

CVE-2024-41825

CVE-2024-41825 affects JetBrains TeamCity prior to 2024.07. Public sources describe a stored cross-site scripting (XSS) vulnerability on the Code Inspection tab, enabling an attacker to inject script that persists in the UI. Reported impact is limited to confidentiality and integrity (per CVSS ve...

PT-2024-5489 · Jetbrains · Jetbrains Teamcity +1

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2024.07 Description: The issue is related to a flaw in the authorization procedure of JetBrains TeamCity, a continuous integration and continuous deployment CI/CD system. This flaw arises from the...

PT-2024-5490 · Jetbrains · Jetbrains Teamcity +1

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2024.07 Description: The issue is related to a configuration vulnerability in the JetBrains Space module Project Settings | Connections of the CI/CD system JetBrains TeamCity, which is connected to...

PT-2024-5467

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2024.07 Description: The issue is related to the Code Inspection element in the JetBrains TeamCity continuous integration and delivery system, where insufficient measures were taken to protect the web page...

PT-2024-5468 · Jetbrains · Jetbrains Teamcity +1

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2024.07 Description: The issue is related to the lack of protection of the web page structure in the Show Connection element of the JetBrains TeamCity continuous integration and delivery CI/CD system. This...