30 matches found
CVE-2019-18365
In JetBrains TeamCity before 2019.1.4, reverse tabnabbing was possible on several pages...
EUVD-2022-29235
Malicious code in bioql PyPI...
EUVD-2024-40459
Malicious code in bioql PyPI...
EUVD-2024-29047
Malicious code in bioql PyPI...
EUVD-2022-39038
Malicious code in bioql PyPI...
EUVD-2023-38324
Malicious code in bioql PyPI...
EUVD-2024-22305
Malicious code in bioql PyPI...
EUVD-2023-42908
Malicious code in bioql PyPI...
EUVD-2025-18915
Malicious code in bioql PyPI...
CVE-2025-54538
In JetBrains TeamCity before 2025.07 password exposure was possible via command line in the "hg pull" command...
CVE-2025-52875
In JetBrains TeamCity before 2025.03.3 a DOM-based XSS at the Performance Monitor page was possible...
CVE-2025-52875
In JetBrains TeamCity before 2025.03.3 a DOM-based XSS at the Performance Monitor page was possible...
JetBrains TeamCity GitHub Checks Webhook Cross-Site Scripting Vulnerability
JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. JetBrains TeamCity suffers from a cross-site scripting vulnerability that originates in the GitHub Checks Webhook, which can be exploited by an attacker to inject malicio...
CVE-2024-56352
In JetBrains TeamCity before 2024.12 stored XSS was possible via image name on the agent details page...
CVE-2022-46831
In JetBrains TeamCity between 2022.10 and 2022.10.1 connecting to AWS using the "Default Credential Provider Chain" allowed TeamCity project administrators to access AWS resources normally limited to TeamCity system administrators...
CVE-2022-24341
In JetBrains TeamCity before 2021.2.1, editing a user account to change its password didn't terminate sessions of the edited user...
CVE-2021-25774
In JetBrains TeamCity before 2020.2.1, a user could get access to the GitHub access token of another user...
CVE-2021-31911
In JetBrains TeamCity before 2020.2.3, reflected XSS was possible on several pages...