Vulnerabilities > Jetbrains

DATE CVE VULNERABILITY TITLE RISK
2019-10-31 CVE-2019-18360 Unspecified vulnerability in Jetbrains HUB
In JetBrains Hub versions earlier than 2019.1.11738, username enumeration was possible through password recovery.
network
low complexity
jetbrains
5.3
2019-10-02 CVE-2019-16407 Uncontrolled Search Path Element vulnerability in Jetbrains Resharper
JetBrains ReSharper installers for versions before 2019.2 had a DLL Hijacking vulnerability.
local
low complexity
jetbrains CWE-427
7.3
2019-10-02 CVE-2019-16171 Cross-site Scripting vulnerability in Jetbrains Youtrack
In JetBrains YouTrack through 2019.2.56594, stored XSS was found on the issue page.
network
low complexity
jetbrains CWE-79
6.1
2019-10-02 CVE-2019-15040 Cross-Site Request Forgery (CSRF) vulnerability in Jetbrains Youtrack
JetBrains YouTrack versions before 2019.1 had a CSRF vulnerability on the settings page.
network
low complexity
jetbrains CWE-352
8.8
2019-10-02 CVE-2019-15037 Cross-site Scripting vulnerability in Jetbrains Teamcity 2018.2.4
An issue was discovered in JetBrains TeamCity 2018.2.4.
network
low complexity
jetbrains CWE-79
6.1
2019-10-02 CVE-2019-15036 OS Command Injection vulnerability in Jetbrains Teamcity 2018.2.4
An issue was discovered in JetBrains TeamCity 2018.2.4.
network
low complexity
jetbrains CWE-78
7.2
2019-10-02 CVE-2019-14959 Cleartext Transmission of Sensitive Information vulnerability in Jetbrains Toolbox
JetBrains Toolbox before 1.15.5605 was resolving an internal URL via a cleartext http connection.
network
high complexity
jetbrains CWE-319
5.9
2019-10-02 CVE-2019-14958 Allocation of Resources Without Limits or Throttling vulnerability in Jetbrains Pycharm
JetBrains PyCharm before 2019.2 was allocating a buffer of unknown size for one of the connection processes.
network
low complexity
jetbrains CWE-770
7.5
2019-10-02 CVE-2019-14956 Improper Preservation of Permissions vulnerability in Jetbrains Youtrack
JetBrains YouTrack before 2019.2.53938 was using incorrect settings, allowing a user without necessary permissions to get other project names.
network
low complexity
jetbrains CWE-281
4.3
2019-10-02 CVE-2019-12737 Use of Password Hash With Insufficient Computational Effort vulnerability in Jetbrains Ktor
UserHashedTableAuth in JetBrains Ktor framework before 1.2.0-rc uses a One-Way Hash with a Predictable Salt for storing user credentials.
network
low complexity
jetbrains CWE-916
5.3