Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (276 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-63077 1 Jetbrains 1 Teamcity 2026-07-27 9.8 Critical
In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol
CVE-2026-65907 1 Jetbrains 1 Teamcity 2026-07-27 9.1 Critical
In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible
CVE-2026-59793 1 Jetbrains 1 Teamcity 2026-07-26 8.8 High
In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integration
CVE-2026-59795 1 Jetbrains 1 Teamcity 2026-07-26 8.1 High
In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible
CVE-2026-59796 1 Jetbrains 1 Teamcity 2026-07-26 8.1 High
In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper permission checks
CVE-2026-59794 1 Jetbrains 1 Teamcity 2026-07-24 7.3 High
In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported data
CVE-2026-65906 1 Jetbrains 1 Teamcity 2026-07-23 8.8 High
In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was possible
CVE-2026-49373 1 Jetbrains 1 Teamcity 2026-06-02 7.1 High
In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection settings
CVE-2026-49374 1 Jetbrains 1 Teamcity 2026-06-02 7.6 High
In JetBrains TeamCity before 2026.1 improper permission checks exposed build configuration parameters
CVE-2026-49375 1 Jetbrains 1 Teamcity 2026-06-02 6.1 Medium
In JetBrains TeamCity before 2026.1, 2025.11.5 reflected XSS was possible on the repository download page
CVE-2026-49376 1 Jetbrains 1 Teamcity 2026-06-02 6.5 Medium
In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML plugin
CVE-2026-49377 1 Jetbrains 1 Teamcity 2026-06-02 4.3 Medium
In JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent parameters
CVE-2026-49378 1 Jetbrains 1 Teamcity 2026-06-02 4.3 Medium
In JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletion
CVE-2026-49379 1 Jetbrains 1 Teamcity 2026-06-02 6.5 Medium
In JetBrains TeamCity before 2026.1 credentials could be exposed in thread names
CVE-2026-49380 1 Jetbrains 1 Teamcity 2026-06-02 3.1 Low
In JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possible
CVE-2026-49381 1 Jetbrains 1 Teamcity 2026-06-02 3.4 Low
In JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possible
CVE-2026-49372 1 Jetbrains 1 Teamcity 2026-06-02 7.5 High
In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build status was possible
CVE-2026-49371 1 Jetbrains 1 Teamcity 2026-06-02 7.1 High
In JetBrains TeamCity before 2026.1.1 reflected XSS in the keyword filter was possible
CVE-2026-44413 1 Jetbrains 1 Teamcity 2026-05-12 8.2 High
In JetBrains TeamCity before 2026.1 2025.11.5 authenticated users could expose server API to unauthorised access
CVE-2024-27199 1 Jetbrains 1 Teamcity 2026-04-21 7.3 High
In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible