Security Vulnerabilities - CVEs Published In 2020
JetBrains TeamCity before 2019.2.3 is vulnerable to stored XSS in the administration UI.
CVSS Score
6.1
EPSS Score
0.008
Published
2020-08-08
JetBrains TeamCity before 2019.2.3 is vulnerable to reflected XSS in the administration UI.
CVSS Score
6.1
EPSS Score
0.007
Published
2020-08-08
In JetBrains Upsource before 2020.1, information disclosure is possible because of an incorrect user matching algorithm.
CVSS Score
7.5
EPSS Score
0.013
Published
2020-08-08
In JetBrains YouTrack before 2020.1.1331, an external user could execute commands against arbitrary issues.
CVSS Score
8.8
EPSS Score
0.02
Published
2020-08-08
In JetBrains YouTrack before 2020.2.8527, the subtasks workflow could disclose issue existence.
CVSS Score
5.3
EPSS Score
0.014
Published
2020-08-08
JetBrains YouTrack before 2020.2.10643 was vulnerable to SSRF that allowed scanning internal ports.
CVSS Score
5.3
EPSS Score
0.014
Published
2020-08-08
Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic.
CVSS Score
8.8
EPSS Score
0.003
Published
2020-08-07
Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to bypass authentication via a web-administration request that lacks a password parameter.
CVSS Score
8.8
EPSS Score
0.009
Published
2020-08-07
Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted server name.
CVSS Score
4.3
EPSS Score
0.003
Published
2020-08-07
Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to denial-of-service the device via long input values.
CVSS Score
6.5
EPSS Score
0.005
Published
2020-08-07