Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2768▼ 428 respecto a la semana anterior

Críticas / altas1324▼ 116 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)265▼ 243 respecto a la semana anterior

187 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2022-24347	Modificada	Media (5.4)	0.56%	—	Jetbrains Youtrack	25/2/2022	17/6/2026	JetBrains YouTrack before 2021.4.36872 was vulnerable to stored XSS via a project icon.
CVE-2022-24344	Modificada	Media (5.4)	0.56%	—	Jetbrains Youtrack	25/2/2022	17/6/2026	JetBrains YouTrack before 2021.4.31698 was vulnerable to stored XSS on the Notification templates page.
CVE-2022-24343	Modificada	Media (4.3)	0.63%	—	Jetbrains Youtrack	25/2/2022	17/6/2026	In JetBrains YouTrack before 2021.4.31698, a custom logo could be set by a user who has read-only permissions.
CVE-2021-43192	Modificada	Media (5.3)	0.71%	—	Jetbrains Youtrack Mobile	9/11/2021	17/6/2026	In JetBrains YouTrack Mobile before 2021.2, iOS URL scheme hijacking is possible.
CVE-2021-43191	Modificada	Media (5.3)	0.71%	—	Jetbrains Youtrack Mobile	9/11/2021	17/6/2026	JetBrains YouTrack Mobile before 2021.2, is missing the security screen on Android and iOS.
CVE-2021-43190	Modificada	Media (5.3)	0.71%	—	Jetbrains Youtrack Mobile	9/11/2021	17/6/2026	In JetBrains YouTrack Mobile before 2021.2, task hijacking on Android is possible.
CVE-2021-43189	Modificada	Alta (7.3)	0.76%	—	Jetbrains Youtrack Mobile	9/11/2021	17/6/2026	In JetBrains YouTrack Mobile before 2021.2, access token protection on Android is incomplete.
CVE-2021-43188	Modificada	Alta (7.3)	0.76%	—	Jetbrains Youtrack Mobile	9/11/2021	17/6/2026	In JetBrains YouTrack Mobile before 2021.2, access token protection on iOS is incomplete.
CVE-2021-43187	Modificada	Media (5.3)	0.79%	—	Jetbrains Youtrack Mobile	9/11/2021	17/6/2026	In JetBrains YouTrack Mobile before 2021.2, the client-side cache on iOS could contain sensitive information.
CVE-2021-43186	Modificada	Media (5.4)	0.56%	—	Jetbrains Youtrack	9/11/2021	17/6/2026	JetBrains YouTrack before 2021.3.24402 is vulnerable to stored XSS.
CVE-2021-43185	Modificada	Crítica (9.8)	2.0%	—	Jetbrains Youtrack	9/11/2021	17/6/2026	JetBrains YouTrack before 2021.3.23639 is vulnerable to Host header injection.
CVE-2021-43184	Modificada	Media (5.4)	0.66%	—	Jetbrains Youtrack	9/11/2021	17/6/2026	In JetBrains YouTrack before 2021.3.21051, stored XSS is possible.
CVE-2021-37554	Modificada	Media (4.3)	0.88%	—	Jetbrains Youtrack	6/8/2021	17/6/2026	In JetBrains YouTrack before 2021.3.21051, a user could see boards without having corresponding permissions.
CVE-2021-37553	Modificada	Alta (7.5)	1.5%	—	Jetbrains Youtrack	6/8/2021	17/6/2026	In JetBrains YouTrack before 2021.2.16363, an insecure PRNG was used.
CVE-2021-37552	Modificada	Media (5.4)	0.62%	—	Jetbrains Youtrack	6/8/2021	17/6/2026	In JetBrains YouTrack before 2021.2.17925, stored XSS was possible.
CVE-2021-37551	Modificada	Media (5.3)	0.70%	—	Jetbrains Youtrack	6/8/2021	17/6/2026	In JetBrains YouTrack before 2021.2.16363, system user passwords were hashed with SHA-256.
CVE-2021-37550	Modificada	Alta (7.5)	1.1%	—	Jetbrains Youtrack	6/8/2021	17/6/2026	In JetBrains YouTrack before 2021.2.16363, time-unsafe comparisons were used.
CVE-2021-37549	Modificada	Crítica (9.1)	1.3%	—	Jetbrains Youtrack	6/8/2021	17/6/2026	In JetBrains YouTrack before 2021.1.11111, sandboxing in workflows was insufficient.
CVE-2021-31905	Modificada	Alta (7.5)	1.9%	—	Jetbrains Youtrack	11/5/2021	17/6/2026	In JetBrains YouTrack before 2020.6.8801, information disclosure in an issue preview was possible.
CVE-2021-31903	Modificada	Media (6.1)	0.78%	—	Jetbrains Youtrack	11/5/2021	17/6/2026	In JetBrains YouTrack before 2021.1.9819, a pull request's title was sanitized insufficiently, leading to XSS.
CVE-2021-31902	Modificada	Alta (7.5)	1.2%	—	Jetbrains Youtrack	11/5/2021	17/6/2026	In JetBrains YouTrack before 2020.6.6600, access control during the exporting of issues was implemented improperly.
CVE-2021-27733	Modificada	Media (5.4)	0.58%	—	Jetbrains Youtrack	11/5/2021	17/6/2026	In JetBrains YouTrack before 2020.6.6441, stored XSS was possible via an issue attachment.
CVE-2021-25771	Modificada	Media (4.3)	1.5%	—	Jetbrains Youtrack	3/2/2021	17/6/2026	In JetBrains YouTrack before 2020.6.1099, project information could be potentially disclosed.
CVE-2021-25770	Modificada	Crítica (9.8)	3.5%	—	Jetbrains Youtrack	3/2/2021	17/6/2026	In JetBrains YouTrack before 2020.5.3123, server-side template injection (SSTI) was possible, which could lead to code execution.
CVE-2021-25769	Modificada	Alta (7.5)	1.8%	—	Jetbrains Youtrack	3/2/2021	17/6/2026	In JetBrains YouTrack before 2020.4.6808, the YouTrack administrator wasn't able to access attachments.