Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-36349 State: PUBLISHED Published: 2025-07-08T16:42:17.471Z Last Updated: 2025-07-09T14:00:36.439Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: AMD Products: AMD EPYC™ 7002 Series Processors, AMD EPYC™ 7003 Series Processors, AMD EPYC™ 9004 Series Processors, AMD EPYC™ 8004 Series Processors, AMD EPYC™ 4004 Series Processors, AMD EPYC™ 9V64H Processor, AMD Ryzen™ 5000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics, AMD Ryzen™ 3000 Series Desktop Processors, AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ 7000 Series Desktop Processors, AMD Ryzen™ 4000 Series Desktop Proce
adeon™ Graphics, AMD Ryzen™ 7000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics, AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7000 Series Mobile Processors, AMD EPYC™ Embedded 7002 Series Processors, AMD EPYC™ Embedded 7003 Series Processors, AMD EPYC™ Embedded 8004 Series Processors, AMD EPYC™ Embedded 9004 Series Processors, AMD Ryzen™ Embedded 5000 Series Processors, AMD Ryzen™ Embedded 7000 Series Processors, AMD Ryzen™ Embedded V2000 Series Processors, AMD Ryzen™ Embedded V3000 Series Processors, AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 3000 Series Mobile Processor with Rad
ssors, AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics, AMD EPYC™ Embedded 3000 Series Processors, AMD Ryzen™ Embedded R1000 Series Processors, AMD Ryzen™ Embedded R2000 Series Processors, AMD Ryzen™ Embedded V1000 Series Processors Problem Types: CWE-1420 Description: A transient execution vulnerability in some AMD processors may allow a user process to infer TSC_AUX even when such a read is disabled, potentially resulting in information leakage. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7029.html
CVE ID: CVE-2024-36350 State: PUBLISHED Published: 2025-07-08T16:56:39.834Z Last Updated: 2025-11-04T21:08:39.481Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: AMD Products: AMD EPYC™ 7003 Series Processors, AMD EPYC™ 9004 Series Processors, AMD EPYC™ 8004 Series Processors, AMD EPYC™ 9V64H Processor, AMD Ryzen™ 5000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics, AMD Ryzen™ 7000 Series Desktop Processors, AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics, AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors, AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics, AMD Ryzen™ 7035 Series Processor with Rade
WX-Series Processors, AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics, AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics, AMD Ryzen™ 7000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics, AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7000 Series Mobile Processors, AMD EPYC™ Embedded 7003 Series Processors, AMD EPYC™ Embedded 8004 Series Processors, AMD EPYC™ Embedded 9004 Series Processors, AMD Ryzen™ Embedded 5000 Series Processors, AMD Ryzen™ Embedded 7000 Series Processors, AMD Ryzen™ Embedded V3000 Series Processors, AMD EPYC™ Embedded 97X4, AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics Pro
™ Embedded V3000 Series Processors, AMD EPYC™ Embedded 97X4, AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics Problem Types: CWE-1421 Description: A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7029.html
CVE ID: CVE-2024-36352 State: PUBLISHED Published: 2025-09-06T17:54:57.932Z Last Updated: 2025-09-08T14:48:33.628Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H) Vendors: AMD Products: AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics, AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 9000 Series Desktop Processors, AMD Ryzen™ 4000 Series Desktop Processors, AMD Ryzen™ 7030 Series Mobile Proc
AMD Ryzen™ 9000 Series Desktop Processors, AMD Ryzen™ 4000 Series Desktop Processors, AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7000 Series Desktop Processors, AMD Ryzen™ 8000 Series Desktop Processors, AMD Ryzen™ Embedded V2000 Series Processors, AMD Radeon™ RX 5000 Series Graphics Products, AMD Radeon™ RX 6000 Series Graphics Products, AMD Radeon™ RX 7000 Series Graphics Products, AMD Radeon™ RX Vega Series Graphics Cards, AMD Radeon™ PRO W5000 Series Graphics Products, AMD
eries Graphics Products, AMD Radeon™ RX Vega Series Graphics Cards, AMD Radeon™ PRO W5000 Series Graphics Products, AMD Radeon™ PRO W6000 Series Graphics Products, AMD Radeon™ PRO W7000 Series Graphics Products, AMD Radeon™ VII, AMD Radeon™ PRO VII, AMD Radeon™ Instinct™ MI25 Graphics Products, AMD Radeon™ PRO V520 Graphics Products, AMD Radeon™ PRO V620 Graphics Products, AMD Radeon™ PRO V710 Graphics Products Problem Types: CWE-822 Description: Improper input validation in the AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary writes or denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:
eading to arbitrary writes or denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6018.html - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5007.html
CVE ID: CVE-2024-36353 State: PUBLISHED Published: 2025-03-02T17:33:11.636Z Last Updated: 2025-10-14T17:36:48.115Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: AMD Products: AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics, AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7000 Series Desktop Processor, AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™
, AMD Ryzen™ 7000 Series Desktop Processor, AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 9000HX Series Processors, AMD Ryzen™ AI Max 300 Series Processors, AMD Ryzen™ Z2 Series Processors Extreme, AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics, AMD Ryzen™ 4000 Series Desktop Processors, AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 8000 Series Desktop Processors, AMD Ryzen™ 9000 Series Desktop Processors, Ryzen™ Embedded R1000, Ryzen™ Embedded R2000, AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge"), Ryzen™ Embedded V2000, Ryzen™ Em
R2000, AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge"), Ryzen™ Embedded V2000, Ryzen™ Embedded V3000, AMD Ryzen Embedded V2000A Series Processors, AMD Radeon™ RX 5000/PRO W5000 Series Graphics Products, AMD Radeon™ RX6000/PRO W6000 Series Graphics Products, AMD Radeon™ RX 7000/PRO W7000 Series Graphics Products, AMD Radeon™ PRO V520, AMD Radeon™ PRO V620, AMD Radeon™ PRO V710 Problem Types: CWE-459 Description: Insufficient clearing of GPU global memory could allow a malicious process running on the same GPU to read left over memory values potentially leading to loss of confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://w
tentially leading to loss of confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6019.html
CVE ID: CVE-2024-36354 State: PUBLISHED Published: 2025-09-06T18:06:43.084Z Last Updated: 2025-09-23T21:26:51.266Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: AMD Products: AMD Ryzen™ Threadripper™ 3000 Processors, AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors, AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors, AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics, AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 8000 Series Desktop Processors, AMD Ryzen™ 7040 Series Mobile Process
obile Processors with Radeon™ Graphics, AMD Ryzen™ 8000 Series Desktop Processors, AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7000 Series Desktop Processors, AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 9000 Series Desktop Processors, AMD Ryzen™ 3000 Series Desktop Processors, AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Desktop Processors with Radeo
, AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ 4000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processors, AMD EPYC™ Embedded 3000 Series Processors, AMD EPYC™ Embedded 7002 Series Processors, AMD EPYC™ Embedded 7003 Series Processors, AMD EPYC™ Embedded 9004 Series Processors, AMD Ryzen™ Embedded 5000 Series Processors, AMD Ryzen™ Embedded V2000 Series Processors, AMD Ryzen™ Embedded V3000 Series Processors, AMD EPYC™ Embedded 97X4 Series Processors, AMD Ryzen™ Embedded 7000 Series Processors, AMD EPYC™ 9004 Series Processors, AMD EPYC™ 7003 Series Processors, AMD EPYC™ 7002 Serie
mbedded 7000 Series Processors, AMD EPYC™ 9004 Series Processors, AMD EPYC™ 7003 Series Processors, AMD EPYC™ 7002 Series Processors, AMD EPYC™ 7001 Series Processors, AMD EPYC™ 4004 Series Processors, AMD EPYC™ 8004 Series Processors Problem Types: CWE-1231 Description: Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of Trust for BIOS update, to bypass SMM isolation potentially resulting in arbitrary code execution at the SMM level. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security
evel. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4012.html - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5007.html - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3014.html
CVE ID: CVE-2024-36357 State: PUBLISHED Published: 2025-07-08T17:01:48.957Z Last Updated: 2025-11-04T21:08:40.807Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: AMD Products: AMD EPYC™ 7003 Series Processors, AMD EPYC™ 9004 Series Processors, AMD EPYC™ 8004 Series Processors, AMD EPYC™ 9V64H Processor, AMD Ryzen™ 5000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics, AMD Ryzen™ 7000 Series Desktop Processors, AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics, AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors, AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics, AMD Ryzen™ 7035 Series Processor with Rade
™ Embedded V3000 Series Processors, AMD EPYC™ Embedded 97X4, AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics Problem Types: CWE-1421 Description: A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7029.html
CVE ID: CVE-2024-36358 State: PUBLISHED Published: 2024-06-10T21:21:48.082Z Last Updated: 2025-03-13T13:55:36.802Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Trend Micro, Inc. Products: Trend Micro Deep Security Agent Description: A link following vulnerability in Trend Micro Deep Security 20.x agents below build 20.0.1-3180 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://success.tren
rability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://success.trendmicro.com/dcx/s/solution/000298151 - https://www.zerodayinitiative.com/advisories/ZDI-24-575/
CVE ID: CVE-2024-36359 State: PUBLISHED Published: 2024-06-10T21:21:59.692Z Last Updated: 2025-03-18T15:18:37.149Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Trend Micro, Inc. Products: Trend Micro InterScan Web Security Virtual Appliance Description: A cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 could allow an attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: R
em in order to exploit this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://success.trendmicro.com/dcx/s/solution/000298065 - https://www.zerodayinitiative.com/advisories/ZDI-24-574/
CVE ID: CVE-2024-36360 State: PUBLISHED Published: 2024-06-11T04:19:39.122Z Last Updated: 2025-03-14T14:43:00.422Z Vendors: Keisuke Nakayama Products: awkblog Problem Types: OS command injection Description: OS command injection vulnerability exists in awkblog v0.0.1 (commit hash:7b761b192d0e0dc3eef0f30630e00ece01c8d552) and earlier. If a remote unauthenticated attacker sends a specially crafted HTTP request, an arbitrary OS command may be executed with the privileges of the affected product on the machine running the product. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/yammerjp/awkblog/issues/1 - https://jvn.jp/en/jp/JVN805062
nt: - CVE Program Container: References: - https://github.com/yammerjp/awkblog/issues/1 - https://jvn.jp/en/jp/JVN80506242/
CVE ID: CVE-2024-36361 State: PUBLISHED Published: 2024-05-24T06:04:19.211Z Last Updated: 2025-02-13T15:59:18.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pug through 3.0.2 allows JavaScript code execution if an application accepts untrusted input for the name option of the compileClient, compileFileClient, or compileClientWithDependenciesTracked function. NOTE: these functions are for compiling Pug templates into JavaScript, and there would typically be no reason to allow untrusted callers. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/pugjs/pug/pull/3428 - https://pugjs.org/api/reference.html
CVE ID: CVE-2024-36362 State: PUBLISHED Published: 2024-05-29T13:28:57.277Z Last Updated: 2024-09-03T18:06:24.164Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-23 Description: In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, 2024.03.2 path traversal allowing to read files from server was possible Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-36363 State: PUBLISHED Published: 2024-05-29T13:28:58.021Z Last Updated: 2024-08-02T03:37:05.045Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-79 Description: In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 several Stored XSS in code inspection reports were possible Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-36364 State: PUBLISHED Published: 2024-05-29T13:28:58.804Z Last Updated: 2024-08-02T03:37:04.365Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-863 Description: In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 improper access control in Pull Requests and Commit status publisher build features was possible Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-36365 State: PUBLISHED Published: 2024-05-29T13:28:59.445Z Last Updated: 2024-08-02T03:37:05.199Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-863 Description: In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, 2024.03.2 a third-party agent could impersonate a cloud agent Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-36366 State: PUBLISHED Published: 2024-05-29T13:28:59.982Z Last Updated: 2024-08-02T03:37:05.029Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-79 Description: In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 an XSS could be executed via certain report grouping and filtering operations Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-36367 State: PUBLISHED Published: 2024-05-29T13:29:00.772Z Last Updated: 2024-08-02T03:37:04.680Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-79 Description: In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via third-party reports was possible Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-36368 State: PUBLISHED Published: 2024-05-29T13:29:01.309Z Last Updated: 2024-08-02T03:37:05.133Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-79 Description: In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 reflected XSS via OAuth provider configuration was possible Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-36369 State: PUBLISHED Published: 2024-05-29T13:29:01.770Z Last Updated: 2024-08-02T03:37:05.020Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-79 Description: In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via issue tracker integration was possible Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-36370 State: PUBLISHED Published: 2024-05-29T13:29:02.650Z Last Updated: 2024-08-02T03:37:05.135Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-79 Description: In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via OAuth connection settings was possible Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-36371 State: PUBLISHED Published: 2024-05-29T13:29:03.238Z Last Updated: 2024-08-02T03:37:04.980Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-79 Description: In JetBrains TeamCity before 2023.05.6, 2023.11.5 stored XSS in Commit status publisher was possible Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-36372 State: PUBLISHED Published: 2024-05-29T13:29:03.760Z Last Updated: 2024-08-02T03:37:05.015Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-79 Description: In JetBrains TeamCity before 2023.05.6 reflected XSS on the subscriptions page was possible Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-36373 State: PUBLISHED Published: 2024-05-29T13:29:04.265Z Last Updated: 2024-08-02T03:37:04.991Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-79 Description: In JetBrains TeamCity before 2024.03.2 several stored XSS in untrusted builds settings were possible Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-36374 State: PUBLISHED Published: 2024-05-29T13:29:04.772Z Last Updated: 2024-08-02T03:37:05.080Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-79 Description: In JetBrains TeamCity before 2024.03.2 stored XSS via build step settings was possible Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-36375 State: PUBLISHED Published: 2024-05-29T13:29:05.293Z Last Updated: 2024-09-03T15:32:46.543Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-209 Description: In JetBrains TeamCity before 2024.03.2 technical information regarding TeamCity server could be exposed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-36376 State: PUBLISHED Published: 2024-05-29T13:29:05.793Z Last Updated: 2024-08-02T03:37:05.188Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-863 Description: In JetBrains TeamCity before 2024.03.2 users could perform actions that should not be available to them based on their permissions Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/