Skip to content

Jetbrains Hub vulnerabilities

insteon hub, hub firmware +1 moreMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the ...CVE-2017-162668.5 HighJanuary 11, 2023
insteon hub, hub firmware +1 moreMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the ...CVE-2017-162658.5 HighJanuary 11, 2023
insteon hub, hub firmware +1 moreMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the ...CVE-2017-162648.5 HighJanuary 11, 2023
insteon hub, hub firmware +1 moreMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the ...CVE-2017-162638.5 HighJanuary 11, 2023
insteon hub, hub firmware +1 moreMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the ...CVE-2017-162628.5 HighJanuary 11, 2023
insteon hub, hub firmware +1 moreMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the ...CVE-2017-162618.5 HighJanuary 11, 2023
insteon hub, hub firmware +1 moreMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the ...CVE-2017-162608.5 HighJanuary 11, 2023
insteon hub, hub firmware +1 moreMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the ...CVE-2017-162598.5 HighJanuary 11, 2023
insteon hub, hub firmware +1 moreMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the ...CVE-2017-162588.5 HighJanuary 11, 2023
insteon hub, hub firmware +1 moreMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the ...CVE-2017-162578.5 HighJanuary 11, 2023
insteon hub, hub firmware +1 moreMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the ...CVE-2017-162568.5 HighJanuary 11, 2023
jetbrains hubIn JetBrains Hub before 2022.3.15181 Throttling was missed when sending emails to a particular...CVE-2022-454713.5 LowNovember 18, 2022
jetbrains hubIn JetBrains Hub before 2022.2.14799, insufficient access control allowed the hijacking of...CVE-2022-348943.5 LowJuly 1, 2022
jetbrains hubIn JetBrains Hub before 2022.1.14638 stored XSS via project icon was possible.CVE-2022-298116.1 MediumApril 28, 2022
jetbrains hubJetBrains Hub before 2021.1.14276 was vulnerable to reflected XSS.CVE-2022-252596.1 MediumFebruary 25, 2022
jetbrains hubJetBrains Hub before 2021.1.14276 was vulnerable to blind Server-Side Request Forgery (SSRF).CVE-2022-25260Public exploit9.1 CriticalFebruary 25, 2022
jetbrains hubIn JetBrains Hub before 2022.1.14434, SAML request takeover was possible.CVE-2022-25262Public exploit9.8 CriticalFebruary 25, 2022
jetbrains hubIn JetBrains Hub before 2021.1.13956, an unprivileged user could perform DoS.CVE-2022-243286.5 MediumFebruary 25, 2022
jetbrains hubIn JetBrains Hub before 2021.1.13890, integration with JetBrains Account exposed an API key with...CVE-2022-243277.5 HighFebruary 25, 2022
jetbrains hubIn JetBrains Hub before 2021.1.13690, information disclosure via avatar metadata is possible.CVE-2021-431807.5 HighNovember 9, 2021
jetbrains hubIn JetBrains Hub before 2021.1.13415, a DoS via user information is possible.CVE-2021-431827.5 HighNovember 9, 2021
jetbrains hubIn JetBrains Hub before 2021.1.13690, stored XSS is possible.CVE-2021-431816.1 MediumNovember 9, 2021
jetbrains hubIn JetBrains Hub before 2021.1.13690, the authentication throttling mechanism could be bypassed.CVE-2021-431839.8 CriticalNovember 9, 2021
jetbrains hubIn JetBrains Hub before 2021.1.13402, HTML injection in the password reset email was possible.CVE-2021-375416.1 MediumAugust 6, 2021
jetbrains hubIn JetBrains Hub before 2021.1.13262, a potentially insufficient CSP for the Widget deployment...CVE-2021-375406.5 MediumAugust 6, 2021
jetbrains hubIn JetBrains Hub before 2021.1.13389, account takeover was possible during password reset.CVE-2021-362099.8 CriticalAugust 6, 2021
jetbrains hubIn JetBrains Hub before 2021.1.13079, two-factor authentication wasn't enabled properly for the...CVE-2021-319017.5 HighMay 11, 2021
jetbrains hubIn JetBrains Hub before 2020.1.12669, information disclosure via the public API was possible.CVE-2021-257605.3 MediumFebruary 3, 2021
jetbrains hubIn JetBrains Hub before 2020.1.12629, an authenticated user can delete 2FA settings of any other...CVE-2021-257596.5 MediumFebruary 3, 2021
jetbrains hubIn JetBrains Hub before 2020.1.12629, an open redirect was possible.CVE-2021-257576.1 MediumFebruary 3, 2021
jetbrains hubIn JetBrains Hub before 2020.1.12099, content spoofing in the Hub OAuth error message was possible.CVE-2020-116917.5 HighApril 22, 2020
jetbrains hubIn JetBrains Hub versions earlier than 2019.1.11738, username enumeration was possible through...CVE-2019-183605.3 MediumOctober 31, 2019
jetbrains hubIn JetBrains Hub versions earlier than 2018.4.11436, there was no option to force a user to...CVE-2019-149555.3 MediumOctober 1, 2019
jetbrains hubIn JetBrains Hub versions earlier than 2018.4.11298, the audit events for SMTPSettings show a...CVE-2019-128477.2 HighJuly 3, 2019