Search Results (269 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-123842 1 Jetbrains 1 Intellij Idea 2026-11-06 7.1 High
In JetBrains IntelliJ IDEA before 2026.3 arbitrary file write was possible via symlinks when extracting plugin archives
CVE-2026-123831 1 Jetbrains 1 Clion 2026-11-06 9.6 Critical
In JetBrains CLion before 2026.2, 2026.1.4 code execution was possible in Safe Mode via Meson project settings
CVE-2026-123834 1 Jetbrains 1 Datalore 2026-11-06 7.5 High
In JetBrains Datalore before 2026.4 improper scope validation in database tasks allowed using another workspace's service account
CVE-2026-123835 1 Jetbrains 1 Datalore 2026-11-06 5.9 Medium
In JetBrains Datalore before 2026.4 code execution was possible in another user's computation via an init script upload race condition
CVE-2026-123844 1 Jetbrains 1 Intellij Idea 2026-11-06 5.3 Medium
In JetBrains IntelliJ IDEA before 2026.3 sSRF was possible via custom plugin repositories
CVE-2026-123847 1 Jetbrains 1 Intellij Idea 2026-11-06 5.3 Medium
In JetBrains IntelliJ IDEA before 2026.3 command execution was possible via control characters in terminal command completion
CVE-2026-123856 1 Jetbrains 1 Toolbox 2026-11-06 6.5 Medium
In JetBrains Toolbox App before 3.6.1 nTLM hash disclosure was possible via SVG tool icons from a Remote Development server
CVE-2026-123832 1 Jetbrains 1 Clion 2026-11-06 9.6 Critical
In JetBrains CLion before 2026.2 code execution was possible in Safe Mode via JSON compilation database
CVE-2026-123315 1 Jetbrains 1 Junie 2026-11-06 7 High
In JetBrains Junie CLI before 26.8.24 command execution was possible via the Allow Similar Commands option
CVE-2026-123322 1 Jetbrains 1 Webstorm 2026-11-06 6.3 Medium
In JetBrains WebStorm before 2026.3, 2026.2.4 code execution was possible in untrusted projects via the Angular CLI schematics loader
CVE-2026-123330 1 Jetbrains 1 Youtrack 2026-11-06 5.4 Medium
In JetBrains YouTrack before 2026.2.19562 missing authorization allowed users with read-only access to change issue visibility settings
CVE-2026-123331 1 Jetbrains 1 Youtrack 2026-11-06 5.4 Medium
In JetBrains YouTrack before 2026.2.19197 article editors could change visibility of restricted child articles
CVE-2026-123334 1 Jetbrains 1 Youtrack 2026-11-06 3.8 Low
In JetBrains YouTrack before 2026.2.19562 project admins of a related project could delete VCS integrations owned by another project
CVE-2026-123291 1 Jetbrains 1 Datalore 2026-11-06 4.3 Medium
In JetBrains Datalore before 2026.4 improper owner validation allowed reading another workspace's issues and runs notebook
CVE-2026-123296 1 Jetbrains 1 Hub 2026-11-06 7.5 High
In JetBrains Hub before 2026.2.52519 privilege escalation via forged email verification was possible
CVE-2026-123312 1 Jetbrains 1 Intellij Idea 2026-11-06 3.3 Low
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 sSRF was possible via annotations.xml files during indexing
CVE-2026-123317 1 Jetbrains 1 Ktor 2026-11-06 8.1 High
In JetBrains Ktor before 3.6.1 session forgery was possible via tampered encrypted session cookies
CVE-2026-123326 1 Jetbrains 1 Youtrack 2026-11-06 7.1 High
In JetBrains YouTrack before 2026.2.19197 incorrect authorisation in the scripts debugger allowed workflow script disclosure and suspension
CVE-2026-123323 1 Jetbrains 1 Youtrack 2026-11-06 8.4 High
In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 improper URL validation in the app widget host allowed apps to send REST requests without user confirmation
CVE-2026-123335 1 Jetbrains 1 Youtrack 2026-11-06 3.5 Low
In JetBrains YouTrack before 2026.2.19562, 2026.1.14137, 2025.3.169041 missing authorization allowed attaching tags to any issue via the tag issues collection