Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (18 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-123296 1 Jetbrains 1 Hub 2026-11-06 7.5 High
In JetBrains Hub before 2026.2.52519 privilege escalation via forged email verification was possible
CVE-2026-123294 1 Jetbrains 1 Hub 2026-11-06 9.6 Critical
In JetBrains Hub before 2026.2.52556 privilege escalation was possible by changing email authentication details during the verification flow
CVE-2026-123297 1 Jetbrains 1 Hub 2026-11-06 6.8 Medium
In JetBrains Hub before 2026.2.52519 two-factor authentication bypass was possible via the password reset flow
CVE-2026-123299 1 Jetbrains 1 Hub 2026-11-06 3.1 Low
In JetBrains Hub before 2026.2.52519 information disclosure via user search queries was possible
CVE-2026-123300 1 Jetbrains 1 Hub 2026-11-06 2.7 Low
In JetBrains Hub before 2026.2.52519 missing authorisation allowed users with read-only access to modify auth module group mappings
CVE-2026-123298 1 Jetbrains 1 Hub 2026-11-06 5 Medium
In JetBrains Hub before 2026.2.52556 sMTP command injection via email verification was possible
CVE-2026-123295 1 Jetbrains 1 Hub 2026-11-06 8.1 High
In JetBrains Hub before 2026.2.52519 enforced two-factor authentication could be disabled via the profile update endpoint
CVE-2026-25848 1 Jetbrains 1 Hub 2026-04-18 9.1 Critical
In JetBrains Hub before 2025.3.119807 authentication bypass allowing administrative actions was possible
CVE-2026-32229 1 Jetbrains 1 Hub 2026-04-16 6.8 Medium
In JetBrains Hub before 2026.1 possible on sign-in account mismatch with non-SSO auth and 2FA disabled
CVE-2021-36209 1 Jetbrains 1 Hub 2024-11-21 9.8 Critical
In JetBrains Hub before 2021.1.13389, account takeover was possible during password reset.
CVE-2021-31901 1 Jetbrains 1 Hub 2024-11-21 7.5 High
In JetBrains Hub before 2021.1.13079, two-factor authentication wasn't enabled properly for the All Users group.
CVE-2021-25760 1 Jetbrains 1 Hub 2024-11-21 5.3 Medium
In JetBrains Hub before 2020.1.12669, information disclosure via the public API was possible.
CVE-2021-25759 1 Jetbrains 1 Hub 2024-11-21 6.5 Medium
In JetBrains Hub before 2020.1.12629, an authenticated user can delete 2FA settings of any other user.
CVE-2021-25757 1 Jetbrains 1 Hub 2024-11-21 6.1 Medium
In JetBrains Hub before 2020.1.12629, an open redirect was possible.
CVE-2020-11691 1 Jetbrains 1 Hub 2024-11-21 7.5 High
In JetBrains Hub before 2020.1.12099, content spoofing in the Hub OAuth error message was possible.
CVE-2019-18360 1 Jetbrains 1 Hub 2024-11-21 5.3 Medium
In JetBrains Hub versions earlier than 2019.1.11738, username enumeration was possible through password recovery.
CVE-2019-14955 1 Jetbrains 1 Hub 2024-11-21 5.3 Medium
In JetBrains Hub versions earlier than 2018.4.11436, there was no option to force a user to change the password and no password expiration policy was implemented.
CVE-2019-12847 1 Jetbrains 1 Hub 2024-11-21 N/A
In JetBrains Hub versions earlier than 2018.4.11298, the audit events for SMTPSettings show a cleartext password to the admin user. It is only relevant in cases where a password has not changed since 2017, and if the audit log still contains events from before that period.