Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (267 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-123841 1 Jetbrains 1 Intellij Idea 2026-11-06 7.8 High
In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via symlinks in an imported settings archive
CVE-2026-123846 1 Jetbrains 1 Intellij Idea 2026-11-06 4.3 Medium
In JetBrains IntelliJ IDEA before 2026.3 blind SSRF was possible via remote references in JSON Schema validation
CVE-2026-123854 1 Jetbrains 1 Pycharm 2026-11-06 5.5 Medium
In JetBrains PyCharm before 2026.3 code execution was possible in Safe Mode via a crafted Jupyter notebook widget module
CVE-2026-123853 1 Jetbrains 1 Intellij Idea 2026-11-06 7.8 High
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.2 code execution was possible in Safe Mode via project-controlled JVM options of the build process
CVE-2026-123839 1 Jetbrains 1 Intellij Idea 2026-11-06 4.7 Medium
In JetBrains IntelliJ IDEA before 2026.3 opening arbitrary URLs without confirmation was possible via the Remote Development port forwarding model
CVE-2026-123845 1 Jetbrains 1 Intellij Idea 2026-11-06 3.3 Low
In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via JSON Schema references in untrusted projects
CVE-2026-123840 1 Jetbrains 1 Intellij Idea 2026-11-06 4.7 Medium
In JetBrains IntelliJ IDEA before 2026.3 hTML injection was possible in Remote Development editor tabs
CVE-2026-123843 1 Jetbrains 1 Intellij Idea 2026-11-06 3.3 Low
In JetBrains IntelliJ IDEA before 2026.3 untrusted projects could trigger changes to GPG agent configuration
CVE-2026-123848 1 Jetbrains 1 Intellij Idea 2026-11-06 7.4 High
In JetBrains IntelliJ IDEA before 2026.3 host name verification was missing for server TLS certificates
CVE-2026-123849 1 Jetbrains 1 Intellij Idea 2026-11-06 7 High
In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in untrusted projects via the Terraform File Watchers
CVE-2026-123850 1 Jetbrains 1 Youtrack 2026-11-06 3.5 Low
In JetBrains YouTrack before 2026.2.19422 cSS injection was possible in Mermaid diagrams via configuration directives
CVE-2026-123855 1 Jetbrains 1 Toolbox 2026-11-06 7.5 High
In JetBrains Toolbox App before 3.6.1 command injection was possible via enterprise configuration URLs
CVE-2026-123857 1 Jetbrains 1 Phpstorm 2026-11-06 4.3 Medium
In JetBrains PhpStorm before 2026.3 xXE was possible in untrusted projects via PHPMD ruleset autodetection
CVE-2026-123858 1 Jetbrains 1 Phpstorm 2026-11-06 4.4 Medium
In JetBrains PhpStorm before 2026.3 project files could be automatically uploaded to a deployment server from untrusted projects
CVE-2026-123833 1 Jetbrains 1 Intellij Idea 2026-11-06 3.6 Low
In JetBrains IntelliJ IDEA before 2026.3 database connections could be established in untrusted projects
CVE-2026-123836 1 Jetbrains 1 Datalore 2026-11-06 8.8 High
In JetBrains Datalore before 2026.4 workspace collaborators could obtain the owner's SSH private key via Git backup
CVE-2026-123837 1 Jetbrains 1 Intellij Idea 2026-11-06 7.8 High
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.1 command injection was possible in untrusted projects via Tomcat run configurations on WSL
CVE-2026-123838 1 Jetbrains 1 Intellij Idea 2026-11-06 7.8 High
In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in Safe Mode via UI Designer form file
CVE-2026-123842 1 Jetbrains 1 Intellij Idea 2026-11-06 7.1 High
In JetBrains IntelliJ IDEA before 2026.3 arbitrary file write was possible via symlinks when extracting plugin archives
CVE-2026-123831 1 Jetbrains 1 Clion 2026-11-06 9.6 Critical
In JetBrains CLion before 2026.2, 2026.1.4 code execution was possible in Safe Mode via Meson project settings