Filtered by vendor Jetbrains
Subscribe
Total
661 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-59796 | 1 Jetbrains | 1 Teamcity | 2026-10-24 | N/A | 8.1 HIGH |
| In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper permission checks | |||||
| CVE-2026-59795 | 1 Jetbrains | 1 Teamcity | 2026-10-24 | N/A | 8.1 HIGH |
| In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible | |||||
| CVE-2026-62422 | 1 Jetbrains | 1 Youtrack | 2026-10-24 | N/A | 10.0 CRITICAL |
| In JetBrains YouTrack before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via direct database access leading to administrative access was possible | |||||
| CVE-2026-64808 | 1 Jetbrains | 1 Phpstorm | 2026-10-24 | N/A | 8.4 HIGH |
| In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via project tooling | |||||
| CVE-2026-64809 | 1 Jetbrains | 1 Phpstorm | 2026-10-24 | N/A | 8.4 HIGH |
| In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured interpreter | |||||
| CVE-2026-64805 | 1 Jetbrains | 1 Webstorm | 2026-10-24 | N/A | 8.4 HIGH |
| In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local package-manager tooling | |||||
| CVE-2026-64810 | 1 Jetbrains | 1 Intellij Idea | 2026-10-24 | N/A | 4.3 MEDIUM |
| In JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, allowing silent user activity tracking | |||||
| CVE-2026-64813 | 1 Jetbrains | 1 Intellij Idea | 2026-10-24 | N/A | 10.0 CRITICAL |
| In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Remote Development session | |||||
| CVE-2026-64812 | 1 Jetbrains | 1 Intellij Idea | 2026-10-24 | N/A | 10.0 CRITICAL |
| In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development session | |||||
| CVE-2026-64800 | 1 Jetbrains | 1 Goland | 2026-10-24 | N/A | 3.5 LOW |
| In JetBrains GoLand before 2026.2 sensitive configuration values written to log files by default | |||||
| CVE-2026-64807 | 1 Jetbrains | 1 Webstorm | 2026-10-24 | N/A | 7.8 HIGH |
| In JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a project-supplied linter configuration | |||||
| CVE-2026-63077 | 1 Jetbrains | 1 Teamcity | 2026-10-24 | N/A | 9.8 CRITICAL |
| In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol | |||||
| CVE-2026-64811 | 1 Jetbrains | 1 Intellij Idea | 2026-10-24 | N/A | 7.8 HIGH |
| In JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before granting project trust via development container configuration | |||||
| CVE-2026-64815 | 1 Jetbrains | 1 Intellij Idea | 2026-10-24 | N/A | 8.1 HIGH |
| In JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer form files | |||||
| CVE-2026-65908 | 1 Jetbrains | 1 Pycharm | 2026-10-24 | N/A | 8.6 HIGH |
| In JetBrains PyCharm before 2026.1.4, 2026.2 arbitrary code execution via malicious Python executable was possible on untrusted project open | |||||
| CVE-2026-64803 | 1 Jetbrains | 1 Goland | 2026-10-24 | N/A | 7.8 HIGH |
| In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust via the configured Go SDK | |||||
| CVE-2026-65906 | 1 Jetbrains | 1 Teamcity | 2026-10-24 | N/A | 8.8 HIGH |
| In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was possible | |||||
| CVE-2026-64802 | 1 Jetbrains | 1 Goland | 2026-10-24 | N/A | 7.8 HIGH |
| In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration | |||||
| CVE-2026-64814 | 1 Jetbrains | 1 Intellij Idea | 2026-10-24 | N/A | 8.6 HIGH |
| In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session | |||||
| CVE-2026-64806 | 1 Jetbrains | 1 Webstorm | 2026-10-24 | N/A | 8.4 HIGH |
| In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured Node.js interpreter | |||||