Filtered by vendor Jetbrains
Subscribe
Total
661 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-64804 | 1 Jetbrains | 1 Webstorm | 2026-10-24 | N/A | 8.4 HIGH |
| In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local linter tooling | |||||
| CVE-2026-75049 | 1 Jetbrains | 1 Youtrack | 2026-10-23 | N/A | 6.5 MEDIUM |
| In JetBrains YouTrack before 2026.1.13903, 2026.2.17950 an authenticated user could read restricted articles from other projects via the draft creation endpoint | |||||
| CVE-2026-75051 | 1 Jetbrains | 1 Youtrack | 2026-10-23 | N/A | 8.1 HIGH |
| In JetBrains YouTrack before 2026.2.17917 unauthorised project transfer between organisations was possible | |||||
| CVE-2026-75050 | 1 Jetbrains | 1 Youtrack | 2026-10-23 | N/A | 7.1 HIGH |
| In JetBrains YouTrack before 2026.1.13901, 2026.2.17950 doS attack was possible via crafted type parameters | |||||
| CVE-2026-75057 | 1 Jetbrains | 1 Intellij Idea | 2026-10-23 | N/A | 6.2 MEDIUM |
| In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log | |||||
| CVE-2026-75058 | 1 Jetbrains | 1 Intellij Idea | 2026-10-23 | N/A | 5.5 MEDIUM |
| In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importers | |||||
| CVE-2026-75048 | 1 Jetbrains | 1 Youtrack | 2026-10-23 | N/A | 8.2 HIGH |
| In JetBrains YouTrack before 2026.2.18068 stored XSS via the fenced code-block language label was possible | |||||
| CVE-2026-75055 | 1 Jetbrains | 1 Intellij Idea | 2026-10-23 | N/A | 5.5 MEDIUM |
| In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE | |||||
| CVE-2026-75052 | 1 Jetbrains | 1 Intellij Idea | 2026-10-23 | N/A | 3.6 LOW |
| In JetBrains IntelliJ IDEA before 2026.2.1 command execution via crafted Markdown preview content was possible in trusted projects | |||||
| CVE-2026-75053 | 1 Jetbrains | 1 Intellij Idea | 2026-10-23 | N/A | 5.4 MEDIUM |
| In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint | |||||
| CVE-2026-75059 | 1 Jetbrains | 1 Pycharm | 2026-10-23 | N/A | 4.4 MEDIUM |
| In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible | |||||
| CVE-2026-75056 | 1 Jetbrains | 1 Intellij Idea | 2026-10-23 | N/A | 7.8 HIGH |
| In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible | |||||
| CVE-2026-75060 | 1 Jetbrains | 1 Pycharm | 2026-10-23 | N/A | 8.4 HIGH |
| In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools | |||||
| CVE-2026-75054 | 1 Jetbrains | 1 Intellij Idea | 2026-10-23 | N/A | 6.3 MEDIUM |
| In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in untrusted projects | |||||
| CVE-2025-64773 | 1 Jetbrains | 1 Youtrack | 2026-10-18 | N/A | 2.7 LOW |
| In JetBrains YouTrack before 2025.3.104432 a race condition allowed bypass of helpdesk Agent limit | |||||
| CVE-2026-111096 | 1 Jetbrains | 1 Teamcity | 2026-10-16 | N/A | 6.7 MEDIUM |
| In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic build log was possible | |||||
| CVE-2026-111095 | 1 Jetbrains | 1 Teamcity | 2026-10-16 | N/A | 8.0 HIGH |
| In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic project overview was possible | |||||
| CVE-2026-111094 | 1 Jetbrains | 1 Teamcity | 2026-10-16 | N/A | 8.1 HIGH |
| In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was possible | |||||
| CVE-2026-106218 | 1 Jetbrains | 1 Teamcity | 2026-10-08 | N/A | 8.8 HIGH |
| In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible | |||||
| CVE-2026-106219 | 1 Jetbrains | 1 Teamcity | 2026-10-08 | N/A | 6.5 MEDIUM |
| In JetBrains TeamCity before 2026.2.1 missing validation of Git submodule URLs allowed reading local repositories on the server | |||||