Filtered by vendor Jetbrains
Subscribe
Total
661 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2025-67741 | 1 Jetbrains | 1 Teamcity | 2026-10-07 | N/A | 4.6 MEDIUM |
| In JetBrains TeamCity before 2025.11 stored XSS was possible via session attribute | |||||
| CVE-2025-67740 | 1 Jetbrains | 1 Teamcity | 2026-10-07 | N/A | 2.7 LOW |
| In JetBrains TeamCity before 2025.11 improper access control could expose GitHub App token's metadata | |||||
| CVE-2025-67739 | 1 Jetbrains | 1 Teamcity | 2026-10-07 | N/A | 3.1 LOW |
| In JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to local paths disclosure | |||||
| CVE-2025-67742 | 1 Jetbrains | 1 Teamcity | 2026-10-07 | N/A | 3.8 LOW |
| In JetBrains TeamCity before 2025.11 path traversal was possible via file upload | |||||
| CVE-2026-100254 | 1 Jetbrains | 1 Teamcity | 2026-10-06 | N/A | 8.8 HIGH |
| In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 authenticated users could execute commands on Windows servers via CRLF injection in Pipeline Git connection settings | |||||
| CVE-2026-100253 | 1 Jetbrains | 1 Teamcity | 2026-10-06 | N/A | 8.8 HIGH |
| In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the versioned settings Kotlin DSL | |||||
| CVE-2026-103488 | 1 Jetbrains | 1 Youtrack | 2026-10-05 | N/A | 7.1 HIGH |
| In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed authenticated users to add themselves to project teams and access restricted issues | |||||
| CVE-2026-103489 | 1 Jetbrains | 1 Youtrack | 2026-10-05 | N/A | 2.0 LOW |
| In JetBrains YouTrack before 2026.2.19422 hTML injection in VCS command failure notifications was possible | |||||
| CVE-2026-103490 | 1 Jetbrains | 1 Youtrack | 2026-10-05 | N/A | 7.2 HIGH |
| In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group links | |||||
| CVE-2026-100255 | 1 Jetbrains | 1 Teamcity | 2026-10-02 | N/A | 8.1 HIGH |
| In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 administrator account takeover was possible via password reset | |||||
| CVE-2026-100256 | 1 Jetbrains | 1 Intellij Idea | 2026-10-02 | N/A | 7.8 HIGH |
| In JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search script constraints was possible in untrusted projects | |||||
| CVE-2026-100257 | 1 Jetbrains | 1 Youtrack | 2026-10-02 | N/A | 4.3 MEDIUM |
| In JetBrains YouTrack before 2026.2.18991 sSRF via stored XHTML injection was possible during PDF export | |||||
| CVE-2026-100258 | 1 Jetbrains | 1 Youtrack | 2026-10-02 | N/A | 4.3 MEDIUM |
| In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed read-only users to read project settings | |||||
| CVE-2026-100259 | 1 Jetbrains | 1 Youtrack | 2026-10-02 | N/A | 4.3 MEDIUM |
| In JetBrains YouTrack before 2026.2.18991 improper access control on Gantt chart allowed edits by users with view-only access | |||||
| CVE-2026-100260 | 1 Jetbrains | 1 Youtrack | 2026-10-02 | N/A | 5.3 MEDIUM |
| In JetBrains YouTrack before 2026.2.18991 mailbox integration allowed authentication after a password reset | |||||
| CVE-2026-100261 | 1 Jetbrains | 1 Youtrack | 2026-10-02 | N/A | 5.4 MEDIUM |
| In JetBrains YouTrack before 2026.2.18991 changing article visibility settings was possible without update permission | |||||
| CVE-2026-100262 | 1 Jetbrains | 1 Youtrack | 2026-10-02 | N/A | 7.6 HIGH |
| In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed users with read-only project access to overwrite project notification templates | |||||
| CVE-2026-100263 | 1 Jetbrains | 1 Youtrack | 2026-10-02 | N/A | 4.7 MEDIUM |
| In JetBrains YouTrack before 2026.2.18991 stored HTML injection via the User-Agent header was possible | |||||
| CVE-2026-100264 | 1 Jetbrains | 1 Youtrack | 2026-10-02 | N/A | 2.7 LOW |
| In JetBrains YouTrack before 2026.2.18991 stored SMTP server credentials could be disclosed by changing the server host | |||||
| CVE-2026-100265 | 1 Jetbrains | 1 Rider | 2026-10-02 | N/A | 4.8 MEDIUM |
| In JetBrains Rider before 2026.2.1 aI Assistant could auto-update third-party skills without user confirmation | |||||