Filtered by vendor Jetbrains
Subscribe
Total
661 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-103496 | 1 Jetbrains | 1 Youtrack | 2026-10-01 | N/A | 5.4 MEDIUM |
| In JetBrains YouTrack before 2026.2.19422 iDOR in inbox threads allowed reading other users' notifications | |||||
| CVE-2026-103495 | 1 Jetbrains | 1 Youtrack | 2026-10-01 | N/A | 4.3 MEDIUM |
| In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation catalogs | |||||
| CVE-2026-103492 | 1 Jetbrains | 1 Youtrack | 2026-10-01 | N/A | 6.5 MEDIUM |
| In JetBrains YouTrack before 2026.2.19422 doS attack was possible via crafted PSD attachments | |||||
| CVE-2025-58334 | 1 Jetbrains | 1 Ide Services | 2026-09-26 | N/A | 8.1 HIGH |
| In JetBrains IDE Services before 2025.5.0.1086, 2025.4.2.2164 users without appropriate permissions could assign high-privileged role for themselves | |||||
| CVE-2025-58335 | 1 Jetbrains | 1 Junie | 2026-09-26 | N/A | 5.5 MEDIUM |
| In JetBrains Junie before 252.284.66, 251.284.66, 243.284.66, 252.284.61, 251.284.61, 243.284.61, 252.284.50, 252.284.54, 251.284.54, 251.284.50, 243.284.54, 243.284.50 information disclosure was possible via search_project function | |||||
| CVE-2025-64457 | 1 Jetbrains | 3 Dottrace, Resharper, Rider | 2026-09-26 | N/A | 4.2 MEDIUM |
| In JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race condition | |||||
| CVE-2026-75047 | 1 Jetbrains | 1 Youtrack | 2026-09-15 | N/A | 6.5 MEDIUM |
| In JetBrains YouTrack before 2026.2.18177 doS attack was possible via a decompression bomb in the import endpoint | |||||
| CVE-2026-75046 | 1 Jetbrains | 1 Youtrack | 2026-09-15 | N/A | 4.3 MEDIUM |
| In JetBrains YouTrack before 2026.2.18112 an authenticated user could enumerate accounts via the users search endpoint | |||||
| CVE-2026-75044 | 1 Jetbrains | 1 Youtrack | 2026-09-15 | N/A | 8.1 HIGH |
| In JetBrains YouTrack before 2025.3.156085, 2026.1.13914, 2026.2.18095 missing authorisation allowed an authenticated user to delete arbitrary entities via the mailbox endpoint | |||||
| CVE-2026-75045 | 1 Jetbrains | 1 Youtrack | 2026-09-15 | N/A | 9.1 CRITICAL |
| In JetBrains YouTrack before 2025.3.156085, 2026.1.13913, 2026.2.18112 an unauthenticated attacker could download database backups via shared draft signature | |||||
| CVE-2026-49385 | 1 Jetbrains | 1 Youtrack | 2026-07-22 | N/A | 6.5 MEDIUM |
| In JetBrains YouTrack before 2026.1.13570 improper access control allowed low-privileged users to modify service accounts | |||||
| CVE-2026-49383 | 1 Jetbrains | 1 Intellij Idea | 2026-07-22 | N/A | 3.3 LOW |
| In JetBrains IntelliJ IDEA before 2026.1 xXE in the UI Designer form parser was possible | |||||
| CVE-2026-49380 | 1 Jetbrains | 1 Teamcity | 2026-07-22 | N/A | 3.1 LOW |
| In JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possible | |||||
| CVE-2026-49372 | 1 Jetbrains | 1 Teamcity | 2026-07-22 | N/A | 7.5 HIGH |
| In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build status was possible | |||||
| CVE-2026-49386 | 1 Jetbrains | 1 Youtrack | 2026-07-22 | N/A | 6.5 MEDIUM |
| In JetBrains YouTrack before 2026.1.13570 improper access control allowed enumeration of restricted issues and articles on Planning Canvas | |||||
| CVE-2026-49366 | 1 Jetbrains | 1 Intellij Idea | 2026-07-22 | N/A | 7.8 HIGH |
| In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion | |||||
| CVE-2026-49369 | 1 Jetbrains | 1 Youtrack | 2026-07-22 | N/A | 4.3 MEDIUM |
| In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on Users and Groups pages | |||||
| CVE-2026-49373 | 1 Jetbrains | 1 Teamcity | 2026-07-22 | N/A | 7.1 HIGH |
| In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection settings | |||||
| CVE-2026-49367 | 1 Jetbrains | 1 Intellij Idea | 2026-07-22 | N/A | 8.0 HIGH |
| In JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user account | |||||
| CVE-2026-49382 | 1 Jetbrains | 1 Intellij Idea | 2026-07-22 | N/A | 4.5 MEDIUM |
| In JetBrains IntelliJ IDEA before 2026.1 code execution was possible via template injection in the Copyright plugin | |||||