Filtered by vendor Jetbrains
Subscribe
Total
618 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-75049 | 1 Jetbrains | 1 Youtrack | 2026-09-15 | N/A | 6.5 MEDIUM |
| In JetBrains YouTrack before 2026.1.13903, 2026.2.17950 an authenticated user could read restricted articles from other projects via the draft creation endpoint | |||||
| CVE-2026-75048 | 1 Jetbrains | 1 Youtrack | 2026-09-15 | N/A | 8.2 HIGH |
| In JetBrains YouTrack before 2026.2.18068 stored XSS via the fenced code-block language label was possible | |||||
| CVE-2026-75047 | 1 Jetbrains | 1 Youtrack | 2026-09-15 | N/A | 6.5 MEDIUM |
| In JetBrains YouTrack before 2026.2.18177 doS attack was possible via a decompression bomb in the import endpoint | |||||
| CVE-2026-75046 | 1 Jetbrains | 1 Youtrack | 2026-09-15 | N/A | 4.3 MEDIUM |
| In JetBrains YouTrack before 2026.2.18112 an authenticated user could enumerate accounts via the users search endpoint | |||||
| CVE-2026-75044 | 1 Jetbrains | 1 Youtrack | 2026-09-15 | N/A | 8.1 HIGH |
| In JetBrains YouTrack before 2025.3.156085, 2026.1.13914, 2026.2.18095 missing authorisation allowed an authenticated user to delete arbitrary entities via the mailbox endpoint | |||||
| CVE-2026-75045 | 1 Jetbrains | 1 Youtrack | 2026-09-15 | N/A | 9.1 CRITICAL |
| In JetBrains YouTrack before 2025.3.156085, 2026.1.13913, 2026.2.18112 an unauthenticated attacker could download database backups via shared draft signature | |||||
| CVE-2026-75050 | 1 Jetbrains | 1 Youtrack | 2026-09-15 | N/A | 7.1 HIGH |
| In JetBrains YouTrack before 2026.1.13901, 2026.2.17950 doS attack was possible via crafted type parameters | |||||
| CVE-2026-75051 | 1 Jetbrains | 1 Youtrack | 2026-09-15 | N/A | 8.1 HIGH |
| In JetBrains YouTrack before 2026.2.17917 unauthorised project transfer between organisations was possible | |||||
| CVE-2026-75053 | 1 Jetbrains | 1 Intellij Idea | 2026-09-11 | N/A | 5.4 MEDIUM |
| In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint | |||||
| CVE-2026-75054 | 1 Jetbrains | 1 Intellij Idea | 2026-09-11 | N/A | 6.3 MEDIUM |
| In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in untrusted projects | |||||
| CVE-2026-75055 | 1 Jetbrains | 1 Intellij Idea | 2026-09-11 | N/A | 5.5 MEDIUM |
| In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE | |||||
| CVE-2026-75056 | 1 Jetbrains | 1 Intellij Idea | 2026-09-11 | N/A | 7.8 HIGH |
| In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible | |||||
| CVE-2026-75057 | 1 Jetbrains | 1 Intellij Idea | 2026-09-11 | N/A | 6.2 MEDIUM |
| In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log | |||||
| CVE-2026-75058 | 1 Jetbrains | 1 Intellij Idea | 2026-09-11 | N/A | 5.5 MEDIUM |
| In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importers | |||||
| CVE-2026-75059 | 1 Jetbrains | 1 Pycharm | 2026-09-10 | N/A | 4.4 MEDIUM |
| In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible | |||||
| CVE-2026-75060 | 1 Jetbrains | 1 Pycharm | 2026-09-10 | N/A | 8.4 HIGH |
| In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools | |||||
| CVE-2026-75052 | 1 Jetbrains | 1 Intellij Idea | 2026-09-01 | N/A | 3.6 LOW |
| In JetBrains IntelliJ IDEA before 2026.2.1 command execution via crafted Markdown preview content was possible in trusted projects | |||||
| CVE-2026-62422 | 1 Jetbrains | 1 Youtrack | 2026-08-12 | N/A | 10.0 CRITICAL |
| In JetBrains YouTrack before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via direct database access leading to administrative access was possible | |||||
| CVE-2026-65906 | 1 Jetbrains | 1 Teamcity | 2026-08-11 | N/A | 8.8 HIGH |
| In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was possible | |||||
| CVE-2026-63077 | 1 Jetbrains | 1 Teamcity | 2026-08-06 | N/A | 9.8 CRITICAL |
| In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol | |||||