Filtered by vendor Jetbrains
Subscriptions
Total
698 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-103496 | 1 Jetbrains | 1 Youtrack | 2026-10-01 | 5.4 Medium |
| In JetBrains YouTrack before 2026.2.19422 iDOR in inbox threads allowed reading other users' notifications | ||||
| CVE-2026-103495 | 1 Jetbrains | 1 Youtrack | 2026-10-01 | 4.3 Medium |
| In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation catalogs | ||||
| CVE-2026-103494 | 1 Jetbrains | 1 Youtrack | 2026-10-01 | 6.6 Medium |
| In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group membership changes | ||||
| CVE-2026-103492 | 1 Jetbrains | 1 Youtrack | 2026-10-01 | 6.5 Medium |
| In JetBrains YouTrack before 2026.2.19422 doS attack was possible via crafted PSD attachments | ||||
| CVE-2026-63077 | 1 Jetbrains | 1 Teamcity | 2026-09-28 | 9.8 Critical |
| In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol | ||||
| CVE-2026-49373 | 1 Jetbrains | 1 Teamcity | 2026-09-24 | 7.1 High |
| In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection settings | ||||
| CVE-2026-86482 | 1 Jetbrains | 1 Youtrack | 2026-09-22 | 8.8 High |
| In JetBrains YouTrack before 2026.2.18634, insufficient validation of role assignments allowed privilege escalation | ||||
| CVE-2026-75057 | 1 Jetbrains | 1 Intellij Idea | 2026-09-17 | 6.2 Medium |
| In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log | ||||
| CVE-2026-75049 | 1 Jetbrains | 1 Youtrack | 2026-09-15 | 6.5 Medium |
| In JetBrains YouTrack before 2026.1.13903, 2026.2.17950 an authenticated user could read restricted articles from other projects via the draft creation endpoint | ||||
| CVE-2026-75048 | 1 Jetbrains | 1 Youtrack | 2026-09-15 | 8.2 High |
| In JetBrains YouTrack before 2026.2.18068 stored XSS via the fenced code-block language label was possible | ||||
| CVE-2026-75047 | 1 Jetbrains | 1 Youtrack | 2026-09-15 | 6.5 Medium |
| In JetBrains YouTrack before 2026.2.18177 doS attack was possible via a decompression bomb in the import endpoint | ||||
| CVE-2026-75046 | 1 Jetbrains | 1 Youtrack | 2026-09-15 | 4.3 Medium |
| In JetBrains YouTrack before 2026.2.18112 an authenticated user could enumerate accounts via the users search endpoint | ||||
| CVE-2026-75044 | 1 Jetbrains | 1 Youtrack | 2026-09-15 | 8.1 High |
| In JetBrains YouTrack before 2025.3.156085, 2026.1.13914, 2026.2.18095 missing authorisation allowed an authenticated user to delete arbitrary entities via the mailbox endpoint | ||||
| CVE-2026-75045 | 1 Jetbrains | 1 Youtrack | 2026-09-15 | 9.1 Critical |
| In JetBrains YouTrack before 2025.3.156085, 2026.1.13913, 2026.2.18112 an unauthenticated attacker could download database backups via shared draft signature | ||||
| CVE-2026-75050 | 1 Jetbrains | 1 Youtrack | 2026-09-15 | 7.1 High |
| In JetBrains YouTrack before 2026.1.13901, 2026.2.17950 doS attack was possible via crafted type parameters | ||||
| CVE-2026-75051 | 1 Jetbrains | 1 Youtrack | 2026-09-15 | 8.1 High |
| In JetBrains YouTrack before 2026.2.17917 unauthorised project transfer between organisations was possible | ||||
| CVE-2026-75053 | 1 Jetbrains | 1 Intellij Idea | 2026-09-11 | 5.4 Medium |
| In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint | ||||
| CVE-2026-75054 | 1 Jetbrains | 1 Intellij Idea | 2026-09-11 | 6.3 Medium |
| In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in untrusted projects | ||||
| CVE-2026-75055 | 1 Jetbrains | 1 Intellij Idea | 2026-09-11 | 5.5 Medium |
| In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE | ||||
| CVE-2026-75056 | 1 Jetbrains | 1 Intellij Idea | 2026-09-11 | 7.8 High |
| In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible | ||||