Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (791 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-123851 1 Jetbrains 1 Junie Github Action 2026-11-06 5.4 Medium
In JetBrains Junie GitHub Action before 1.6.4 prompt injection protection could be bypassed via HTML-encoded characters
CVE-2026-123846 1 Jetbrains 1 Intellij Idea 2026-11-06 4.3 Medium
In JetBrains IntelliJ IDEA before 2026.3 blind SSRF was possible via remote references in JSON Schema validation
CVE-2026-123840 1 Jetbrains 1 Intellij Idea 2026-11-06 4.7 Medium
In JetBrains IntelliJ IDEA before 2026.3 hTML injection was possible in Remote Development editor tabs
CVE-2026-123836 1 Jetbrains 1 Datalore 2026-11-06 8.8 High
In JetBrains Datalore before 2026.4 workspace collaborators could obtain the owner's SSH private key via Git backup
CVE-2026-123834 1 Jetbrains 1 Datalore 2026-11-06 7.5 High
In JetBrains Datalore before 2026.4 improper scope validation in database tasks allowed using another workspace's service account
CVE-2026-123852 1 Jetbrains 1 Junie Github Action 2026-11-06 7.4 High
In JetBrains Junie GitHub Action before 1.8.0 code execution with workflow credentials was possible via fork updates
CVE-2026-123330 1 Jetbrains 1 Youtrack 2026-11-06 5.4 Medium
In JetBrains YouTrack before 2026.2.19562 missing authorization allowed users with read-only access to change issue visibility settings
CVE-2026-123331 1 Jetbrains 1 Youtrack 2026-11-06 5.4 Medium
In JetBrains YouTrack before 2026.2.19197 article editors could change visibility of restricted child articles
CVE-2026-123329 1 Jetbrains 1 Youtrack 2026-11-06 5.4 Medium
In JetBrains YouTrack before 2026.2.19562 missing authorization in TeamCity integration allowed disclosure of other projects' actions
CVE-2026-123333 1 Jetbrains 1 Youtrack 2026-11-06 3.8 Low
In JetBrains YouTrack before 2026.2.19562 sprint creation allowed moving issues from inaccessible projects between sprints
CVE-2026-123334 1 Jetbrains 1 Youtrack 2026-11-06 3.8 Low
In JetBrains YouTrack before 2026.2.19562 project admins of a related project could delete VCS integrations owned by another project
CVE-2026-123335 1 Jetbrains 1 Youtrack 2026-11-06 3.5 Low
In JetBrains YouTrack before 2026.2.19562, 2026.1.14137, 2025.3.169041 missing authorization allowed attaching tags to any issue via the tag issues collection
CVE-2026-123332 1 Jetbrains 1 Youtrack 2026-11-06 4.7 Medium
In JetBrains YouTrack before 2026.2.19562 missing authorization allowed Project Admin to manage VCS hosting server configurations
CVE-2026-123842 1 Jetbrains 1 Intellij Idea 2026-11-06 7.1 High
In JetBrains IntelliJ IDEA before 2026.3 arbitrary file write was possible via symlinks when extracting plugin archives
CVE-2026-123835 1 Jetbrains 1 Datalore 2026-11-06 5.9 Medium
In JetBrains Datalore before 2026.4 code execution was possible in another user's computation via an init script upload race condition
CVE-2026-123843 1 Jetbrains 1 Intellij Idea 2026-11-06 3.3 Low
In JetBrains IntelliJ IDEA before 2026.3 untrusted projects could trigger changes to GPG agent configuration
CVE-2026-123850 1 Jetbrains 1 Youtrack 2026-11-06 3.5 Low
In JetBrains YouTrack before 2026.2.19422 cSS injection was possible in Mermaid diagrams via configuration directives
CVE-2026-123857 1 Jetbrains 1 Phpstorm 2026-11-06 4.3 Medium
In JetBrains PhpStorm before 2026.3 xXE was possible in untrusted projects via PHPMD ruleset autodetection
CVE-2026-123839 1 Jetbrains 1 Intellij Idea 2026-11-06 4.7 Medium
In JetBrains IntelliJ IDEA before 2026.3 opening arbitrary URLs without confirmation was possible via the Remote Development port forwarding model
CVE-2026-123844 1 Jetbrains 1 Intellij Idea 2026-11-06 5.3 Medium
In JetBrains IntelliJ IDEA before 2026.3 sSRF was possible via custom plugin repositories