Export limit exceeded: 421046 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 421046 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (421046 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-123331 | 1 Jetbrains | 1 Youtrack | 2026-11-06 | 5.4 Medium |
| In JetBrains YouTrack before 2026.2.19197 article editors could change visibility of restricted child articles | ||||
| CVE-2026-123332 | 1 Jetbrains | 1 Youtrack | 2026-11-06 | 4.7 Medium |
| In JetBrains YouTrack before 2026.2.19562 missing authorization allowed Project Admin to manage VCS hosting server configurations | ||||
| CVE-2026-123333 | 1 Jetbrains | 1 Youtrack | 2026-11-06 | 3.8 Low |
| In JetBrains YouTrack before 2026.2.19562 sprint creation allowed moving issues from inaccessible projects between sprints | ||||
| CVE-2026-123334 | 1 Jetbrains | 1 Youtrack | 2026-11-06 | 3.8 Low |
| In JetBrains YouTrack before 2026.2.19562 project admins of a related project could delete VCS integrations owned by another project | ||||
| CVE-2026-123335 | 1 Jetbrains | 1 Youtrack | 2026-11-06 | 3.5 Low |
| In JetBrains YouTrack before 2026.2.19562, 2026.1.14137, 2025.3.169041 missing authorization allowed attaching tags to any issue via the tag issues collection | ||||
| CVE-2026-123857 | 1 Jetbrains | 1 Phpstorm | 2026-11-06 | 4.3 Medium |
| In JetBrains PhpStorm before 2026.3 xXE was possible in untrusted projects via PHPMD ruleset autodetection | ||||
| CVE-2026-123835 | 1 Jetbrains | 1 Datalore | 2026-11-06 | 5.9 Medium |
| In JetBrains Datalore before 2026.4 code execution was possible in another user's computation via an init script upload race condition | ||||
| CVE-2026-123842 | 1 Jetbrains | 1 Intellij Idea | 2026-11-06 | 7.1 High |
| In JetBrains IntelliJ IDEA before 2026.3 arbitrary file write was possible via symlinks when extracting plugin archives | ||||
| CVE-2026-123833 | 1 Jetbrains | 1 Intellij Idea | 2026-11-06 | 3.6 Low |
| In JetBrains IntelliJ IDEA before 2026.3 database connections could be established in untrusted projects | ||||
| CVE-2026-120952 | 1 Mongodb | 1 Atlas Sql Odbc Driver | 2026-11-06 | 7.1 High |
| An out-of-bounds write in the MongoDB Atlas SQL ODBC Driver may be triggered when a value of a particular database type is retrieved into a fixed-width client-side target. The driver produces a textual form of the value that is longer than the fixed target the ODBC interface defines, and copies it without limiting the copy to the target's real size. A database user with basic write privileges can influence part of the data written outside the target, which may corrupt memory in the application using the driver and cause that application to terminate unexpectedly. | ||||
| CVE-2026-120567 | 1 Mongodb | 1 Entity Framework Core Provider | 2026-11-06 | 5.4 Medium |
| The MongoDB Entity Framework Core provider does not neutralize special elements in values passed to SetProperty when an ExecuteUpdate call also contains a setter that reads the entity being updated. In that case the update is sent as an aggregation pipeline, and a caller-supplied string beginning with $ is evaluated as an expression rather than stored as data. A party who can influence such a value may modify or remove fields in the records being updated, or copy other fields of the same record into them. | ||||
| CVE-2026-123839 | 1 Jetbrains | 1 Intellij Idea | 2026-11-06 | 4.7 Medium |
| In JetBrains IntelliJ IDEA before 2026.3 opening arbitrary URLs without confirmation was possible via the Remote Development port forwarding model | ||||
| CVE-2026-123843 | 1 Jetbrains | 1 Intellij Idea | 2026-11-06 | 3.3 Low |
| In JetBrains IntelliJ IDEA before 2026.3 untrusted projects could trigger changes to GPG agent configuration | ||||
| CVE-2026-123844 | 1 Jetbrains | 1 Intellij Idea | 2026-11-06 | 5.3 Medium |
| In JetBrains IntelliJ IDEA before 2026.3 sSRF was possible via custom plugin repositories | ||||
| CVE-2026-123845 | 1 Jetbrains | 1 Intellij Idea | 2026-11-06 | 3.3 Low |
| In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via JSON Schema references in untrusted projects | ||||
| CVE-2026-123850 | 1 Jetbrains | 1 Youtrack | 2026-11-06 | 3.5 Low |
| In JetBrains YouTrack before 2026.2.19422 cSS injection was possible in Mermaid diagrams via configuration directives | ||||
| CVE-2026-123856 | 1 Jetbrains | 1 Toolbox | 2026-11-06 | 6.5 Medium |
| In JetBrains Toolbox App before 3.6.1 nTLM hash disclosure was possible via SVG tool icons from a Remote Development server | ||||
| CVE-2026-123858 | 1 Jetbrains | 1 Phpstorm | 2026-11-06 | 4.4 Medium |
| In JetBrains PhpStorm before 2026.3 project files could be automatically uploaded to a deployment server from untrusted projects | ||||
| CVE-2026-95725 | 2026-11-06 | 7.8 High | ||
| A command injection vulnerability exists in the VIA client for Linux. Successful exploitation could allow a low-privileged local attacker to execute arbitrary commands with elevated privileges on the affected system. | ||||
| CVE-2026-95723 | 2026-11-06 | 8.4 High | ||
| A missing integrity verification vulnerability has been discovered in the Virtual Intranet Access (VIA) client. Successful exploitation of this vulnerability could allow a low-privileged local attacker to execute arbitrary code with elevated privileges on the underlying operating system. | ||||