Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (791 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-123337 1 Jetbrains 1 Youtrack 2026-11-06 3.1 Low
In JetBrains YouTrack before 2026.2.19656 users without update permission could change issue visibility
CVE-2026-123301 1 Jetbrains 1 Intellij Idea 2026-11-06 8.2 High
In JetBrains IntelliJ IDEA before 2026.3 dOM-based XSS in the OpenAPI preview error view was possible
CVE-2026-123276 1 Jetbrains 1 Clion 2026-11-06 7.8 High
In JetBrains CLion before 2026.3, 2026.2.4.1 code execution was possible in Safe Mode via a crafted GDB server debug profile
CVE-2026-123277 1 Jetbrains 1 Clion 2026-11-06 5 Medium
In JetBrains CLion before 2026.3, 2026.2.4.1 missing authentication allowed local users to obtain the debug session environment on Linux
CVE-2026-123278 1 Jetbrains 1 Intellij Idea 2026-11-06 6.7 Medium
In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via the unauthenticated JDBC worker RMI endpoint
CVE-2026-123281 1 Jetbrains 1 Datalore 2026-11-06 7.5 High
In JetBrains Datalore before 2026.4 notebook code could execute commands in the sidecar container via the mount broker
CVE-2026-123294 1 Jetbrains 1 Hub 2026-11-06 9.6 Critical
In JetBrains Hub before 2026.2.52556 privilege escalation was possible by changing email authentication details during the verification flow
CVE-2026-123297 1 Jetbrains 1 Hub 2026-11-06 6.8 Medium
In JetBrains Hub before 2026.2.52519 two-factor authentication bypass was possible via the password reset flow
CVE-2026-123299 1 Jetbrains 1 Hub 2026-11-06 3.1 Low
In JetBrains Hub before 2026.2.52519 information disclosure via user search queries was possible
CVE-2026-123300 1 Jetbrains 1 Hub 2026-11-06 2.7 Low
In JetBrains Hub before 2026.2.52519 missing authorisation allowed users with read-only access to modify auth module group mappings
CVE-2026-123308 1 Jetbrains 1 Intellij Idea 2026-11-06 6.3 Medium
In JetBrains IntelliJ IDEA before 2026.3 code execution via the document import was possible in untrusted projects
CVE-2026-123309 1 Jetbrains 1 Intellij Idea 2026-11-06 6.1 Medium
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 stored XSS was possible on the built-in web server via Markdown preview
CVE-2026-123329 1 Jetbrains 1 Youtrack 2026-11-06 5.4 Medium
In JetBrains YouTrack before 2026.2.19562 missing authorization in TeamCity integration allowed disclosure of other projects' actions
CVE-2026-123290 1 Jetbrains 1 Datalore 2026-11-06 5.3 Medium
In JetBrains Datalore before 2026.4 hidden notebook code was exposed to unauthenticated users via the public interactive report content endpoint
CVE-2026-123302 1 Jetbrains 1 Intellij Idea 2026-11-06 7.8 High
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4, 2026.1.5.1, 2025.3.6.2 code execution was possible in untrusted projects via script engine discovery
CVE-2026-123305 1 Jetbrains 1 Intellij Idea 2026-11-06 7.5 High
In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via unpacking Dev Container archives from a remote host
CVE-2026-123310 1 Jetbrains 1 Intellij Idea 2026-11-06 5.4 Medium
In JetBrains IntelliJ IDEA before 2026.3 kotlin scripts could trigger dependency downloads from arbitrary repositories in untrusted projects
CVE-2026-123311 1 Jetbrains 1 Intellij Idea 2026-11-06 5.3 Medium
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 command execution via a hidden run control in the Markdown preview was possible
CVE-2026-123320 1 Jetbrains 1 Toolbox 2026-11-06 3.1 Low
In JetBrains Toolbox App before 3.9 insufficient warning in the login dialog allowed connecting to a malicious server
CVE-2026-123327 1 Jetbrains 1 Youtrack 2026-11-06 7.5 High
In JetBrains YouTrack before 2026.2.19562 missing authorization in the saved query endpoint allowed disclosure of issue descriptions