Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (791 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-123333 1 Jetbrains 1 Youtrack 2026-11-06 3.8 Low
In JetBrains YouTrack before 2026.2.19562 sprint creation allowed moving issues from inaccessible projects between sprints
CVE-2026-123318 1 Jetbrains 1 Ktor 2026-11-06 4.8 Medium
In JetBrains Ktor before 3.6.1 hTTP request smuggling was possible in the CIO engine
CVE-2026-123319 1 Jetbrains 1 Ktor 2026-11-06 3.7 Low
In JetBrains Ktor before 3.6.1 missing Domain attribute validation in client cookie storage allowed cookie injection
CVE-2026-123321 1 Jetbrains 1 Webstorm 2026-11-06 7.8 High
In JetBrains WebStorm before 2026.3, 2026.2.3 code execution via Grunt and Gulp task loading was possible in untrusted projects
CVE-2026-123324 1 Jetbrains 1 Youtrack 2026-11-06 7.7 High
In JetBrains YouTrack before 2026.2.19562 information disclosure via shared mailbox message history was possible
CVE-2026-123325 1 Jetbrains 1 Youtrack 2026-11-06 7.1 High
In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 inclusion of untrusted remote code was possible via the plugin sandbox page
CVE-2026-123328 1 Jetbrains 1 Youtrack 2026-11-06 6.4 Medium
In JetBrains YouTrack before 2026.2.19656 app permission bypass allowed privilege escalation via project tab
CVE-2026-123332 1 Jetbrains 1 Youtrack 2026-11-06 4.7 Medium
In JetBrains YouTrack before 2026.2.19562 missing authorization allowed Project Admin to manage VCS hosting server configurations
CVE-2026-123336 1 Jetbrains 1 Youtrack 2026-11-06 3.1 Low
In JetBrains YouTrack before 2026.2.19728 the attachment size limit could be bypassed via AI assistant thread conversion
CVE-2026-123298 1 Jetbrains 1 Hub 2026-11-06 5 Medium
In JetBrains Hub before 2026.2.52556 sMTP command injection via email verification was possible
CVE-2026-123304 1 Jetbrains 1 Intellij Idea 2026-11-06 7.8 High
In JetBrains IntelliJ IDEA before 2026.3 code execution in untrusted projects via a configured ShellCheck path
CVE-2026-123306 1 Jetbrains 1 Intellij Idea 2026-11-06 7.4 High
In JetBrains IntelliJ IDEA before 2026.3 improper checks allowed server certificates to be added to the trust store during headless runs
CVE-2026-123307 1 Jetbrains 1 Intellij Idea 2026-11-06 6.8 Medium
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 unauthenticated connection to an arbitrary host via run configurations was possible
CVE-2026-123279 1 Jetbrains 1 Datalore 2026-11-06 9 Critical
In JetBrains Datalore before 2026.4 code execution was possible in a notebook's computation by view-only collaborators
CVE-2026-123280 1 Jetbrains 1 Datalore 2026-11-06 8.1 High
In JetBrains Datalore before 2026.2.4 unauthenticated users could execute code via published interactive reports
CVE-2026-123282 1 Jetbrains 1 Datalore 2026-11-06 7.4 High
In JetBrains Datalore before 2026.4 missing expiration validation of account tokens allowed a new authenticated session
CVE-2026-123283 1 Jetbrains 1 Datalore 2026-11-06 6.8 Medium
In JetBrains Datalore before 2026.4 account takeover was possible via SSO sign-in to a pre-registered account
CVE-2026-123284 1 Jetbrains 1 Datalore 2026-11-06 6.5 Medium
In JetBrains Datalore before 2026.4 improper authorisation on workspace moves allowed view-only collaborators to modify shared content
CVE-2026-123285 1 Jetbrains 1 Datalore 2026-11-06 6.3 Medium
In JetBrains Datalore before 2026.3 command execution was possible in the database task container via JVM options injection
CVE-2026-123286 1 Jetbrains 1 Datalore 2026-11-06 5.9 Medium
In JetBrains Datalore before 2026.4 improper authorisation allowed read the notebook owner's file storage session token