Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (17 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-123834 1 Jetbrains 1 Datalore 2026-11-06 7.5 High
In JetBrains Datalore before 2026.4 improper scope validation in database tasks allowed using another workspace's service account
CVE-2026-123291 1 Jetbrains 1 Datalore 2026-11-06 4.3 Medium
In JetBrains Datalore before 2026.4 improper owner validation allowed reading another workspace's issues and runs notebook
CVE-2026-123281 1 Jetbrains 1 Datalore 2026-11-06 7.5 High
In JetBrains Datalore before 2026.4 notebook code could execute commands in the sidecar container via the mount broker
CVE-2026-123290 1 Jetbrains 1 Datalore 2026-11-06 5.3 Medium
In JetBrains Datalore before 2026.4 hidden notebook code was exposed to unauthenticated users via the public interactive report content endpoint
CVE-2026-123279 1 Jetbrains 1 Datalore 2026-11-06 9 Critical
In JetBrains Datalore before 2026.4 code execution was possible in a notebook's computation by view-only collaborators
CVE-2026-123280 1 Jetbrains 1 Datalore 2026-11-06 8.1 High
In JetBrains Datalore before 2026.2.4 unauthenticated users could execute code via published interactive reports
CVE-2026-123282 1 Jetbrains 1 Datalore 2026-11-06 7.4 High
In JetBrains Datalore before 2026.4 missing expiration validation of account tokens allowed a new authenticated session
CVE-2026-123283 1 Jetbrains 1 Datalore 2026-11-06 6.8 Medium
In JetBrains Datalore before 2026.4 account takeover was possible via SSO sign-in to a pre-registered account
CVE-2026-123284 1 Jetbrains 1 Datalore 2026-11-06 6.5 Medium
In JetBrains Datalore before 2026.4 improper authorisation on workspace moves allowed view-only collaborators to modify shared content
CVE-2026-123285 1 Jetbrains 1 Datalore 2026-11-06 6.3 Medium
In JetBrains Datalore before 2026.3 command execution was possible in the database task container via JVM options injection
CVE-2026-123286 1 Jetbrains 1 Datalore 2026-11-06 5.9 Medium
In JetBrains Datalore before 2026.4 improper authorisation allowed read the notebook owner's file storage session token
CVE-2026-123287 1 Jetbrains 1 Datalore 2026-11-06 5.9 Medium
In JetBrains Datalore before 2026.4 private notebook files could be downloaded without authentication via published interactive reports
CVE-2026-123288 1 Jetbrains 1 Datalore 2026-11-06 5.4 Medium
In JetBrains Datalore before 2026.4 stored XSS in notebook charts was possible via Vega editor link
CVE-2026-123289 1 Jetbrains 1 Datalore 2026-11-06 5.4 Medium
In JetBrains Datalore before 2026.4 improper authorisation allowed notebook viewers to modify files
CVE-2026-123292 1 Jetbrains 1 Datalore 2026-11-06 2.7 Low
In JetBrains Datalore before 2026.4 aPI tokens and sessions of removed or banned users remained valid
CVE-2026-111093 1 Jetbrains 1 Datalore 2026-10-24 7.5 High
In JetBrains Datalore before 2026.2.1 unauthenticated path traversal via the report blob endpoint allowed reading arbitrary files
CVE-2026-32745 1 Jetbrains 1 Datalore 2026-04-02 6.3 Medium
In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settings