Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (791 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-57922 1 Jetbrains 1 Youtrack 2026-06-26 3.1 Low
In JetBrains YouTrack before 2026.2.16593 project settings disclosure via the MCP was possible
CVE-2026-53914 1 Jetbrains 1 Kotlin 2026-06-26 6.7 Medium
In JetBrains Kotlin before 2.4.20 code execution was possible via unsafe deserialization in the build cache metadata
CVE-2026-53915 1 Jetbrains 1 Goland 2026-06-25 7.1 High
In JetBrains GoLand before 2026.1.3 remote code execution was possible via untrusted project configuration
CVE-2026-50242 1 Jetbrains 1 Hub 2026-06-22 10 Critical
In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via direct database access leading to administrative access was possible
CVE-2026-56142 1 Jetbrains 1 Hub 2026-06-22 9.6 Critical
In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 privilege escalation by attaching authentication details to accounts was possible
CVE-2026-56141 1 Jetbrains 1 Hub 2026-06-22 9.8 Critical
In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 account takeover via predictable restore codes was possible
CVE-2026-28195 1 Jetbrains 1 Teamcity 2026-06-17 4.3 Medium
In JetBrains TeamCity before 2025.11.3 missing authorization allowed project developers to add parameters to build configurations
CVE-2022-46831 1 Jetbrains 1 Teamcity 2026-06-17 6.6 Medium
In JetBrains TeamCity between 2022.10 and 2022.10.1 connecting to AWS using the "Default Credential Provider Chain" allowed TeamCity project administrators to access AWS resources normally limited to TeamCity system administrators.
CVE-2026-49374 1 Jetbrains 1 Teamcity 2026-06-02 7.6 High
In JetBrains TeamCity before 2026.1 improper permission checks exposed build configuration parameters
CVE-2026-49375 1 Jetbrains 1 Teamcity 2026-06-02 6.1 Medium
In JetBrains TeamCity before 2026.1, 2025.11.5 reflected XSS was possible on the repository download page
CVE-2026-49376 1 Jetbrains 1 Teamcity 2026-06-02 6.5 Medium
In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML plugin
CVE-2026-49377 1 Jetbrains 1 Teamcity 2026-06-02 4.3 Medium
In JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent parameters
CVE-2026-49378 1 Jetbrains 1 Teamcity 2026-06-02 4.3 Medium
In JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletion
CVE-2026-49379 1 Jetbrains 1 Teamcity 2026-06-02 6.5 Medium
In JetBrains TeamCity before 2026.1 credentials could be exposed in thread names
CVE-2026-49380 1 Jetbrains 1 Teamcity 2026-06-02 3.1 Low
In JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possible
CVE-2026-49381 1 Jetbrains 1 Teamcity 2026-06-02 3.4 Low
In JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possible
CVE-2026-49372 1 Jetbrains 1 Teamcity 2026-06-02 7.5 High
In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build status was possible
CVE-2026-49371 1 Jetbrains 1 Teamcity 2026-06-02 7.1 High
In JetBrains TeamCity before 2026.1.1 reflected XSS in the keyword filter was possible
CVE-2026-49382 1 Jetbrains 1 Intellij Idea 2026-06-01 4.5 Medium
In JetBrains IntelliJ IDEA before 2026.1 code execution was possible via template injection in the Copyright plugin
CVE-2026-49366 1 Jetbrains 1 Intellij Idea 2026-06-01 7.8 High
In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion