Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (791 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-123277 1 Jetbrains 1 Clion 2026-11-06 5 Medium
In JetBrains CLion before 2026.3, 2026.2.4.1 missing authentication allowed local users to obtain the debug session environment on Linux
CVE-2026-123337 1 Jetbrains 1 Youtrack 2026-11-06 3.1 Low
In JetBrains YouTrack before 2026.2.19656 users without update permission could change issue visibility
CVE-2026-123291 1 Jetbrains 1 Datalore 2026-11-06 4.3 Medium
In JetBrains Datalore before 2026.4 improper owner validation allowed reading another workspace's issues and runs notebook
CVE-2026-123300 1 Jetbrains 1 Hub 2026-11-06 2.7 Low
In JetBrains Hub before 2026.2.52519 missing authorisation allowed users with read-only access to modify auth module group mappings
CVE-2026-123326 1 Jetbrains 1 Youtrack 2026-11-06 7.1 High
In JetBrains YouTrack before 2026.2.19197 incorrect authorisation in the scripts debugger allowed workflow script disclosure and suspension
CVE-2026-123288 1 Jetbrains 1 Datalore 2026-11-06 5.4 Medium
In JetBrains Datalore before 2026.4 stored XSS in notebook charts was possible via Vega editor link
CVE-2026-123851 1 Jetbrains 1 Junie Github Action 2026-11-06 5.4 Medium
In JetBrains Junie GitHub Action before 1.6.4 prompt injection protection could be bypassed via HTML-encoded characters
CVE-2026-123846 1 Jetbrains 1 Intellij Idea 2026-11-06 4.3 Medium
In JetBrains IntelliJ IDEA before 2026.3 blind SSRF was possible via remote references in JSON Schema validation
CVE-2026-123840 1 Jetbrains 1 Intellij Idea 2026-11-06 4.7 Medium
In JetBrains IntelliJ IDEA before 2026.3 hTML injection was possible in Remote Development editor tabs
CVE-2026-123836 1 Jetbrains 1 Datalore 2026-11-06 8.8 High
In JetBrains Datalore before 2026.4 workspace collaborators could obtain the owner's SSH private key via Git backup
CVE-2026-123834 1 Jetbrains 1 Datalore 2026-11-06 7.5 High
In JetBrains Datalore before 2026.4 improper scope validation in database tasks allowed using another workspace's service account
CVE-2026-123852 1 Jetbrains 1 Junie Github Action 2026-11-06 7.4 High
In JetBrains Junie GitHub Action before 1.8.0 code execution with workflow credentials was possible via fork updates
CVE-2026-123331 1 Jetbrains 1 Youtrack 2026-11-06 5.4 Medium
In JetBrains YouTrack before 2026.2.19197 article editors could change visibility of restricted child articles
CVE-2026-123332 1 Jetbrains 1 Youtrack 2026-11-06 4.7 Medium
In JetBrains YouTrack before 2026.2.19562 missing authorization allowed Project Admin to manage VCS hosting server configurations
CVE-2026-123333 1 Jetbrains 1 Youtrack 2026-11-06 3.8 Low
In JetBrains YouTrack before 2026.2.19562 sprint creation allowed moving issues from inaccessible projects between sprints
CVE-2026-123329 1 Jetbrains 1 Youtrack 2026-11-06 5.4 Medium
In JetBrains YouTrack before 2026.2.19562 missing authorization in TeamCity integration allowed disclosure of other projects' actions
CVE-2026-123330 1 Jetbrains 1 Youtrack 2026-11-06 5.4 Medium
In JetBrains YouTrack before 2026.2.19562 missing authorization allowed users with read-only access to change issue visibility settings
CVE-2026-123335 1 Jetbrains 1 Youtrack 2026-11-06 3.5 Low
In JetBrains YouTrack before 2026.2.19562, 2026.1.14137, 2025.3.169041 missing authorization allowed attaching tags to any issue via the tag issues collection
CVE-2026-123334 1 Jetbrains 1 Youtrack 2026-11-06 3.8 Low
In JetBrains YouTrack before 2026.2.19562 project admins of a related project could delete VCS integrations owned by another project
CVE-2026-123842 1 Jetbrains 1 Intellij Idea 2026-11-06 7.1 High
In JetBrains IntelliJ IDEA before 2026.3 arbitrary file write was possible via symlinks when extracting plugin archives