Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (791 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-123833 1 Jetbrains 1 Intellij Idea 2026-11-06 3.6 Low
In JetBrains IntelliJ IDEA before 2026.3 database connections could be established in untrusted projects
CVE-2026-123842 1 Jetbrains 1 Intellij Idea 2026-11-06 7.1 High
In JetBrains IntelliJ IDEA before 2026.3 arbitrary file write was possible via symlinks when extracting plugin archives
CVE-2026-123844 1 Jetbrains 1 Intellij Idea 2026-11-06 5.3 Medium
In JetBrains IntelliJ IDEA before 2026.3 sSRF was possible via custom plugin repositories
CVE-2026-123839 1 Jetbrains 1 Intellij Idea 2026-11-06 4.7 Medium
In JetBrains IntelliJ IDEA before 2026.3 opening arbitrary URLs without confirmation was possible via the Remote Development port forwarding model
CVE-2026-123857 1 Jetbrains 1 Phpstorm 2026-11-06 4.3 Medium
In JetBrains PhpStorm before 2026.3 xXE was possible in untrusted projects via PHPMD ruleset autodetection
CVE-2026-123845 1 Jetbrains 1 Intellij Idea 2026-11-06 3.3 Low
In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via JSON Schema references in untrusted projects
CVE-2026-123843 1 Jetbrains 1 Intellij Idea 2026-11-06 3.3 Low
In JetBrains IntelliJ IDEA before 2026.3 untrusted projects could trigger changes to GPG agent configuration
CVE-2026-123835 1 Jetbrains 1 Datalore 2026-11-06 5.9 Medium
In JetBrains Datalore before 2026.4 code execution was possible in another user's computation via an init script upload race condition
CVE-2026-123850 1 Jetbrains 1 Youtrack 2026-11-06 3.5 Low
In JetBrains YouTrack before 2026.2.19422 cSS injection was possible in Mermaid diagrams via configuration directives
CVE-2026-123856 1 Jetbrains 1 Toolbox 2026-11-06 6.5 Medium
In JetBrains Toolbox App before 3.6.1 nTLM hash disclosure was possible via SVG tool icons from a Remote Development server
CVE-2026-123315 1 Jetbrains 1 Junie 2026-11-06 7 High
In JetBrains Junie CLI before 26.8.24 command execution was possible via the Allow Similar Commands option
CVE-2026-123322 1 Jetbrains 1 Webstorm 2026-11-06 6.3 Medium
In JetBrains WebStorm before 2026.3, 2026.2.4 code execution was possible in untrusted projects via the Angular CLI schematics loader
CVE-2026-123312 1 Jetbrains 1 Intellij Idea 2026-11-06 3.3 Low
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 sSRF was possible via annotations.xml files during indexing
CVE-2026-123323 1 Jetbrains 1 Youtrack 2026-11-06 8.4 High
In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 improper URL validation in the app widget host allowed apps to send REST requests without user confirmation
CVE-2026-123301 1 Jetbrains 1 Intellij Idea 2026-11-06 8.2 High
In JetBrains IntelliJ IDEA before 2026.3 dOM-based XSS in the OpenAPI preview error view was possible
CVE-2026-123281 1 Jetbrains 1 Datalore 2026-11-06 7.5 High
In JetBrains Datalore before 2026.4 notebook code could execute commands in the sidecar container via the mount broker
CVE-2026-123310 1 Jetbrains 1 Intellij Idea 2026-11-06 5.4 Medium
In JetBrains IntelliJ IDEA before 2026.3 kotlin scripts could trigger dependency downloads from arbitrary repositories in untrusted projects
CVE-2026-123320 1 Jetbrains 1 Toolbox 2026-11-06 3.1 Low
In JetBrains Toolbox App before 3.9 insufficient warning in the login dialog allowed connecting to a malicious server
CVE-2026-123318 1 Jetbrains 1 Ktor 2026-11-06 4.8 Medium
In JetBrains Ktor before 3.6.1 hTTP request smuggling was possible in the CIO engine
CVE-2026-123319 1 Jetbrains 1 Ktor 2026-11-06 3.7 Low
In JetBrains Ktor before 3.6.1 missing Domain attribute validation in client cookie storage allowed cookie injection