Filtered by vendor Jetbrains Subscriptions
Total 763 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-123315 1 Jetbrains 1 Junie 2026-11-06 7 High
In JetBrains Junie CLI before 26.8.24 command execution was possible via the Allow Similar Commands option
CVE-2026-123322 1 Jetbrains 1 Webstorm 2026-11-06 6.3 Medium
In JetBrains WebStorm before 2026.3, 2026.2.4 code execution was possible in untrusted projects via the Angular CLI schematics loader
CVE-2026-123330 1 Jetbrains 1 Youtrack 2026-11-06 5.4 Medium
In JetBrains YouTrack before 2026.2.19562 missing authorization allowed users with read-only access to change issue visibility settings
CVE-2026-123331 1 Jetbrains 1 Youtrack 2026-11-06 5.4 Medium
In JetBrains YouTrack before 2026.2.19197 article editors could change visibility of restricted child articles
CVE-2026-123334 1 Jetbrains 1 Youtrack 2026-11-06 3.8 Low
In JetBrains YouTrack before 2026.2.19562 project admins of a related project could delete VCS integrations owned by another project
CVE-2026-123291 1 Jetbrains 1 Datalore 2026-11-06 4.3 Medium
In JetBrains Datalore before 2026.4 improper owner validation allowed reading another workspace's issues and runs notebook
CVE-2026-123296 1 Jetbrains 1 Hub 2026-11-06 7.5 High
In JetBrains Hub before 2026.2.52519 privilege escalation via forged email verification was possible
CVE-2026-123312 1 Jetbrains 1 Intellij Idea 2026-11-06 3.3 Low
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 sSRF was possible via annotations.xml files during indexing
CVE-2026-123317 1 Jetbrains 1 Ktor 2026-11-06 8.1 High
In JetBrains Ktor before 3.6.1 session forgery was possible via tampered encrypted session cookies
CVE-2026-123326 1 Jetbrains 1 Youtrack 2026-11-06 7.1 High
In JetBrains YouTrack before 2026.2.19197 incorrect authorisation in the scripts debugger allowed workflow script disclosure and suspension
CVE-2026-123323 1 Jetbrains 1 Youtrack 2026-11-06 8.4 High
In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 improper URL validation in the app widget host allowed apps to send REST requests without user confirmation
CVE-2026-123335 1 Jetbrains 1 Youtrack 2026-11-06 3.5 Low
In JetBrains YouTrack before 2026.2.19562, 2026.1.14137, 2025.3.169041 missing authorization allowed attaching tags to any issue via the tag issues collection
CVE-2026-123337 1 Jetbrains 1 Youtrack 2026-11-06 3.1 Low
In JetBrains YouTrack before 2026.2.19656 users without update permission could change issue visibility
CVE-2026-123301 1 Jetbrains 1 Intellij Idea 2026-11-06 8.2 High
In JetBrains IntelliJ IDEA before 2026.3 dOM-based XSS in the OpenAPI preview error view was possible
CVE-2026-123276 1 Jetbrains 1 Clion 2026-11-06 7.8 High
In JetBrains CLion before 2026.3, 2026.2.4.1 code execution was possible in Safe Mode via a crafted GDB server debug profile
CVE-2026-123277 1 Jetbrains 1 Clion 2026-11-06 5 Medium
In JetBrains CLion before 2026.3, 2026.2.4.1 missing authentication allowed local users to obtain the debug session environment on Linux
CVE-2026-123278 1 Jetbrains 1 Intellij Idea 2026-11-06 6.7 Medium
In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via the unauthenticated JDBC worker RMI endpoint
CVE-2026-123281 1 Jetbrains 1 Datalore 2026-11-06 7.5 High
In JetBrains Datalore before 2026.4 notebook code could execute commands in the sidecar container via the mount broker
CVE-2026-123294 1 Jetbrains 1 Hub 2026-11-06 9.6 Critical
In JetBrains Hub before 2026.2.52556 privilege escalation was possible by changing email authentication details during the verification flow
CVE-2026-123297 1 Jetbrains 1 Hub 2026-11-06 6.8 Medium
In JetBrains Hub before 2026.2.52519 two-factor authentication bypass was possible via the password reset flow