Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (791 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-123325 1 Jetbrains 1 Youtrack 2026-11-07 7.1 High
In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 inclusion of untrusted remote code was possible via the plugin sandbox page
CVE-2026-123298 1 Jetbrains 1 Hub 2026-11-07 5 Medium
In JetBrains Hub before 2026.2.52556 sMTP command injection via email verification was possible
CVE-2026-123296 1 Jetbrains 1 Hub 2026-11-07 7.5 High
In JetBrains Hub before 2026.2.52519 privilege escalation via forged email verification was possible
CVE-2026-123294 1 Jetbrains 1 Hub 2026-11-07 9.6 Critical
In JetBrains Hub before 2026.2.52556 privilege escalation was possible by changing email authentication details during the verification flow
CVE-2026-123276 1 Jetbrains 1 Clion 2026-11-07 7.8 High
In JetBrains CLion before 2026.3, 2026.2.4.1 code execution was possible in Safe Mode via a crafted GDB server debug profile
CVE-2026-123289 1 Jetbrains 1 Datalore 2026-11-06 5.4 Medium
In JetBrains Datalore before 2026.4 improper authorisation allowed notebook viewers to modify files
CVE-2026-123288 1 Jetbrains 1 Datalore 2026-11-06 5.4 Medium
In JetBrains Datalore before 2026.4 stored XSS in notebook charts was possible via Vega editor link
CVE-2026-123299 1 Jetbrains 1 Hub 2026-11-06 3.1 Low
In JetBrains Hub before 2026.2.52519 information disclosure via user search queries was possible
CVE-2026-123277 1 Jetbrains 1 Clion 2026-11-06 5 Medium
In JetBrains CLion before 2026.3, 2026.2.4.1 missing authentication allowed local users to obtain the debug session environment on Linux
CVE-2026-123300 1 Jetbrains 1 Hub 2026-11-06 2.7 Low
In JetBrains Hub before 2026.2.52519 missing authorisation allowed users with read-only access to modify auth module group mappings
CVE-2026-123327 1 Jetbrains 1 Youtrack 2026-11-06 7.5 High
In JetBrains YouTrack before 2026.2.19562 missing authorization in the saved query endpoint allowed disclosure of issue descriptions
CVE-2026-123324 1 Jetbrains 1 Youtrack 2026-11-06 7.7 High
In JetBrains YouTrack before 2026.2.19562 information disclosure via shared mailbox message history was possible
CVE-2026-123326 1 Jetbrains 1 Youtrack 2026-11-06 7.1 High
In JetBrains YouTrack before 2026.2.19197 incorrect authorisation in the scripts debugger allowed workflow script disclosure and suspension
CVE-2026-123336 1 Jetbrains 1 Youtrack 2026-11-06 3.1 Low
In JetBrains YouTrack before 2026.2.19728 the attachment size limit could be bypassed via AI assistant thread conversion
CVE-2026-123290 1 Jetbrains 1 Datalore 2026-11-06 5.3 Medium
In JetBrains Datalore before 2026.4 hidden notebook code was exposed to unauthenticated users via the public interactive report content endpoint
CVE-2026-123291 1 Jetbrains 1 Datalore 2026-11-06 4.3 Medium
In JetBrains Datalore before 2026.4 improper owner validation allowed reading another workspace's issues and runs notebook
CVE-2026-123292 1 Jetbrains 1 Datalore 2026-11-06 2.7 Low
In JetBrains Datalore before 2026.4 aPI tokens and sessions of removed or banned users remained valid
CVE-2026-123337 1 Jetbrains 1 Youtrack 2026-11-06 3.1 Low
In JetBrains YouTrack before 2026.2.19656 users without update permission could change issue visibility
CVE-2026-123851 1 Jetbrains 1 Junie Github Action 2026-11-06 5.4 Medium
In JetBrains Junie GitHub Action before 1.6.4 prompt injection protection could be bypassed via HTML-encoded characters
CVE-2026-123836 1 Jetbrains 1 Datalore 2026-11-06 8.8 High
In JetBrains Datalore before 2026.4 workspace collaborators could obtain the owner's SSH private key via Git backup