Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on Users and Groups pagesCheck if you run itEPSS 0.27%May 29, 2026
- Medium5.4In JetBrains YouTrack before 2026.1.13162 stored XSS in project notification templates was possibleCheck if you run itEPSS 0.27%May 29, 2026
- High8.8In JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user accountCheck if you run itEPSS 0.51%May 29, 2026
- High7.8In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completionCheck if you run itEPSS 0.68%May 29, 2026
- High7.5In JetBrains TeamCity before 2026.1 2025.11.5 authenticated users could expose server API to unauthorised accessCheck if you run itEPSS 0.34%May 11, 2026
- High7.5In JetBrains IntelliJ IDEA before 2024.3.7.1, 2025.1.7.1, 2025.2.6.2, 2025.3.4.1, 2026.1.1 reading arbitrary local files was possible via built-in web serverCheck if you run itEPSS 0.44%Apr 30, 2026
- Critical9.8In JetBrains Junie before 252.549.29 command execution was possible via malicious project fileCheck if you run itEPSS 0.35%Apr 17, 2026
- High7.2In JetBrains YouTrack before 2025.3.131383 high privileged user can achieve RCE via sandbox bypassCheck if you run itEPSS 0.54%Apr 17, 2026
- Medium5.7In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settingsCheck if you run itEPSS 0.16%Mar 13, 2026
- Medium6.8In JetBrains Hub before 2026.1 possible on sign-in account mismatch with non-SSO auth and 2FA disabledCheck if you run itEPSS 0.29%Mar 11, 2026
- Low2.3In JetBrains TeamCity before 2025.11.3 disabling versioned settings left a credentials config on diskCheck if you run itEPSS 0.18%Feb 25, 2026
- Medium4.3In JetBrains TeamCity before 2025.11.3 missing authorization allowed project developers to add parameters to build configurationsCheck if you run itEPSS 0.27%Feb 25, 2026
- Medium6.1In JetBrains TeamCity before 2025.11.3 open redirect was possible in the React project creation flowCheck if you run itEPSS 0.30%Feb 25, 2026
- Medium5.3In JetBrains YouTrack before 2025.3.121962 apps were able to send requests to the app permissions endpointCheck if you run itEPSS 0.36%Feb 25, 2026
- UnknownJetBrains TeamCity Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 54.01%Oct 17, 2025
- Low3.5In JetBrains TeamCity before 2025.03.1 stored XSS was possible on Data Directory tabCheck this weekEPSS 63.03%Apr 25, 2025
- Medium4.9In JetBrains TeamCity before 2025.03.1 improper path validation in loggingPreset parameter was possibleCheck if you run itEPSS 0.55%Apr 25, 2025
- Medium4.3In JetBrains TeamCity before 2025.03.1 base64-encoded credentials could be exposed in build logsCheck if you run itEPSS 1.01%Apr 25, 2025
- Medium5.4In JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug sessionCheck if you run itEPSS 0.37%Apr 25, 2025
- High8.3In JetBrains RubyMine before 2025.1 remote Interpreter overwrote ports to listen on all interfacesCheck if you run itEPSS 0.25%Apr 17, 2025
- Medium6.1In JetBrains Toolbox App before 2.6 the SSH plugin established connections without sufficient user confirmationCheck if you run itEPSS 0.23%Apr 17, 2025
- Medium6.9In JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication was possibleCheck if you run itEPSS 0.15%Apr 17, 2025
- High8.3In JetBrains Toolbox App before 2.6 command injection in SSH plugin was possibleCheck if you run itEPSS 0.63%Apr 17, 2025
- Medium4.2In JetBrains Toolbox App before 2.6 host key verification was missing in SSH pluginCheck if you run itEPSS 0.20%Apr 17, 2025
- High7.3JetBrains TeamCity Relative Path Traversal VulnerabilityPatch nowKEVEPSS 99.99%Mar 4, 2024