Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1In JetBrains PyCharm before 2025.3.4 stored XSS in Jupyter notebook Markdown cells was possibleCheck if you run itEPSS 0.25%May 29, 2026
- Low3.3In JetBrains IntelliJ IDEA before 2026.1 xXE in the UI Designer form parser was possibleCheck if you run itEPSS 0.14%May 29, 2026
- High7.8In JetBrains IntelliJ IDEA before 2026.1 code execution was possible via template injection in the Copyright pluginCheck if you run itEPSS 0.18%May 29, 2026
- Medium4.8In JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possibleCheck if you run itEPSS 0.29%May 29, 2026
- Medium6.1In JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possibleCheck if you run itEPSS 0.23%May 29, 2026
- Medium6.5In JetBrains TeamCity before 2026.1 credentials could be exposed in thread namesCheck if you run itEPSS 0.34%May 29, 2026
- Medium4.3In JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletionCheck if you run itEPSS 0.29%May 29, 2026
- Medium4.3In JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent parametersCheck if you run itEPSS 0.92%May 29, 2026
- Medium6.5In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML pluginCheck if you run itEPSS 0.29%May 29, 2026
- Medium6.1In JetBrains TeamCity before 2026.1, 2025.11.5 reflected XSS was possible on the repository download pageCheck if you run itEPSS 0.30%May 29, 2026
- High7.6In JetBrains TeamCity before 2026.1 improper permission checks exposed build configuration parametersCheck if you run itEPSS 0.31%May 29, 2026
- High8.8In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection settingsCheck if you run itEPSS 0.60%May 29, 2026
- High7.5In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build status was possibleCheck if you run itEPSS 0.39%May 29, 2026
- High8.2In JetBrains TeamCity before 2026.1.1 reflected XSS in the keyword filter was possibleCheck if you run itEPSS 0.35%May 29, 2026
- High7.5In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on fetchApp requestsCheck if you run itEPSS 0.33%May 29, 2026
- Medium4.3In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on Users and Groups pagesCheck if you run itEPSS 0.27%May 29, 2026
- Medium5.4In JetBrains YouTrack before 2026.1.13162 stored XSS in project notification templates was possibleCheck if you run itEPSS 0.27%May 29, 2026
- High8.8In JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user accountCheck if you run itEPSS 0.51%May 29, 2026
- High7.8In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completionCheck if you run itEPSS 0.68%May 29, 2026
- Critical9.9Shopper is a Headless e-commerce Admin Panel.Check if you run itEPSS 0.42%May 29, 2026
- High8.1Shopper is a Headless e-commerce Admin Panel.Check if you run itEPSS 0.36%May 29, 2026
- Critical9.8Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter device firmware contains plaintext administrative credentials embedded in the firmware image.Check if you run itEPSS 0.51%May 29, 2026
- High8.4A stored cross-site scripting (XSS) vulnerability exists in certain 1xxx series NVR devices due to insufficient sanitization of user-supplied input in specific functional modules.Check if you run itEPSS 0.51%May 29, 2026
- High8.8The Frontier X2 device allows unauthenticated BLE read/write access to critical GATT characteristics without enforcing pairing authentication or authorization.Check if you run itEPSS 0.43%May 29, 2026
- High7.7Arcane is an interface for managing Docker containers, images, networks, and volumes.Check if you run itEPSS 0.46%May 29, 2026
Sort