405,824 results · Feed
-
Medium 5.5
In JetBrains PyCharm before 2026.3 code execution was possible in Safe Mode via a crafted Jupyter notebook widget module
-
High 7.8
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.2 code execution was possible in Safe Mode via project-controlled JVM …
-
Medium 5.4
In JetBrains Junie GitHub Action before 1.6.4 prompt injection protection could be bypassed via HTML-encoded characters
-
High 7.4
In JetBrains Junie GitHub Action before 1.8.0 code execution with workflow credentials was possible via fork updates
-
High 7.0
In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in untrusted projects via the Terraform File Watch…
-
Low 3.5
In JetBrains YouTrack before 2026.2.19422 cSS injection was possible in Mermaid diagrams via configuration directives
-
High 7.4
In JetBrains IntelliJ IDEA before 2026.3 host name verification was missing for server TLS certificates
-
Medium 5.3
In JetBrains IntelliJ IDEA before 2026.3 command execution was possible via control characters in terminal command comp…
-
Low 3.3
In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via JSON Schema references in untrusted projects
-
Medium 4.3
In JetBrains IntelliJ IDEA before 2026.3 blind SSRF was possible via remote references in JSON Schema validation
-
Low 3.3
In JetBrains IntelliJ IDEA before 2026.3 untrusted projects could trigger changes to GPG agent configuration
-
Medium 5.3
In JetBrains IntelliJ IDEA before 2026.3 sSRF was possible via custom plugin repositories
-
High 7.8
In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via symlinks in an imported settings archive
-
High 7.1
In JetBrains IntelliJ IDEA before 2026.3 arbitrary file write was possible via symlinks when extracting plugin archives
-
Medium 4.7
In JetBrains IntelliJ IDEA before 2026.3 opening arbitrary URLs without confirmation was possible via the Remote Develo…
-
Medium 4.7
In JetBrains IntelliJ IDEA before 2026.3 hTML injection was possible in Remote Development editor tabs
-
High 7.8
In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in Safe Mode via UI Designer form file
-
High 8.8
In JetBrains Datalore before 2026.4 workspace collaborators could obtain the owner's SSH private key via Git backup
-
High 7.8
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.1 command injection was possible in untrusted projects via Tomcat run …
-
High 7.5
In JetBrains Datalore before 2026.4 improper scope validation in database tasks allowed using another workspace's servi…
-
Medium 5.9
In JetBrains Datalore before 2026.4 code execution was possible in another user's computation via an init script upload…
-
Critical 9.6
In JetBrains CLion before 2026.2 code execution was possible in Safe Mode via JSON compilation database
-
Low 3.6
In JetBrains IntelliJ IDEA before 2026.3 database connections could be established in untrusted projects
-
Critical 9.6
In JetBrains CLion before 2026.2, 2026.1.4 code execution was possible in Safe Mode via Meson project settings
-
Medium 6.3
RAGFlow < 0.27.0 SSRF via set_api_key base_url Parameter
RAGFlow before 0.27.0 contains a server-side request forgery vulnerability that allows authenticated attackers to force the server to issue requests to arbitrary internal or external endpoints by supplying an unvalidated base_url to the POST /v1/llm/set_api_k…
-
High 8.2
Symfony: DataUriNormalizer Opens Data URIs With a Non-Lowercase Scheme as Local Files, Letting a Client Read Any Server File
The Symfony Serializer component DataUriNormalizer::denormalize() matches the data: scheme with a case-sensitive regular expression, allowing a value with an uppercase scheme, such as DATA:,/../../../etc/passwd, to bypass it, resulting in Arbitrary Local File…
-
High 8.8
Avast sandbox escape via unpreserved COM pathway through Task Scheduler
Improper isolation in the Avast sandbox on Windows allows a local, low-privileged attacker executing inside the sandbox to access COM interfaces to the Task Scheduler service, escape containment, and execute code with elevated privileges outside the sandbox. …
-
High 8.8
Avast sandbox escape via arbitrary file write in virtualized environment
Insufficient isolation in the Avast sandbox file virtualization layer on Windows allows a local, low-privileged attacker executing inside the sandbox to write arbitrary files outside sandbox containment and execute code on the host. The sandbox virtualizes fi…
-
Medium 6.3
Privilege escalation via unprotected Windows agent data folder
Incorrect permissions on the Checkmk Windows agent's data directory, caused by a race condition that discards the permission changes during service start, in Checkmk <2.5.0p18, <2.4.0p39, <2.3.0p52 and 2.2.0 (EOL) allow a local user to execute arbitrary code …
-
Medium 6.2
Avast WFP stream parser integer underflow causes system crash
An integer underflow vulnerability in the Avast Windows Filtering Platform (WFP) stream parser on Windows allows denial of service by causing a system crash. The WFP callout driver processes network stream data and computes length values for packet fragment r…
-
Medium 6.5
AvastSvc denial of service via unhandled JsonCpp exceptions in native message handlers
Missing exception handlers in AvastSvc native message dispatcher (ashServ.dll) on Windows allow a local, unprivileged attacker to crash the service by sending specially crafted JSON messages. The vulnerability spans multiple handler pathways in the RPC-based …
-
High 7.6
Dify < 1.15.0 SSRF Protection Bypass via Remote-Files Endpoints
Dify before 1.15.0 contains a server-side request forgery vulnerability that allows any authenticated console user to bypass SSRF protections and issue arbitrary HTTP requests to internal services and cloud metadata endpoints due to the Squid proxy configurat…
-
Low 3.3
HCL AION is affected by multiple security vulnerabilities.
HCL AION is affected by a vulnerability where user sessions did not expire after a sufficient period of inactivity. An unattended authenticated session could be used by another person with access to the same system to view information or perform actions on be…
-
Medium 4.3
xxyopen/201206030 novel Book Chapter Read BookServiceImpl.java getBookChapter authorization
A vulnerability was found in xxyopen/201206030 novel up to 3.5.0. Affected is the function getBookChapter of the file src/main/java/io/github/xxyopen/novel/service/impl/BookServiceImpl.java of the component Book Chapter Read Handler. Performing a manipulation…
-
Critical 9.8CVE-2026-90436 Public exploit
Apache Axis 1.x (EOL): unauthenticated remote class instantiation via SOAP fault exceptionName
** UNSUPPORTED WHEN ASSIGNED ** Deserialization of an inbound SOAP fault in Apache Axis 1.x allows unauthenticated remote class instantiation. When a SOAP <Fault> carries a <detail><exceptionName> element, Axis loads the named class and, if a String <data> el…
-
Medium 5.3
HCL AION is affected by multiple security vulnerabilities.
HCL AION is affected by a vulnerability where the account lockout mechanism did not sufficiently restrict repeated failed login attempts, allowing an attacker to make a large number of password guesses against a user account. This may increase the risk of acc…
-
Low 3.3
HCL AION is affected by multiple security vulnerabilities.
HCL AION is affected by a vulnerability where browser autocomplete was enabled on sensitive login form fields, allowing the browser to store and suggest previously entered values. A malicious user with access to the same browser or system could retrieve saved…
-
Low 3.1
HCL AION is affected by multiple security vulnerabilities.
HCL AION is affected by a vulnerability where certain application responses revealed internal server file system paths. This information could help an attacker understand the application structure and plan further attacks, potentially resulting in unintended …
-
Medium 5.3
xxyopen/201206030 novel Book Content Service BookServiceImpl.java BookServiceImpl.getBookContentAbout improper authorization
A vulnerability has been found in xxyopen/201206030 novel up to 3.5.0. This impacts the function BookServiceImpl.getBookContentAbout of the file src/main/java/io/github/xxyopen/novel/service/impl/BookServiceImpl.java of the component Book Content Service. Suc…
-
Medium 6.5
HCL AION is affected by multiple security vulnerabilities.
HCL AION is affected by a vulnerability where the application trusted the value of the HTTP Host header supplied in requests without validation. An attacker could manipulate this header to influence links, redirects or responses generated by the application, …