Vendor
JetBrains
545 known vulnerabilities.
Products
TeamCity 191
YouTrack 141
IntelliJ IDEA 94
Hub 25
Datalore 19
Ktor 14
WebStorm 10
PyCharm 10
Toolbox App 10
Rider 9
GoLand 9
PhpStorm 8
CLion 7
Junie CLI 4
RubyMine 4
DataGrip 3
RustRover 3
Junie 3
ReSharper 2
DataSpell 2
Junie GitHub Action 2
dotTrace 1
ETW Host Service 1
ReSharper, Rider and dotTrace 1
Kotlin 1
IDE Services 1
Exposed 1
Runtime 1
JetBrains Gateway 1
Aqua 1
MPS 1
TeamCity < 2023.05.4 0
IntelliJ IDEA < 2023.1 0
TeamCity < 2023.05.3 0
TeamCity < 2023.05 0
IntelliJ IDEA < 2022.2.4 0
IntelliJ IDEA < 2022.3 0
TeamCity < 2023.11.1 0
PhpStorm < 2023.1 0
IntelliJ IDEA < 2022.3.1 0
123 results · Clear filters · Feed
-
High 8.9
In JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a notification signature
-
High 8.2
In JetBrains YouTrack before 2026.2.19197 authorisation bypass in the scripts debugger allowed arbitrary code execution
-
High 7.7
In JetBrains YouTrack before 2026.2.19197 project administrators could read comments from other projects via notificati…
-
High 7.7
In JetBrains Hub before 2026.2.52366 missing authorisation allowed authenticated users to send arbitrary emails from th…
-
High 7.6
In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed users with read-only project access to overwrit…
-
High 7.8
In JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search script constraints was possible in untrusted proje…
-
High 8.1
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 administrator account takeover was possible via password reset
-
High 8.8
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 authenticated users could execute commands on Windows servers …
-
High 8.8
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the …
-
High 7.8
In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed h…
-
High 8.4
In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code e…
-
High 7.7
In JetBrains YouTrack before 2025.3.160480, 2026.1.14047 pUT requests on link sub-resources allowed modification linked…
-
High 7.7
In JetBrains YouTrack before 2026.2.18634 cloning a whiteboard allowed unauthorized changes to links on inaccessible is…
-
High 8.5
In JetBrains YouTrack before 2026.2.18634 a shared token cache allowed cross-tenant theft of GitHub App installation to…
-
High 8.8
In JetBrains YouTrack before 2026.2.18634, insufficient validation of role assignments allowed privilege escalation
-
High 8.0
In JetBrains YouTrack before 2026.2.18788, 2026.1.14055, 2025.3.161254 missing authorisation allowed access to restrict…
-
High 8.4
In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools
-
High 7.8
In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible
-
High 8.1
In JetBrains YouTrack before 2026.2.17917 unauthorised project transfer between organisations was possible
-
High 7.1
In JetBrains YouTrack before 2026.1.13901, 2026.2.17950 doS attack was possible via crafted type parameters
-
High 8.2
In JetBrains YouTrack before 2026.2.18068 stored XSS via the fenced code-block language label was possible
-
High 8.1
In JetBrains YouTrack before 2025.3.156085, 2026.1.13914, 2026.2.18095 missing authorisation allowed an authenticated u…
-
High 8.6
In JetBrains PyCharm before 2026.1.4, 2026.2 arbitrary code execution via malicious Python executable was possible on u…
-
High 8.8
In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was possible
-
High 8.1
In JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer form files
-
High 8.6
In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session
-
High 7.8
In JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before granting project trust via develo…
-
High 8.4
In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configu…
-
High 8.4
In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via project too…
-
High 8.4
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configu…
-
High 7.8
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a project-supplied linter configuration
-
High 8.4
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-loc…
-
High 8.4
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-loc…
-
High 7.8
In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust via the configure…
-
High 7.8
In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules…
-
High 8.1
In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper permission checks
-
High 8.1CVE-2026-59795 Public exploit
In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible
-
High 7.3
In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported data
-
High 8.8
In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integration
-
High 7.1
In JetBrains GoLand before 2026.1.3 remote code execution was possible via untrusted project configuration