Vendor
JetBrains
545 known vulnerabilities.
Products
TeamCity 191
YouTrack 141
IntelliJ IDEA 94
Hub 25
Datalore 19
Ktor 14
WebStorm 10
PyCharm 10
Toolbox App 10
Rider 9
GoLand 9
PhpStorm 8
CLion 7
Junie CLI 4
RubyMine 4
DataGrip 3
RustRover 3
Junie 3
ReSharper 2
DataSpell 2
Junie GitHub Action 2
dotTrace 1
ETW Host Service 1
ReSharper, Rider and dotTrace 1
Kotlin 1
IDE Services 1
Exposed 1
Runtime 1
JetBrains Gateway 1
Aqua 1
MPS 1
TeamCity < 2023.05.4 0
IntelliJ IDEA < 2023.1 0
TeamCity < 2023.05.3 0
TeamCity < 2023.05 0
IntelliJ IDEA < 2022.2.4 0
IntelliJ IDEA < 2022.3 0
TeamCity < 2023.11.1 0
PhpStorm < 2023.1 0
IntelliJ IDEA < 2022.3.1 0
308 results · Clear filters · Feed
-
Medium 5.2
In JetBrains TeamCity before 2022.10.2 jVMTI was enabled by default on agents.
-
Medium 5.4CVE-2022-48343 EPSS 59%
In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the user creation process.
-
Medium 5.0
In JetBrains IntelliJ IDEA before 2022.3.1 code Templates were vulnerable to SSTI attacks.
-
Medium 4.7
In JetBrains IntelliJ IDEA before 2022.3.1 the "Validate JSP File" action used the HTTP protocol to download required J…
-
Medium 6.6
In JetBrains TeamCity between 2022.10 and 2022.10.1 connecting to AWS using the "Default Credential Provider Chain" all…
-
Medium 4.1
In JetBrains TeamCity between 2022.10 and 2022.10.1 a custom STS endpoint allowed internal port scanning.
-
Medium 5.2
In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible.
-
Medium 6.2
In JetBrains IntelliJ IDEA before 2022.3 the built-in web server allowed an arbitrary file to be read by exploiting a p…
-
Medium 4.0
In JetBrains IntelliJ IDEA before 2022.3 the built-in web server leaked information about open projects.
-
Medium 5.6
In JetBrains IntelliJ IDEA before 2022.2.4 a buffer overflow in the fsnotifier daemon on macOS was possible.
-
Medium 6.5
In JetBrains TeamCity version before 2022.10, Password parameters could be exposed in the build log if they contained s…
-
Medium 6.5
In JetBrains TeamCity version before 2022.10, Project Viewer could see scrambled secure values in the MetaRunner settin…
-
Medium 4.4
In JetBrains TeamCity before 2022.04.4 environmental variables of "password" type could be logged when using custom Per…
-
Medium 5.3
JetBrain Ktor before 2.1.0 vulnerable to selection of wrong authentication provider
In JetBrains Ktor before 2.1.0 the wrong authentication provider could be selected in some cases
-
Medium 4.7
JetBrains Ktor before 2.1.0 was vulnerable to a Reflect File Download attack
JetBrains Ktor before 2.1.0 was vulnerable to the Reflect File Download attack
-
Medium 4.1
In JetBrains Rider before 2022.2 Trust and Open Project dialog could be bypassed, leading to local code execution
-
Medium 5.4
In JetBrains TeamCity before 2022.04.2 build parameter injection was possible
-
Medium 4.1
In JetBrains TeamCity before 2022.04.2 the private SSH key could be written to the build log in some cases
-
Medium 4.4
In JetBrains TeamCity before 2022.04 leak of secrets in TeamCity agent logs was possible
-
Medium 4.6
In JetBrains TeamCity before 2022.04 reflected XSS on the Build Chain Status page was possible
-
Medium 6.9
In JetBrains Rider before 2022.1 local code execution via links in ReSharper Quick Documentation was possible
-
Medium 6.9
In JetBrains IntelliJ IDEA before 2022.1 local code execution via links in Quick Documentation was possible
-
Medium 6.9
In JetBrains IntelliJ IDEA before 2022.1 local code execution via workspace settings was possible
-
Medium 6.9
In JetBrains IntelliJ IDEA before 2022.1 local code execution via HTML descriptions in custom JSON schemas was possible
-
Medium 6.9
In JetBrains IntelliJ IDEA before 2022.1 local code execution via custom Pandoc path was possible
-
Medium 6.1
In JetBrains Hub before 2022.1.14638 stored XSS via project icon was possible.
-
Medium 4.6
In JetBrains YouTrack before 2022.1.43563 it was possible to include an iframe from a third-party domain in the issue d…
-
Medium 5.7
In JetBrains YouTrack before 2022.1.43563 HTML code from the issue description was being rendered