Vendor
JetBrains
545 known vulnerabilities.
Products
TeamCity 191
YouTrack 141
IntelliJ IDEA 94
Hub 25
Datalore 19
Ktor 14
WebStorm 10
PyCharm 10
Toolbox App 10
Rider 9
GoLand 9
PhpStorm 8
CLion 7
Junie CLI 4
RubyMine 4
DataGrip 3
RustRover 3
Junie 3
ReSharper 2
DataSpell 2
Junie GitHub Action 2
dotTrace 1
ETW Host Service 1
ReSharper, Rider and dotTrace 1
Kotlin 1
IDE Services 1
Exposed 1
Runtime 1
JetBrains Gateway 1
Aqua 1
MPS 1
TeamCity < 2023.05.4 0
IntelliJ IDEA < 2023.1 0
TeamCity < 2023.05.3 0
TeamCity < 2023.05 0
IntelliJ IDEA < 2022.2.4 0
IntelliJ IDEA < 2022.3 0
TeamCity < 2023.11.1 0
PhpStorm < 2023.1 0
IntelliJ IDEA < 2022.3.1 0
545 results · Feed
-
Low 3.9
In JetBrains IntelliJ IDEA before 2022.2 local code execution via a Vagrant executable was possible
-
Medium 5.4
In JetBrains TeamCity before 2022.04.2 build parameter injection was possible
-
Medium 4.1
In JetBrains TeamCity before 2022.04.2 the private SSH key could be written to the build log in some cases
-
Low 3.5
In JetBrains Hub before 2022.2.14799, insufficient access control allowed the hijacking of untrusted services
-
High 8.7
SHA1 implementation in JetBrains Ktor Native 2.0.0 was returning the same value. The issue was fixed in Ktor version 2.…
-
Low 3.7
In JetBrains TeamCity before 2022.04 potential XSS via Referrer header was possible
-
Medium 4.4
In JetBrains TeamCity before 2022.04 leak of secrets in TeamCity agent logs was possible
-
Medium 4.6
In JetBrains TeamCity before 2022.04 reflected XSS on the Build Chain Status page was possible
-
Medium 6.9
In JetBrains Rider before 2022.1 local code execution via links in ReSharper Quick Documentation was possible
-
Low 3.0
In JetBrains PyCharm before 2022.1 exposure of the debugger port to the internal network was possible
-
Medium 6.9
In JetBrains IntelliJ IDEA before 2022.1 local code execution via links in Quick Documentation was possible
-
Low 3.9
In JetBrains IntelliJ IDEA before 2022.1 origin checks in the internal web server were flawed
-
Low 3.9
In JetBrains IntelliJ IDEA before 2022.1 reflected XSS via error messages in internal web server was possible
-
Low 2.8
In JetBrains IntelliJ IDEA before 2022.1 HTML injection into IDE messages was possible
-
Medium 6.9
In JetBrains IntelliJ IDEA before 2022.1 local code execution via workspace settings was possible
-
Medium 6.9
In JetBrains IntelliJ IDEA before 2022.1 local code execution via HTML descriptions in custom JSON schemas was possible
-
Medium 6.9
In JetBrains IntelliJ IDEA before 2022.1 local code execution via custom Pandoc path was possible
-
Low 2.3
In JetBrains IntelliJ IDEA before 2022.1 notification mechanisms about using Unicode directionality formatting characte…
-
Medium 6.1
In JetBrains Hub before 2022.1.14638 stored XSS via project icon was possible.
-
Low 3.3
In JetBrains Ktor Native before version 2.0.0 random values used for nonce generation weren't using SecureRandom implem…
-
High 8.4
In JetBrains IntelliJ IDEA before 2021.3.3 it was possible to get passwords from protected fields
-
High 7.3
In JetBrains YouTrack before 2022.1.43700 it was possible to inject JavaScript into Markdown in the YouTrack Classic UI
-
Medium 4.6
In JetBrains YouTrack before 2022.1.43563 it was possible to include an iframe from a third-party domain in the issue d…
-
Medium 5.7
In JetBrains YouTrack before 2022.1.43563 HTML code from the issue description was being rendered
-
Unscored —
IntelliJ IDEA XML parser was found vulnerable to XML External Entity attack, an attacker can exploit the vulnerability …