Export limit exceeded: 425825 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 791

Export CSV
CVE-2025-43012

In JetBrains Toolbox App before 2.6 command injection in SSH plugin was possible

CVSS 3.1 · 8.3 High EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Toolbox
CVE-2025-54530

In JetBrains TeamCity before 2025.07 privilege escalation was possible due to incorrect directory permissions

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Teamcity
CVE-2025-54531

In JetBrains TeamCity before 2025.07 path traversal was possible via plugin unpacking on Windows

CVSS 3.1 · 7.7 High EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Teamcity
CVE-2025-57729

In JetBrains IntelliJ IDEA before 2025.2 unexpected plugin startup was possible due to automatic LSP server start

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Intellij Idea
CVE-2025-57732

In JetBrains TeamCity before 2025.07.1 privilege escalation was possible due to incorrect directory ownership

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Teamcity
CVE-2025-58334

In JetBrains IDE Services before 2025.5.0.1086, 2025.4.2.2164 users without appropriate permissions could assign high-privileged role for themselves

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Ide Services
CVE-2025-64685

In JetBrains YouTrack before 2025.3.104432 missing TLS certificate validation enabled data disclosure

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Youtrack
CVE-2025-64456

In JetBrains ReSharper before 2025.2.4 missing signature verification in DPA Collector allows local privilege escalation

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Resharper
CVE-2020-29582

kotlin: vulnerable Java API was used for temporary file and folder creation which could result in information disclosure

In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such files and list directories due to insecure permissions.

CVSS 3.1 · 5.3 Medium EPSS 2.6% KEV · Not listed
Vendors
Jetbrains Oracle Redhat
Products
Kotlin Communications Cloud Native Core Network Slice Selection Function Communications Cloud Native Core Policy and 4 more
CVE-2025-58335

In JetBrains Junie before 252.284.66, 251.284.66, 243.284.66, 252.284.61, 251.284.61, 243.284.61, 252.284.50, 252.284.54, 251.284.54, 251.284.50, 243.284.54, 243.284.50 information disclosure was possible via search_project function

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Junie
CVE-2025-59458

In JetBrains Junie before 252.284.66, 251.284.66, 243.284.66, 252.284.61, 251.284.61, 243.284.61, 252.284.50, 252.284.54, 251.284.54, 251.284.50, 243.284.54, 243.284.50 code execution was possible due to improper command validation

CVSS 3.1 · 8.3 High EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Junie
CVE-2025-29903

In JetBrains Runtime before 21.0.6b872.80 arbitrary dynamic library execution due to insecure macOS flags was possible

CVSS 3.1 · 5.2 Medium EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Runtime
CVE-2025-23385

In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, ETW Host Service before 16.43, Local Privilege Escalation via the ETW Host Service was possible

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Dottrace Etw Host Service Resharper and 1 more
CVE-2025-67739

In JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to local paths disclosure

CVSS 3.1 · 3.1 Low EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Teamcity
CVE-2025-68269

In JetBrains IntelliJ IDEA before 2025.3 missing confirmation allowed opening of untrusted remote projects over SSH

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Intellij Idea
CVE-2025-68162

In JetBrains TeamCity before 2025.11 maven embedder allowed loading extensions via project configuration

CVSS 3.1 · 2.7 Low EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Teamcity
CVE-2025-68163

In JetBrains TeamCity before 2025.11 stored XSS was possible on agentpushInstall page

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Teamcity
CVE-2025-68164

In JetBrains TeamCity before 2025.11 port enumeration was possible via the Perforce connection test

CVSS 3.1 · 2.7 Low EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Teamcity
CVE-2025-68165

In JetBrains TeamCity before 2025.11 reflected XSS was possible on VCS Root setup

CVSS 3.1 · 5.4 Medium EPSS 4.2% KEV · Not listed
Vendors
Jetbrains
Products
Teamcity