Lucene search
+L

876 matches found

CNNVD
CNNVD
•added 2025/08/20 12:00 a.m.•15 views

JetBrains IntelliJ IDEA 安全漏洞

JetBrains IntelliJ IDEA is an integrated development environment IDE developed by JetBrains , designed to improve developer productivity and code quality , mainly for Java programming , but also supports Kotlin, Web, Spring and other languages and frameworks . A security vulnerability exists in...

7.3CVSS6.6AI score0.00129EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/20 12:00 a.m.•0 views

CVE-2025-57730: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

In JetBrains IntelliJ IDEA before 2025.2 hTML injection was possible via Remote Development feature...

5.2CVSS5.7AI score0.00435EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•11 views

Malicious code in bad-idea-express-backdoor (npm)

The package bad-idea-express-backdoor was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
•added 2025/08/14 6:52 p.m.•12 views

MAL-2025-15328 Malicious code in bad-idea-express-backdoor (npm)

The package bad-idea-express-backdoor was found to contain malicious code...

7.2AI score
SaveExploits0
Fedora
Fedora
•added 2025/08/06 1:56 a.m.•19 views

[SECURITY] Fedora 41 Update: perl-Crypt-CBC-3.07-1.fc41

This is Crypt::CBC, a Perl-only implementation of the cryptographic cipher block chaining mode CBC. In combination with a block cipher such as Crypt::DES or Crypt::IDEA, you can encrypt and decrypt messages of arbitrarily long length. The encrypted messages are compatible with the encryption form...

4CVSS7.3AI score0.00197EPSS
SaveExploits0
Spring Security Advisories
Spring Security Advisories
•added 2025/08/05 12:00 a.m.•18 views

This Week in Spring - August 5th, 2025

Hi, Spring fans! Welcome to another installment of This Week in Spring! It's August 5th! Which means we're only 20 days away until SpringOne 2025! Have you registered? There's so much to cover this week, so let's dive right into it! Spring Shell 3.4.1 is out! - the new release includes a number o...

7.2AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
•added 2025/07/01 12:00 a.m.•47 views

This Week in Spring - July 1st, 2025

Hi, Spring fans! Welcome to another installment of This Week in Spring! It's July!! This week, I'm on PTO, and as always, I'm looking for good reading material on the plane ride over for my holiday. Thank goodness for the ever-vibrant and awesome Spring community; there's tons of stuff to dive...

7.2AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
•added 2025/06/05 12:00 a.m.•20 views

A Bootiful Podcast: IntelliJ IDEA lead Aleksey Stukalov

Hi, Spring fans! In this installment I talk to IntelliJ IDEA lead Aleksey Stukalov...

7.2AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
•added 2025/06/03 12:00 a.m.•34 views

This Week in Spring - June 3rd, 2025

Hi, Spring fans! Welcome to another installment of This Week in Spring! I just finished recording my session with IntelliJ IDEA project lead Aleksey Stukalov about all the amazing features coming to IntelliJ IDEA to better support Java, Kotlin, and Spring developers. It went off without a hitch...

8.6CVSS7.2AI score0.00343EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/23 10:34 a.m.•18 views

CVE-2024-46970

In JetBrains IntelliJ IDEA before 2024.1 hTML injection via the project name was possible...

6.1CVSS7.3AI score0.00392EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/23 9:37 a.m.•20 views

CVE-2024-24941

In JetBrains IntelliJ IDEA before 2023.3.3 a plugin for JetBrains Space was able to send an authentication token to an inappropriate URL...

6.1CVSS7.1AI score0.00315EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 4:52 a.m.•17 views

CVE-2023-51655

In JetBrains IntelliJ IDEA before 2023.3.2 code execution was possible in Untrusted Project mode via a malicious plugin repository specified in the project configuration...

9.8CVSS7.5AI score0.00334EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/23 4:10 a.m.•18 views

CVE-2023-39261

In JetBrains IntelliJ IDEA before 2023.2 plugin for Space was requesting excessive permissions...

7.8CVSS7AI score0.00282EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 4:06 a.m.•22 views

CVE-2023-38069

In JetBrains IntelliJ IDEA before 2023.1.4 license dialog could be suppressed in certain cases...

3.3CVSS6.8AI score0.00173EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/23 12:58 a.m.•16 views

CVE-2022-46824

In JetBrains IntelliJ IDEA before 2022.2.4 a buffer overflow in the fsnotifier daemon on macOS was possible...

7.8CVSS7.4AI score0.00177EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 12:29 a.m.•17 views

CVE-2022-48431

In JetBrains IntelliJ IDEA before 2023.1 in some cases, Gradle and Maven projects could be imported without the “Trust Project” confirmation...

7.8CVSS6.9AI score0.00104EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 12:29 a.m.•16 views

CVE-2022-48432

In JetBrains IntelliJ IDEA before 2023.1 the bundled version of Chromium wasn't sandboxed...

8.8CVSS7AI score0.00155EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 12:29 a.m.•17 views

CVE-2022-48430

In JetBrains IntelliJ IDEA before 2023.1 file content could be disclosed via an external stylesheet path in Markdown preview...

7.5CVSS6.9AI score0.00329EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/23 12:29 a.m.•19 views

CVE-2022-48433

In JetBrains IntelliJ IDEA before 2023.1 the NTLM hash could leak through an API method used in the IntelliJ IDEA built-in web server...

7.5CVSS6.9AI score0.00646EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/23 12:27 a.m.•16 views

CVE-2022-47896

In JetBrains IntelliJ IDEA before 2022.3.1 code Templates were vulnerable to SSTI attacks...

7.8CVSS7.1AI score0.00254EPSS
SaveExploits0References1
Rows per page
Query Builder