648 matches found
CVE-2026-75055
In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE...
CVE-2026-75057
In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log...
CVE-2026-75056
In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible...
CVE-2026-75052
In JetBrains IntelliJ IDEA before 2026.2.1 command execution via crafted Markdown preview content was possible in trusted projects...
CVE-2026-75054
In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in untrusted projects...
CVE-2026-75053
In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint...
CVE-2026-75058
In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importers...
EUVD-2026-60256
In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log...
CVE-2026-75058
In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importers...
EUVD-2026-60257
In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importers...
CVE-2026-75058
XML External Entity (XXE) injection in IntelliJ IDEA's Eclipse settings importers affects versions before 2026.2.1. CVSS 5.5 (MEDIUM) — local attack, no privileges, high confidentiality impact. Remediation: upgrade to IntelliJ IDEA 2026.2.1 or later. No in-the-wild exploitation reported. Details:...
CVE-2026-75057
In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log...
CVE-2026-75057
In IntelliJ IDEA before 2026.1.5, Git credentials were written in plaintext to the IDE log, exposing them to any local user with log read access. CVSS 6.2 (MEDIUM) reflects high confidentiality impact. Exploitation details are not provided; upgrade to 2026.1.5 to remediate.
CVE-2026-75058
In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importers...
CVE-2026-75057
In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log...
CVE-2026-75056
In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible...
EUVD-2026-60255
In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible...
CVE-2026-75054
JetBrains IntelliJ IDEA before 2026.2.1 is vulnerable to server-side request forgery (SSRF) via the OpenAPI preview proxy when processing untrusted projects. The flaw allows internal network probing and potential access to local services, with HIGH confidentiality impact and MEDIUM CVSS 6.3 sever...