760 matches found
CVE-2022-46824
CVE-2022-46824 affects JetBrains IntelliJ IDEA before 2022.2.4. A buffer overflow in the macOS fsnotifier daemon is the underlying issue, impacting the fsnotifier component on macOS. The available details indicate a local attack vector with high potential impact to confidentiality, integrity, and...
CVE-2022-46824
In JetBrains IntelliJ IDEA before 2022.2.4 a buffer overflow in the fsnotifier daemon on macOS was possible...
CVE-2022-46824
In JetBrains IntelliJ IDEA before 2022.2.4 a buffer overflow in the fsnotifier daemon on macOS was possible...
JetBrains IntelliJ IDEA 代码问题漏洞
JetBrains IntelliJ IDEA is a set of integrated development environments for the Java language from the Czech company JetBrains. A security vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2022.3, which stems from an XXE attack that can be performed via a request to a custom plugi...
JetBrains IntelliJ IDEA 加密问题漏洞
JetBrains IntelliJ IDEA is a set of integrated development environments for the Java language from the Czech company JetBrains. A security vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2022.3 that stems from the built-in web server disclosing information about open projects...
JetBrains IntelliJ IDEA 代码问题漏洞
JetBrains IntelliJ IDEA is a set of integrated development environments for the Java language from the Czech company JetBrains. A security vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2022.3, which stems from a DYLIB injection that can be performed on macOS...
PT-2022-27983 · Jetbrains · Intellij Idea
Name of the Vulnerable Software and Affected Versions: JetBrains IntelliJ IDEA versions prior to 2022.3 Description: The issue allows an arbitrary file to be read by exploiting a path traversal vulnerability in the built-in web server. Recommendations: For versions prior to 2022.3, update to...
PT-2022-27984 · Jetbrains · Intellij Idea
Name of the Vulnerable Software and Affected Versions: JetBrains IntelliJ IDEA versions prior to 2022.3 Description: The issue allows for an XXE attack, which can lead to a Server-Side Request Forgery SSRF via requests to custom plugin repositories. This occurs due to a flaw in handling requests ...
JetBrains IntelliJ IDEA 路径遍历漏洞
JetBrains IntelliJ IDEA is a set of integrated development environments for the Java language from the Czech company JetBrains. A security vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2022.3, which stems from a built-in web server that allows arbitrary files to be read via a...
PT-2022-27985 · Jetbrains · Jetbrains Intellij Idea
Name of the Vulnerable Software and Affected Versions: JetBrains IntelliJ IDEA versions prior to 2022.3 Description: The issue allows for a DYLIB injection on macOS. This means that an attacker could potentially inject malicious code into the system. No information is provided about the estimated...
PT-2022-27982 · Jetbrains · Jetbrains Intellij Idea
Name of the Vulnerable Software and Affected Versions: JetBrains IntelliJ IDEA versions prior to 2022.3 Description: The built-in web server in JetBrains IntelliJ IDEA leaked information about open projects. Recommendations: For versions prior to 2022.3, update to version 2022.3 or later to resol...
PT-2022-27981 · Jetbrains · Intellij Idea
Name of the Vulnerable Software and Affected Versions: JetBrains IntelliJ IDEA versions prior to 2022.2.4 Description: A buffer overflow in the fsnotifier daemon on macOS was possible, which could lead to potential security issues. The estimated number of potentially affected devices worldwide is...
JetBrains IntelliJ IDEA 安全漏洞
JetBrains IntelliJ IDEA is a set of integrated development environments for the Java language from the Czech company JetBrains. A security vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2022.2.4 that stems from a possible buffer overflow in the fsnotifier daemon on macOS...
Code injection
The package snyk before 1.1064.0 are vulnerable to Code Injection when analyzing a project. An attacker who can convince a user to scan a malicious project can include commands in a build file such as build.gradle or gradle-wrapper.jar, which will be executed with the privileges of the applicatio...
PT-2022-16699 · Microsoft +2 · Visual Studio +3
Name of the Vulnerable Software and Affected Versions: snyk versions prior to 1.1064.0 VS Code versions prior to 1.9.0 IntelliJ versions prior to 2.4.48 Visual Studio versions prior to 1.1.31 Eclipse versions prior to v20221115.132308 Language Server versions prior to v20221109.114426 Description...
CVE-2022-24441 Code Injection
The package snyk before 1.1064.0 are vulnerable to Code Injection when analyzing a project. An attacker who can convince a user to scan a malicious project can include commands in a build file such as build.gradle or gradle-wrapper.jar, which will be executed with the privileges of the applicatio...
A Bootiful Podcast: Java Champion, legendary engineer, and teacher Trisha Gee
Hi, Spring fans! In this installment, Josh Long @starbuxman talks to Java Champion, legendary engineer, and teacher Trisha Gee @trishagee bout her extraordinary career working at organizations like LMAX, MongoDB, Jetbrains, and her new books, Heads First Java, and Getting to Know IntelliJ IDEA...
The vulnerability of the implementation of executable files of the IntelliJ IDEA software installer allows a perpetrator to execute arbitrary code.
The vulnerability of the executable file installation mechanism of the IntelliJ IDEA integrated development environment is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to execute arbitrary code...
