760 matches found
JetBrains IntelliJ IDEA 代码注入漏洞
Jetbrains JetBrains IntelliJ IDEA is a set of integrated development environments for the Java language from the Czech company Jetbrains. A security vulnerability exists in JetBrains IntelliJ IDEA 2022.2 and earlier versions, which stems from the possibility that an attacker could execute native...
This Week in Spring - July 26th, 2022
Aloha, Spring fans! Im on vacation, reporting to you from the paradise-like island of Maui, Hawaii, and hoping that youre having a wonderful day! My family and I love Hawaii. Its brimming with beauty and serenity, and while the island of Maui, in the state of Hawaii, is very small, the islands ar...
Malicious code in mocha-intellij (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7b23b44db257b44949a1d9b38ddf824de21590e0dc5bba9025e19bf1b556254 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4654 Malicious code in mocha-intellij (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7b23b44db257b44949a1d9b38ddf824de21590e0dc5bba9025e19bf1b556254 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Exploit for Path Traversal in Wso2 Api_Manager
Better CVE-2022-29464 Certain WSO2 products allow unrestricte...
PT-2022-4866 · Jetbrains · Intellij Idea
Name of the Vulnerable Software and Affected Versions: IntelliJ IDEA versions prior to 2022.2.2 Description: The issue is related to an uncontrolled search path element in the executable files of the IntelliJ IDEA integrated development environment installer. Exploitation of this issue may allow ...
This Week in Spring - May 10th, 2022
Hi, Spring fans! Im writing this from - I cant believe I get to say this - abroad! Im in London, UK! Now, this is not particularly noteworthy for those millions who already live here. But I dont live here. Im a visitor! I live in San Francisco. I had to fly here! On a plane! With other people!...
JetBrains IntelliJ IDEA Code Injection Vulnerability (CNVD-2022-55675)
JetBrains IntelliJ IDEA is a suite of integrated development environments for the Java language from Jetbrains Czech Republic.JetBrains IntelliJ IDEA versions prior to 2022.1 contain a code injection vulnerability that could be exploited to execute native code via HTML descriptions in custom JSON...
JetBrains IntelliJ IDEA Code Injection Vulnerability (CNVD-2022-55674)
JetBrains IntelliJ IDEA is a suite of integrated development environments for the Java language from Jetbrains Czech Republic.A code injection vulnerability exists in versions of JetBrains IntelliJ IDEA prior to 2022.1, which could be exploited to execute native code via a custom Pandoc path...
JetBrains IntelliJ IDEA Access Control Error Vulnerability
JetBrains IntelliJ IDEA is a set of integrated development environments for the Java language from Jetbrains Czech Republic.JetBrains IntelliJ IDEA versions prior to 2022.1 are vulnerable to an access control error vulnerability that stems from a flaw in source checking in the internal web server...
JetBrains IntelliJ IDEA has an unspecified vulnerability (CNVD-2022-55673)
JetBrains IntelliJ IDEA is a suite of integrated development environments for the Java language from Czech company Jetbrains. security vulnerability exists in versions of JetBrains IntelliJ IDEA prior to 2022.1, which stems from an insufficient notification mechanism for using Unicode...
JetBrains IntelliJ IDEA Cross-Site Scripting Vulnerability
JetBrains IntelliJ IDEA is a set of integrated development environments for the Java language from Jetbrains Czech Republic.A cross-site scripting vulnerability exists in versions prior to JetBrains IntelliJ IDEA 2022.1, which stems from an error message in the internal web server that lacks a...
JetBrains IntelliJ IDEA Code Injection Vulnerability (CNVD-2022-55680)
JetBrains IntelliJ IDEA is a suite of integrated development environments for the Java language from Jetbrains Czech Republic.A code injection vulnerability exists in versions of JetBrains IntelliJ IDEA prior to 2022.1, which could be exploited by attackers to execute native code via workspace...
JetBrains IntelliJ IDEA Code Injection Vulnerability
JetBrains IntelliJ IDEA is a suite of integrated development environments for the Java language from Jetbrains, a Czech company.A code injection vulnerability exists in versions of JetBrains IntelliJ IDEA prior to 2022.1, which stems from the execution of native code via a link in Quick...
CVE-2022-29813
In JetBrains IntelliJ IDEA before 2022.1 local code execution via custom Pandoc path was possible...
CVE-2022-29813
In JetBrains IntelliJ IDEA before 2022.1 local code execution via custom Pandoc path was possible...
CVE-2022-29814
In JetBrains IntelliJ IDEA before 2022.1 local code execution via HTML descriptions in custom JSON schemas was possible...
CVE-2022-29812
In JetBrains IntelliJ IDEA before 2022.1 notification mechanisms about using Unicode directionality formatting characters were insufficient...