5083 matches found
EUVD-2026-60245
In JetBrains YouTrack before 2026.2.18112 an authenticated user could enumerate accounts via the users search endpoint...
CVE-2026-75047
In JetBrains YouTrack before 2026.2.18177 doS attack was possible via a decompression bomb in the import endpoint...
CVE-2026-75047
In JetBrains YouTrack before 2026.2.18177 doS attack was possible via a decompression bomb in the import endpoint...
CVE-2026-75046
JetBrains YouTrack before 2026.2.18112 has an authenticated user enumeration flaw in the users search endpoint, allowing account discovery (CVSS 4.3 MEDIUM). No exploitation details are provided; upgrade to 2026.2.18112 or later. Monitor JetBrains issue tracker for further advisories.
CVE-2026-75046
In JetBrains YouTrack before 2026.2.18112 an authenticated user could enumerate accounts via the users search endpoint...
EUVD-2026-60246
In JetBrains YouTrack before 2026.2.18177 doS attack was possible via a decompression bomb in the import endpoint...
CVE-2026-75047
In JetBrains YouTrack before 2026.2.18177 doS attack was possible via a decompression bomb in the import endpoint...
CVE-2026-75046
In JetBrains YouTrack before 2026.2.18112 an authenticated user could enumerate accounts via the users search endpoint...
CVE-2026-75045
In JetBrains YouTrack before 2025.3.156085, 2026.1.13913, 2026.2.18112 an unauthenticated attacker could download database backups via shared draft signature...
CVE-2026-75044
In JetBrains YouTrack before 2025.3.156085, 2026.1.13914, 2026.2.18095 missing authorisation allowed an authenticated user to delete arbitrary entities via the mailbox endpoint...
CVE-2026-68762
In JetBrains Ktor before 3.4.1 potential DoS attack via WebSocket decompression was possible...
PT-2026-76708
Name of the Vulnerable Software and Affected Versions JetBrains PyCharm versions prior to 2026.2.1 Description An issue exists that allows remote code execution through the Quick Documentation feature. Recommendations Update JetBrains PyCharm to version 2026.2.1...
PT-2026-76705
Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions prior to 2026.2.1 Description Remote Code Execution RCE is possible through the Markdown export tool. Recommendations Update to version 2026.2.1...
PT-2026-76701
In JetBrains IntelliJ IDEA before 2026.2.1 command execution via crafted Markdown preview content was possible in trusted projects...
PT-2026-76699
In JetBrains YouTrack before 2026.1.13901, 2026.2.17950 doS attack was possible via crafted type parameters...
PT-2026-76698
In JetBrains YouTrack before 2026.1.13903, 2026.2.17950 an authenticated user could read restricted articles from other projects via the draft creation endpoint...
PT-2026-76697
In JetBrains YouTrack before 2026.2.18068 stored XSS via the fenced code-block language label was possible...
PT-2026-76709
Name of the Vulnerable Software and Affected Versions JetBrains PyCharm versions prior to 2026.2.1 Description Unauthenticated remote code execution is possible through the use of Jupyter MCP tools. MCP Model Context Protocol is a standard that allows AI models to access data and tools from...