5069 matches found
EUVD-2026-23386
In JetBrains YouTrack before 2025.3.131383 high privileged user can achieve RCE via sandbox bypass...
CVE-2026-33392
In JetBrains YouTrack before 2025.3.131383 high privileged user can achieve RCE via sandbox bypass...
CVE-2026-33392
CVE-2026-33392 affects JetBrains YouTrack prior to version 2025.3.131383. The vulnerability enables a remote code execution (RCE) by a high-privilege user via a sandbox bypass. The available descriptions indicate an attacker with high privileges can trigger code execution, with impact on confiden...
CVE-2026-33392
In JetBrains YouTrack before 2025.3.131383 high privileged user can achieve RCE via sandbox bypass...
PT-2026-33457
Name of the Vulnerable Software and Affected Versions JetBrains Junie versions prior to 252.549.29 Description Command execution is possible through the use of a malicious project file. Recommendations Update to version 252.549.29 or later...
PT-2026-33418
In JetBrains YouTrack before 2025.3.131383 high privileged user can achieve RCE via sandbox bypass...
JetBrains YouTrack 安全漏洞
JetBrains YouTrack is a browser-based error tracking and project management software developed by Czech company JetBrains. This software features error tracking, the ability to create workflows, and monitoring of project progress. Versions of JetBrains YouTrack prior to 2025.3.131383 contained...
JetBrains Junie 安全漏洞
JetBrains Junie is a coding proxy provided by the Czech company JetBrains. Versions of JetBrains Junie prior to 252.549.29 contained security vulnerabilities, which were due to the possibility of executing commands through malicious project files...
CVE-2021-27733
In JetBrains YouTrack before 2020.6.6441, stored XSS was possible via an issue attachment...
CVE-2026-32745
In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settings...
CVE-2026-32229
In JetBrains Hub before 2026.1 possible on sign-in account mismatch with non-SSO auth and 2FA disabled...
This Week in Spring - March 17th, 2026
Hi, Spring fans! Welcome to another rip-roaring installment of This Week in Spring , which I'm posting ahead of my keynote at the amazing JavaOne 2026 event here in sunny San Francisco, California! I love Piotr's latest post on using local AI models with LM Studio and Spring AI Did you see the ne...
EUVD-2026-12045
In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settings...
CVE-2026-32745
In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settings...
CVE-2026-32745
JetBrains Datalore is affected prior to version 2026.1. The vulnerability arises from missing the Secure attribute on cookie settings, enabling session hijacking. No exploit details are provided in the documents. Affected product: JetBrains Datalore; root cause: cookie security attribute misconfi...
CVE-2026-32745
In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settings...
PT-2026-25323
CVE-2026-32745 In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settings https://t.co/5G9cZc08Tr...
JetBrains Datalore 安全漏洞
JetBrains Datalore is a collaborative data science platform developed by the Czech company JetBrains. Versions of JetBrains Datalore prior to 2026.1 contained a security vulnerability caused by the lack of security attributes in Cookie settings, which could lead to session hijacking...