5069 matches found
CVE-2026-28194
In JetBrains TeamCity before 2025.11.3 open redirect was possible in the React project creation flow...
CVE-2026-28195
CVE-2026-28195 affects JetBrains TeamCity prior to 2025.11.3, where missing authorization allowed project developers to add parameters to build configurations. The vulnerability arises from insufficient access controls on build configuration parameters, enabling modification by users with project...
CVE-2026-28195
In JetBrains TeamCity before 2025.11.3 missing authorization allowed project developers to add parameters to build configurations...
CVE-2026-28194
In JetBrains TeamCity before 2025.11.3 open redirect was possible in the React project creation flow...
CVE-2026-28194
CVE-2026-28194 concerns JetBrains TeamCity (pre-2025.11.3) where the React project creation flow allowed an open redirect. The description identifies the affected software and the vulnerable flow, noting an impact with confidentiality at LOW and no other impact, with user interaction required. Th...
CVE-2026-28193
In JetBrains YouTrack before 2025.3.121962 apps were able to send requests to the app permissions endpoint...
CVE-2026-28193
In JetBrains YouTrack before 2025.3.121962 apps were able to send requests to the app permissions endpoint...
CVE-2026-28193
CVE-2026-28193 (JetBrains YouTrack) : Affects YouTrack builds prior to 2025.3.121962 where apps could send requests to the app permissions endpoint. The CVSS 3.1 vector is CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H with base score 8.8 (HIGH). Attack vector: NETWORK; Attack complexity: LOW; Priv...
PT-2026-21906
In JetBrains TeamCity before 2025.11.3 disabling versioned settings left a credentials config on disk...
PT-2026-21904
In JetBrains TeamCity before 2025.11.3 open redirect was possible in the React project creation flow...
JetBrains TeamCity 安全漏洞
JetBrains TeamCity is a set of distributed build management and continuous integration tools developed by the Czech company JetBrains. This tool offers features such as continuous unit testing, code quality analysis, and reporting on build issues. Versions prior to JetBrains TeamCity 2025.11.3...
JetBrains TeamCity 安全漏洞
JetBrains TeamCity is a set of distributed build management and continuous integration tools developed by the Czech company JetBrains. This tool offers features such as continuous unit testing, code quality analysis, and reporting on build issues. Versions of JetBrains TeamCity prior to 2025.11.3...
JetBrains YouTrack 安全漏洞
JetBrains YouTrack is a browser-based error tracking and project management software developed by Czech company JetBrains. This software features error tracking, the ability to create workflows, and monitoring of project progress. Versions of JetBrains YouTrack prior to version 2025.3.121962...
PT-2026-21903
Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2025.3.121962 Description The software allows applications to send requests to the app permissions endpoint without authorization. This could lead to unauthorized actions related to application permissions...
GitHub Copilot for JetBrains < 1.5.63 Remote Code Execution (February 2026)
The GitHub Copilot for JetBrains plugin installed on the remote host is prior to version 1.5.63. It is, therefore, affected by a remote code execution vulnerability: - Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot allows an unauthorized attack...
CVE-2026-21516 GitHub Copilot for Jetbrains Remote Code Execution Vulnerability
...
CVE-2026-21516
Github Copilot contains CVE-2026-21516: improper neutralization of special elements used in a command (command injection) that allows a remote attacker to execute code over the network. CVSS v3.1 base score 8.8 (HIGH) with AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Root cause is command injection due ...
CVE-2026-21516 GitHub Copilot for Jetbrains Remote Code Execution Vulnerability
...
GitHub Copilot for Jetbrains Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Github Copilot allows an unauthorized attacker to execute code over a network...
