5069 matches found
CVE-2026-25848
In JetBrains Hub before 2025.3.119807 authentication bypass allowing administrative actions was possible...
CVE-2026-25847
In JetBrains PyCharm before 2025.3.2 a DOM-based XSS on Jupyter viewer page was possible...
KLA90877 ACE vulnerability in Microsoft Copilot Plugin
A remote code execution vulnerability was found in Microsoft Copilot Studio. Malicious users can exploit this vulnerability to execute arbitrary code, bypass security restrictions. Original advisories CVE-2026-21516 Exploitation Related products GitHub-Copilot-Plugin CVE list CVE-2026-21516...
Microsoft GitHub Copilot for JetBrains 命令注入漏洞
Microsoft GitHub Copilot for JetBrains is an AI programming assistant plugin from Microsoft USA that can be installed in various IDEs produced by JetBrains. A command injection vulnerability exists in Microsoft GitHub Copilot for JetBrains. The vulnerability stems from the application failing to...
CVE-2026-25847
In JetBrains PyCharm before 2025.3.2 a DOM-based XSS on Jupyter viewer page was possible...
CVE-2026-25848
In JetBrains Hub before 2025.3.119807 authentication bypass allowing administrative actions was possible...
CVE-2026-25848
In JetBrains Hub before 2025.3.119807 authentication bypass allowing administrative actions was possible...
CVE-2026-25846
In JetBrains YouTrack before 2025.3.119033 access tokens could be exposed in Mailbox logs...
CVE-2026-25848
In JetBrains Hub before 2025.3.119807 authentication bypass allowing administrative actions was possible...
CVE-2026-25848
CVE-2026-25848 : The vulnerability affects JetBrains Hub (pre-2025.3.119807). The issue is an authentication bypass that enables administrative actions. The CVE entry provides a high-severity score (CVSS 3.1: 9.1), with attack vector Network, no user interaction, and impact on confidentiality and...
CVE-2026-25848
In JetBrains Hub before 2025.3.119807 authentication bypass allowing administrative actions was possible...
CVE-2026-25848
In JetBrains Hub before 2025.3.119807 authentication bypass allowing administrative actions was possible...
CVE-2026-25847
Affected software/issue: JetBrains PyCharm (pre-2025.3.2) has a DOM-based XSS in the Jupyter viewer page. Consequence: High-severity impact (CVSS 3.1: 8.2) with confidentiality and integrity impacted; exploitation requires user interaction and is network-vector, per the entry. Root cause/vector: ...
CVE-2026-25847
In JetBrains PyCharm before 2025.3.2 a DOM-based XSS on Jupyter viewer page was possible...
CVE-2026-25847
In JetBrains PyCharm before 2025.3.2 a DOM-based XSS on Jupyter viewer page was possible...
CVE-2026-25846
In JetBrains YouTrack before 2025.3.119033 access tokens could be exposed in Mailbox logs...
CVE-2026-25846
In JetBrains YouTrack before 2025.3.119033 access tokens could be exposed in Mailbox logs...
CVE-2026-25846
In JetBrains YouTrack before 2025.3.119033 access tokens could be exposed in Mailbox logs...
CVE-2026-25846
CVE-2026-25846 affects JetBrains YouTrack prior to 2025.3.119033, where access tokens could be exposed in Mailbox logs. The provided documents identify the affected product and the exposure risk (confidentiality impact HIGH; overall CVSS 6.5, Network attack vector, Low attack complexity, Privileg...