5072 matches found
CVE-2025-64683
In JetBrains Hub before 2025.3.104432 information disclosure was possible via the Users API...
CVE-2025-64682
In JetBrains Hub before 2025.3.104432 a race condition allowed bypass of the Agent-user limit...
CVE-2025-64681
In JetBrains Hub before 2025.3.104992 a race condition allowed bypass of the user limit via invitations...
CVE-2025-64681
In JetBrains Hub before 2025.3.104992 a race condition allowed bypass of the user limit via invitations...
CVE-2025-64457
In JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race condition...
CVE-2025-64457
In JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race condition...
CVE-2025-64457
JetBrains products affected: ReSharper, Rider, and dotTrace (before 2025.2.5). The issue is a local privilege escalation caused by a race condition in these tools. The vulnerability allows an attacker with local access to potentially escalate privileges, as described in multiple sources (CVE-2025...
CVE-2025-64456
In JetBrains ReSharper before 2025.2.4 missing signature verification in DPA Collector allows local privilege escalation...
CVE-2025-64456
In JetBrains ReSharper before 2025.2.4 missing signature verification in DPA Collector allows local privilege escalation...
CVE-2025-64456
CVE-2025-64456 affects JetBrains ReSharper versions prior to 2025.2.4 . The issue stems from missing signature verification in the DPA Collector , allowing local privilege escalation . Affected software is ReSharper (a Visual Studio extension for .NET). The vulnerability impact is described as lo...
CVE-2025-64690
JetBrains YouTrack is affected prior to version 2025.3.104432 due to an insecure Junie configuration that could lead to data exposure and unauthorized changes. Remediation: update to JetBrains YouTrack 2025.3.104432 or later. Other sources cite this CVE as the broader set of vulnerabilities in Yo...
CVE-2025-64689
...
CVE-2025-64689
CVE-2025-64689 is rejected/not used; this CVE ID does not represent an active vulnerability entry.
CVE-2025-64687
...
CVE-2025-64687
Summary : JetBrains YouTrack prior to version 2025.3.104432 is affected by an improper access control issue that can allow modification of MCP tool logic. This vulnerability is described across multiple sources (Red Hat, ENISA EUVD, CIRCL/CVE sightings, CNNVD, and others) and specifically impacts...
CVE-2025-64685
In JetBrains YouTrack before 2025.3.104432 missing TLS certificate validation enabled data disclosure...
CVE-2025-64685
JetBrains YouTrack before 2025.3.104432 is affected by CVE-2025-64685 due to missing TLS certificate validation, enabling data disclosure over the network. The issue is documented across multiple sources (NVD/NASL reads), with remediation to upgrade to YouTrack 2025.3.104432 or later. If details ...