1842 matches found
CVE-2026-100258
In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed read-only users to read project settings...
CVE-2026-100259
In JetBrains YouTrack before 2026.2.18991 improper access control on Gantt chart allowed edits by users with view-only access...
CVE-2026-100261
In JetBrains YouTrack before 2026.2.18991 changing article visibility settings was possible without update permission...
CVE-2026-100260
In JetBrains YouTrack before 2026.2.18991 mailbox integration allowed authentication after a password reset...
CVE-2026-100280
In JetBrains YouTrack before 2026.2.19197 creating a project from an unreadable custom template was possible...
EUVD-2026-90024
In JetBrains YouTrack before 2026.2.19197 creating a project from an unreadable custom template was possible...
CVE-2026-100280
In JetBrains YouTrack versions prior to 2026.2.19197 , a vulnerability exists that allows the creation of a project from an unreadable custom template . This issue is associated with a Missing Authorization flaw (CWE-862). No specific exploit details or remediation instructions are provided in th...
EUVD-2026-90021
In JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a notification signature...
CVE-2026-100277
In JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a notification signature...
CVE-2026-100278
In JetBrains YouTrack versions prior to 2026.2.19197 , a vulnerability allows users with restricted permissions to edit and hide comments belonging to other users. This flaw impacts the integrity of user comments within the platform. No specific exploit information or remediation details are prov...
CVE-2026-100277
In JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a notification signature...
CVE-2026-100278
In JetBrains YouTrack before 2026.2.19197 users with restricted permission could edit and hide other users' comments...
CVE-2026-100279
In JetBrains YouTrack before 2026.2.19197 changing an integration URL exposed its stored credentials...
CVE-2026-100279
In JetBrains YouTrack versions prior to 2026.2.19197 , a vulnerability exists where changing an integration URL can result in the exposure of stored credentials . The security impact is characterized by high confidentiality loss, as indicated by a CVSS 3.1 score of 6.5. No specific exploit inform...
EUVD-2026-90022
In JetBrains YouTrack before 2026.2.19197 users with restricted permission could edit and hide other users' comments...
CVE-2026-100277
In JetBrains YouTrack versions prior to 2026.2.19197 , an account takeover is possible due to an incorrect authorization vulnerability. The root cause involves the ability to replay a notification signature . Specific exploit details are not provided in the documentation. Remediation is available...
EUVD-2026-90023
In JetBrains YouTrack before 2026.2.19197 changing an integration URL exposed its stored credentials...
CVE-2026-100275
In JetBrains YouTrack before 2026.2.19197 stored XSS in the workflow error notification toast was possible...