1331547 matches found
CVE-2026-123322
In JetBrains WebStorm before 2026.3, 2026.2.4 code execution was possible in untrusted projects via the Angular CLI schematics loader...
EUVD-2026-118072
In JetBrains IntelliJ IDEA before 2026.3 code execution via the document import was possible in untrusted projects...
CVE-2026-123308
In JetBrains IntelliJ IDEA before 2026.3 code execution via the document import was possible in untrusted projects...
CVE-2026-123308
In JetBrains IntelliJ IDEA versions prior to 2026.3 , a vulnerability exists that allows for code execution when importing a document from an untrusted project . This issue is categorized under CWE-829 (Inclusion of Functionality from Untrusted Control Sphere). The impact includes high consequenc...
CVE-2026-123304
JetBrains IntelliJ IDEA versions before 2026.3 are vulnerable to code execution in untrusted projects. The root cause is associated with a configured ShellCheck path , allowing for the inclusion of functionality from an untrusted control sphere (CWE-829). Exploitation of this vulnerability requir...
CVE-2026-123304
In JetBrains IntelliJ IDEA before 2026.3 code execution in untrusted projects via a configured ShellCheck path...
EUVD-2026-118068
In JetBrains IntelliJ IDEA before 2026.3 code execution in untrusted projects via a configured ShellCheck path...
CVE-2026-123302
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4, 2026.1.5.1, 2025.3.6.2 code execution was possible in untrusted projects via script engine discovery...
EUVD-2026-118067
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4, 2026.1.5.1, 2025.3.6.2 code execution was possible in untrusted projects via script engine discovery...
CVE-2026-123302
The JetBrains IntelliJ IDEA IDE versions before 2026.3 , 2026.2.4 , 2026.1.5.1 , and 2025.3.6.2 are vulnerable to code execution when handling untrusted projects. The root cause involves script engine discovery , which allows for the inclusion of functionality from an untrusted control sphere (CW...
EUVD-2026-118058
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 code execution was possible in untrusted projects via the Terraform tool path setting...
CVE-2026-123293
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 code execution was possible in untrusted projects via the Terraform tool path setting...
CVE-2026-123293
JetBrains IntelliJ IDEA versions prior to 2026.3 and 2026.2.4 are vulnerable to code execution within untrusted projects. The root cause is linked to the Terraform tool path setting (CWE-829), which allows for the inclusion of functionality from an untrusted control sphere. No specific remediatio...
CVE-2026-123280
In JetBrains Datalore versions prior to 2026.2.4 , an incorrect authorization vulnerability (CWE-863) allows unauthenticated users to execute arbitrary code. The attack vector is triggered through published interactive reports . This vulnerability has a High base severity (CVSS 3.1: 8.1), potenti...
EUVD-2026-118045
In JetBrains Datalore before 2026.2.4 unauthenticated users could execute code via published interactive reports...
CVE-2026-123278
In JetBrains IntelliJ IDEA versions prior to 2026.3 , a vulnerability exists that allows for code execution . The root cause is an unauthenticated JDBC worker RMI endpoint , which lacks necessary authentication for critical functionality (CWE-306). This vulnerability allows for High confidentiali...
CVE-2026-123279
In JetBrains Datalore versions prior to 2026.4 , a vulnerability allows for code execution within a notebook's computation. This issue stems from Incorrect Authorization (CWE-863), specifically enabling view-only collaborators to execute code. The vulnerability carries a CRITICAL CVSS 3.1 base sc...
CVE-2026-123278
In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via the unauthenticated JDBC worker RMI endpoint...