975 matches found
CVE-2026-64810
In JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, allowing silent user activity tracking...
EUVD-2026-48235
In JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, allowing silent user activity tracking...
CVE-2026-64810
In JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, allowing silent user activity tracking...
CVE-2026-64813: Client-Side Enforcement of Server-Side Security
In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Remote Development session...
CVE-2026-64812: Missing Authentication for Critical Function
In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development session...
CVE-2026-64811: Inclusion of Functionality from Untrusted Control Sphere
In JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before granting project trust via development container configuration...
PT-2026-63966
Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions prior to 2026.2 Description An issue exists where unauthorized input injection is possible during a Remote Development session. Recommendations Update JetBrains IntelliJ IDEA to version 2026.2...
PT-2026-63968
In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session...
PT-2026-63965
Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions prior to 2026.2 Description Arbitrary code execution is possible through the development container configuration before the user grants trust to the project. Recommendations Update JetBrains IntelliJ IDEA to...
PT-2026-63967
Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions prior to 2026.2 Description An issue exists in Remote Development sessions that allows for the unauthorized modification of settings. Recommendations Update JetBrains IntelliJ IDEA to version 2026.2...
CVE-2026-64814: Missing Authorization
In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session...
PT-2026-63969
Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions prior to 2026.2 Description Arbitrary code injection is possible through the use of UI Designer form files. Recommendations Update JetBrains IntelliJ IDEA to version 2026.2...
CVE-2026-64815: Improper Control of Generation of Code
In JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer form files...
CVE-2026-64810: Improper Neutralization of Input During Web Page Generation
In JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, allowing silent user activity tracking...
PT-2026-63964
In JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, allowing silent user activity tracking...
JetBrains IntelliJ IDEA < 2026.1.4 Code Execution via Path Traversal (CVE-2026-59792)
The version of JetBrains IntelliJ IDEA installed on the remote host is prior to 2026.1.4. It is, therefore, affected by a code execution vulnerability: - Code execution via path traversal in project workspace ID handling was possible. CVE-2026-59792 Note that Nessus has not tested for this issue...
CVE-2026-59792
In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in project workspace ID handling was possible...
CVE-2026-59792
In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in project workspace ID handling was possible...
