733 matches found
PT-2024-1695 · Jetbrains · Intellij Idea
Name of the Vulnerable Software and Affected Versions: JetBrains IntelliJ IDEA versions prior to 2023.3.3 Description: The issue is related to errors in handling relative paths to directories in the Archive Extraction Handler component of the IntelliJ IDEA integrated development environment...
JetBrains IntelliJ IDEA < 2023.1.4 License Dialog Suppression (macOS)
The version of JetBrains IntelliJ IDEA installed on the remote macOS host is prior to 2023.1.4 It is, therefore, affected by a license dialog suppression vulnerability, due to improper checking for an unspecified unusual condition. An authenticated, local attacker could exploit this vulnerability...
JetBrains IntelliJ IDEA < 2023.2 Execution with Unnecessary Privileges (macOS)
The version of JetBrains IntelliJ IDEA installed on the remote macOS host is prior to 2023.2 It is, therefore, affected by an execution with unnecessary privileges vulnerability, due to the bundled Space plugin requesting excessive permissions. An authenticated, local attacker could exploit this...
Audited Competitive conditionality loophole
Audited is Collective Idea open source an ORM extension . Used to record all changes to the model . Audited 4.0.0 to 5.3.3 before the version of a security vulnerability , the vulnerability stems from the existence of conditional competition vulnerability...
CVE-2023-51655
In JetBrains IntelliJ IDEA before 2023.3.2 code execution was possible in Untrusted Project mode via a malicious plugin repository specified in the project configuration...
CVE-2023-51655
In JetBrains IntelliJ IDEA before 2023.3.2 code execution was possible in Untrusted Project mode via a malicious plugin repository specified in the project configuration...
Design/Logic Flaw
In JetBrains IntelliJ IDEA before 2023.3.2 code execution was possible in Untrusted Project mode via a malicious plugin repository specified in the project configuration...
CVE-2023-51655
In JetBrains IntelliJ IDEA before 2023.3.2 code execution was possible in Untrusted Project mode via a malicious plugin repository specified in the project configuration...
CVE-2023-51655
CVE-2023-51655 affects JetBrains IntelliJ IDEA prior to 2023.3.2. A malicious plugin repository specified in the project configuration enables code execution in Untrusted Project mode. Root cause: untrusted repository handling in project config allows executing injected code. Impact: potential ar...
JetBrains IntelliJ IDEA Security Vulnerability
JetBrains IntelliJ IDEA is a set of integrated development environments for the Java language from the Czech company JetBrains. A security vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2023.3.2, which stems from a malicious plugin repository specified via the project...
PT-2023-31871 · Jetbrains · Intellij Idea
Name of the Vulnerable Software and Affected Versions: JetBrains IntelliJ IDEA versions prior to 2023.3.2 Description: Code execution was possible in Untrusted Project mode via a malicious plugin repository specified in the project configuration. Recommendations: For versions prior to 2023.3.2,...
CVE-2023-49739
Vulnerability in IdeaBox Creations PowerPack Pro for Elementor.This issue affects PowerPack Pro for Elementor: from n/a through 2.9.23...
The vulnerability of the Validate JSP File function in the IntelliJ IDEA integrated development environment allows attackers to load any JAR files they desire.
The vulnerability of the Validate JSP File function in the IntelliJ IDEA integrated development environment is related to the transmission of critical information in open text. Exploiting this vulnerability allows a malicious actor to download arbitrary JAR files remotely...
Lenovo Bios Security Breach
Lenovo Bios is a boot method for computers from the Chinese company Lenovo Lenovo. It is used to boot the system during computer startup. A security vulnerability exists in Lenovo Bios that originates from a buffer overflow in the FmpSipoCapsuleDriver driver in the IdeaPad Duet 3-10IGL5...
idea-shop.de Improper Access Control vulnerability OBB-3771107
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
idea-re.net Cross Site Scripting vulnerability OBB-3757049
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-39261
In JetBrains IntelliJ IDEA before 2023.2 plugin for Space was requesting excessive permissions...
CVE-2023-39261
In JetBrains IntelliJ IDEA before 2023.2 plugin for Space was requesting excessive permissions...