975 matches found
JetBrains IntelliJ IDEA 安全漏洞
JetBrains IntelliJ IDEA is a set of integrated development environments for the Java language from the Czech company JetBrains. A security vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2023.2, which stems from an issue with the Space plugin requesting too many permissions...
CVE-2023-39261: Execution with Unnecessary Privileges
In JetBrains IntelliJ IDEA before 2023.2 plugin for Space was requesting excessive permissions...
PT-2023-26854
Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions prior to 2023.2 Description The plugin for Space in JetBrains IntelliJ IDEA was requesting excessive permissions. Recommendations For versions prior to 2023.2, update to version 2023.2 or later to resolve the...
CVE-2023-38069
In JetBrains IntelliJ IDEA before 2023.1.4 license dialog could be suppressed in certain cases...
CVE-2023-38069
In JetBrains IntelliJ IDEA before 2023.1.4 license dialog could be suppressed in certain cases...
Code injection
In JetBrains IntelliJ IDEA before 2023.1.4 license dialog could be suppressed in certain cases...
CVE-2023-38069
In JetBrains IntelliJ IDEA before 2023.1.4 license dialog could be suppressed in certain cases...
CVE-2023-38069
In JetBrains IntelliJ IDEA before 2023.1.4 license dialog could be suppressed in certain cases...
CVE-2023-38069
In JetBrains IntelliJ IDEA before 2023.1.4 license dialog could be suppressed in certain cases...
CVE-2023-38069
JetBrains IntelliJ IDEA prior to 2023.1.4 is affected by CVE-2023-38069: a license dialog suppression vulnerability due to improper checking for an unspecified unusual condition. The issue is described as a local, authenticated-access problem enabling suppression of the license dialog; multiple c...
PT-2023-26281
Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions prior to 2023.1.4 Description The issue allows the license dialog to be suppressed in certain cases. Recommendations For versions prior to 2023.1.4, update to version 2023.1.4 or later to resolve the issue...
CVE-2023-38069: Improper Check for Unusual or Exceptional Conditions
In JetBrains IntelliJ IDEA before 2023.1.4 license dialog could be suppressed in certain cases...
ancillaryideatedesigns.com Cross Site Scripting vulnerability OBB-3325778
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
MAL-2023-872 Malicious code in the-idea-of-you-by-robinne-lee-on-audiobook-full-volumes- (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d91700b0da8e1a53e1564ef80ca21fc0058d6bb18cfea0245dbd1bcf42c6062f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-48435
In JetBrains PhpStorm before 2023.1 source code could be logged in the local idea.log file...
JetBrains PhpStorm 日志信息泄露漏洞
JetBrains PhpStorm is an application from the Czech company JetBrains. It provides an application for writing code. A log information disclosure vulnerability exists in JetBrains PhpStorm versions prior to 2023.1, which stems from the fact that code can be logged locally in the idea.log file...
PT-2023-15778 · Jetbrains · Phpstorm
Name of the Vulnerable Software and Affected Versions: JetBrains PhpStorm versions prior to 2023.1 Description: The issue allows source code to be logged in the local idea.log file. Recommendations: For versions prior to 2023.1, update to version 2023.1 or later to resolve the issue...
Vulnerabilities fixed in Jetbrains IntelliJ IDEA
Jetbrains has fixed vulnerabilities in IntelliJ IDEA. A malicious person with access to the development environment can exploit the vulnerabilities to bypass security measures or manipulate source code to gain access to sensitive data or execute or have executed code with privileges of the victim...