647 matches found
CVE-2026-75052
In JetBrains IntelliJ IDEA before 2026.2.1 command execution via crafted Markdown preview content was possible in trusted projects...
CVE-2026-75054
In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in untrusted projects...
CVE-2026-75055
In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE...
CVE-2026-75057
In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log...
CVE-2026-75056
In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible...
CVE-2026-75053
In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint...
CVE-2026-75058
In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importers...
CVE-2026-75058
In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importers...
EUVD-2026-60256
In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log...
EUVD-2026-60257
In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importers...
CVE-2026-75058
In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importers...
CVE-2026-75057
In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log...
CVE-2026-75057
In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log...
CVE-2026-75058
In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importers...
CVE-2026-75057
In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log...
CVE-2026-75056
In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible...
CVE-2026-75055
In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE...
CVE-2026-75054
JetBrains IntelliJ IDEA before 2026.2.1 is vulnerable to server-side request forgery (SSRF) via the OpenAPI preview proxy when processing untrusted projects. The flaw allows internal network probing and potential access to local services, with HIGH confidentiality impact and MEDIUM CVSS 6.3 sever...