68 matches found
JetBrains Rider < 2026.2.1 Unverified Skill Auto-Update
The version of JetBrains Rider installed on the remote host is prior to 2026.2.1. It is, therefore, affected by a vulnerability: - In JetBrains Rider before 2026.2.1 AI Assistant could auto-update third-party skills without user confirmation. CVE-2026-100265 Note that Nessus has not tested for th...
CVE-2026-100265
In JetBrains Rider before 2026.2.1 aI Assistant could auto-update third-party skills without user confirmation...
CVE-2026-100265
JetBrains Rider versions prior to 2026.2.1 are affected by a vulnerability where the AI Assistant could automatically update third-party skills without requiring explicit user confirmation. The provided documents do not specify the underlying root cause, the specific impact beyond unauthorized up...
CVE-2026-100265
In JetBrains Rider before 2026.2.1 aI Assistant could auto-update third-party skills without user confirmation...
EUVD-2026-90009
In JetBrains Rider before 2026.2.1 aI Assistant could auto-update third-party skills without user confirmation...
PT-2026-103312
In JetBrains Rider before 2026.2.1 aI Assistant could auto-update third-party skills without user confirmation...
CVE-2026-100265: Download of Code Without Integrity Check
In JetBrains Rider before 2026.2.1 aI Assistant could auto-update third-party skills without user confirmation...
CVE-2020-7906
In JetBrains Rider versions 2019.3 EAP2 through 2019.3 EAP7, there were unsigned binaries provided by the Windows installer. This issue was fixed in release version 2019.3...
CVE-2022-37396
In JetBrains Rider before 2022.2 Trust and Open Project dialog could be bypassed, leading to local code execution...
JetBrains Rider < 2025.2.5 Local Privilege Escalation
The version of JetBrains Rider installed on the remote host is prior to 2025.2.5. It is, therefore, affected by a local privilege escalation vulnerability: - In JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race condition. CVE-2025-64457 Note...
The vulnerability of the DPA Collector component of the ReSharper plugin in the cross-platform integrated development environment of JetBrains Rider allows attackers to escalate their privileges.
The vulnerability of the DPA Collector component in the ReSharper plugin for the cross-platform integrated development environment of JetBrains’ Rider software is related to errors in verifying the cryptographic signature. Exploiting this vulnerability can allow attackers to gain increased...
EUVD-2025-12533
Malicious code in bioql PyPI...
CVE-2024-24939
In JetBrains Rider before 2023.3.3 logging of environment variables containing secret values was possible...
CVE-2022-29821
In JetBrains Rider before 2022.1 local code execution via links in ReSharper Quick Documentation was possible...
CVE-2019-14960
JetBrains Rider before 2019.1.2 was using an unsigned JetBrains.Rider.Unity.Editor.Plugin.Repacked.dll file...
The vulnerability of the cross-platform integrated development environment JetBrains Rider, related to bypassing the relative path, allows a malicious user to gain read, modify, or delete access to data.
The vulnerability of the cross-platform integrated software development environment JetBrains Rider is related to the exploitation of a relative path. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain read, modify, or delete access to data...
JetBrains Rider < 2025.1.2 Arbitrary File Overwrite
The version of JetBrains Rider installed on the remote host is prior to 2025.1.2. It is, therefore, affected by a vulnerability as referenced in the TeamCity202504 advisory. - In JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug session...
Unspecified Vulnerability in JetBrains Rider
JetBrains Rider is a cross-platform .NET integrated development environment IDE from the Czech company JetBrains. A security vulnerability exists in JetBrains Rider that stems from a custom archive unpacker allowing arbitrary file overwrites during a remote debugging session, which can be exploit...