JetBrains YouTrack < 2026.2.19575 / 2026.3.x < 2026.3.16075 Missing Authorization (CVE-2026-111092)

The version of JetBrains YouTrack installed on the remote host is prior to 2026.2.19575, or 2026.3.x prior to 2026.3.16075. It is, therefore, affected by a missing authorization vulnerability: - In JetBrains YouTrack before 2026.2.19575, 2026.3.16075, 2026.3.16397, 2026.3.16402 mail rules allowed...

CVE-2026-111092

In JetBrains YouTrack before 2026.2.19575 2026.3.16075 2026.3.16397 2026.3.16402 mail rules allowed a project admin to execute cross-project issue commands...

CVE-2026-111092

In JetBrains YouTrack before 2026.2.19575 2026.3.16075 2026.3.16397 2026.3.16402 mail rules allowed a project admin to execute cross-project issue commands...

CVE-2026-111092

In JetBrains YouTrack versions prior to 2026.2.19575 , 2026.3.16075 , 2026.3.16397 , and 2026.3.16402 , a vulnerability exists in mail rules that allows a project admin to execute cross-project issue commands . This issue is categorized as Missing Authorization (CWE-862 ) and results in high conf...

EUVD-2026-102145

In JetBrains YouTrack before 2026.2.19575 2026.3.16075 2026.3.16397 2026.3.16402 mail rules allowed a project admin to execute cross-project issue commands...

CVE-2026-111092

In JetBrains YouTrack before 2026.2.19575 2026.3.16075 2026.3.16397 2026.3.16402 mail rules allowed a project admin to execute cross-project issue commands...

CVE-2026-111092: Missing Authorization

In JetBrains YouTrack before 2026.2.19575 2026.3.16075 2026.3.16397 2026.3.16402 mail rules allowed a project admin to execute cross-project issue commands...

PT-2026-114988

🚨 CVE-2026-111092 In JetBrains YouTrack before 2026.2.19575 2026.3.16075 2026.3.16397 2026.3.16402 mail rules allowed a project admin to execute cross-project issue commands 🎖@cveNotify...

EUVD-2014-8596

Malware in sbrugna...

EUVD-2007-4419

Malware in sbrugna...

EUVD-2007-1364

Malware in sbrugna...

EUVD-2007-0532

Malware in sbrugna...

EUVD-2008-0586

Malware in sbrugna...

CVE-2025-53073

In Sentry 25.1.0 through 25.5.1, an authenticated attacker can access a project's issue endpoint and perform unauthorized actions such as adding a comment without being a member of the project's team. A seven-digit issue ID must be known it is not treated as a secret and might be mentioned...

CVE-2025-53073

In Sentry 25.1.0 through 25.5.1, an authenticated attacker can access a project's issue endpoint and perform unauthorized actions such as adding a comment without being a member of the project's team. A seven-digit issue ID must be known it is not treated as a secret and might be mentioned...

CVE-2022-3066

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1. It was possible for an unauthorised user to create issues in a project...

CVE-2014-8765

Multiple cross-site scripting XSS vulnerabilities in the Project Issue File Review module PIFR module 6.x-2.x before 6.x-2.17 for Drupal allow 1 remote attackers to inject arbitrary web script or HTML via a crafted patch, which triggers a PIFR client to test the patch and return the results to th...

CVE-2014-8765: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Project Issue File Review module PIFR module 6.x-2.x before 6.x-2.17 for Drupal allow 1 remote attackers to inject arbitrary web script or HTML via a crafted patch, which triggers a PIFR client to test the patch and return the results to th...

PT-2014-8720

Name of the Vulnerable Software and Affected Versions Drupal Project Issue File Review module PIFR versions 6.x-2.x before 6.x-2.17 Description The issue allows remote attackers to inject arbitrary web script or HTML via a crafted patch. This triggers a PIFR client to test the patch and return th...

Drupal Project Issue File Review模块HTML注入漏洞

Bugtraq ID:65830 Drupal是一套开放源码的内容管理平台。 Drupal Project Issue File Review存在跨站脚本漏洞，允许远程攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时，可获取敏感信息或劫持用户会话。 0 Drupal Project Issue File Review 6.x-2.0 厂商补丁： Drupal ----- Drupal Project Issue File Review 6.x-2.17已经修复该漏洞，建议用户下载更新： http://drupal.org/project/projectissuefilerev...