CVE-2025-43014

CVE-2025-43014 affects JetBrains Toolbox App prior to 2.6, specifically the SSH plugin, which established connections without sufficient user confirmation. The available connected documents confirm this vulnerability exists in versions before 2.6 and describe the issue as a lack of proper user va...

CVE-2025-43014

In JetBrains Toolbox App before 2.6 the SSH plugin established connections without sufficient user confirmation...

CVE-2025-43012

In JetBrains Toolbox App before 2.6 command injection in SSH plugin was possible...

CVE-2025-42921

In JetBrains Toolbox App before 2.6 host key verification was missing in SSH plugin...

CVE-2025-42921

In JetBrains Toolbox App before 2.6 host key verification was missing in SSH plugin...

CVE-2025-42921

In JetBrains Toolbox App before 2.6 host key verification was missing in SSH plugin...

CVE-2025-42921

JetBrains Toolbox App has a CVE-2025-42921 vulnerability affecting versions prior to 2.6, caused by missing host key verification in the SSH plugin. Multiple connected sources corroborate that the SSH plugin’s host key verification is absent, enabling potential subversion of SSH authenticity. Aff...

JetBrains Toolbox App security vulnerabilities

JetBrains Toolbox App is an application for managing JetBrains development tools that helps users install, update and manage multiple JetBrains development tools. A security vulnerability exists in JetBrains Toolbox App that stems from unencrypted transmission of credentials during SSH...

JetBrains Toolbox command injection vulnerability

JetBrains Toolbox App is an application for managing JetBrains development tools, providing installation, update, and management capabilities. JetBrains Toolbox App suffers from a command injection vulnerability that stems from the SSH plugin handling input improperly. An attacker could exploit t...

JetBrains Toolbox App security vulnerabilities

JetBrains Toolbox App is an application for managing JetBrains development tools, providing the ability to install, update and manage multiple JetBrains tools. A security vulnerability exists in JetBrains Toolbox App that stems from the lack of authentication of the host key in the SSH plugin. An...

PT-2025-17197 · Jetbrains · Jetbrains Toolbox App

Name of the Vulnerable Software and Affected Versions: JetBrains Toolbox App versions prior to 2.6 Description: The issue concerns missing host key verification in the SSH plugin. Recommendations: For versions prior to 2.6, update to version 2.6 or later to resolve the issue...

CVE-2025-43013: Cleartext Transmission of Sensitive Information

In JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication was possible...

PT-2025-17198

Name of the Vulnerable Software and Affected Versions JetBrains Toolbox App versions prior to 2.6 Description The issue concerns command injection in the SSH plugin. Recommendations For versions prior to 2.6, update to version 2.6 or later to resolve the issue...

PT-2025-17199 · Jetbrains · Jetbrains Toolbox App

Name of the Vulnerable Software and Affected Versions: JetBrains Toolbox App versions prior to 2.6 Description: The issue concerns unencrypted credential transmission during SSH authentication. Recommendations: For versions prior to 2.6, update to version 2.6 or later to resolve the issue...

PT-2025-17200 · Jetbrains · Jetbrains Toolbox App

Name of the Vulnerable Software and Affected Versions: JetBrains Toolbox App versions prior to 2.6 Description: The issue concerns the SSH plugin in the JetBrains Toolbox App, which established connections without sufficient user confirmation. Recommendations: For versions prior to 2.6, update to...

CVE-2025-43012: Improper Neutralization of Special Elements used in a Command

In JetBrains Toolbox App before 2.6 command injection in SSH plugin was possible...

CVE-2025-42921: Improper Validation of Certificate with Host Mismatch

In JetBrains Toolbox App before 2.6 host key verification was missing in SSH plugin...

CVE-2025-43014: Missing Critical Step in Authentication

In JetBrains Toolbox App before 2.6 the SSH plugin established connections without sufficient user confirmation...

ae-toolbox (0.2.0), aihwkit (>=0.7.0, <=0.7.1) +60 more potentially affected by CVE-2025-3730 via torch (1.13.0)

torch PYPI version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - ae-toolbox 0.2.0 - aihwkit =0.7.0, =0.1.0, =1.0.14, =1.0.1, =0.1.15, =0.0.9, =0.3.0, =0.1.0, =0.1.8rc3, =0.1.8rc4 and more Source cves: CVE-2025-3730...

org.jenkins-ci.main:jenkins-test-harness (1.532.2), org.jenkins-ci.main:jenkins-war (1.532.2) +16 more potentially affected by CVE-2025-31720 via org.jenkins-ci.main:jenkins-core (1.532.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.532.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.532.2 - org.jenkins-ci.main:jenkins-war 1.532.2 -...