Search

Expected end of text, found '/' (at char 11), (line:1, col:12)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (421364 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-123838 1 Jetbrains 1 Intellij Idea 2026-11-07 7.8 High
In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in Safe Mode via UI Designer form file
CVE-2026-123837 1 Jetbrains 1 Intellij Idea 2026-11-07 7.8 High
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.1 command injection was possible in untrusted projects via Tomcat run configurations on WSL
CVE-2026-123832 1 Jetbrains 1 Clion 2026-11-07 9.6 Critical
In JetBrains CLion before 2026.2 code execution was possible in Safe Mode via JSON compilation database
CVE-2026-123831 1 Jetbrains 1 Clion 2026-11-07 9.6 Critical
In JetBrains CLion before 2026.2, 2026.1.4 code execution was possible in Safe Mode via Meson project settings
CVE-2026-123328 1 Jetbrains 1 Youtrack 2026-11-07 6.4 Medium
In JetBrains YouTrack before 2026.2.19656 app permission bypass allowed privilege escalation via project tab
CVE-2026-123325 1 Jetbrains 1 Youtrack 2026-11-07 7.1 High
In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 inclusion of untrusted remote code was possible via the plugin sandbox page
CVE-2026-123311 1 Jetbrains 1 Intellij Idea 2026-11-07 5.3 Medium
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 command execution via a hidden run control in the Markdown preview was possible
CVE-2026-123308 1 Jetbrains 1 Intellij Idea 2026-11-07 6.3 Medium
In JetBrains IntelliJ IDEA before 2026.3 code execution via the document import was possible in untrusted projects
CVE-2026-123305 1 Jetbrains 1 Intellij Idea 2026-11-07 7.5 High
In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via unpacking Dev Container archives from a remote host
CVE-2026-123304 1 Jetbrains 1 Intellij Idea 2026-11-07 7.8 High
In JetBrains IntelliJ IDEA before 2026.3 code execution in untrusted projects via a configured ShellCheck path
CVE-2026-123302 1 Jetbrains 1 Intellij Idea 2026-11-07 7.8 High
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4, 2026.1.5.1, 2025.3.6.2 code execution was possible in untrusted projects via script engine discovery
CVE-2026-123298 1 Jetbrains 1 Hub 2026-11-07 5 Medium
In JetBrains Hub before 2026.2.52556 sMTP command injection via email verification was possible
CVE-2026-123296 1 Jetbrains 1 Hub 2026-11-07 7.5 High
In JetBrains Hub before 2026.2.52519 privilege escalation via forged email verification was possible
CVE-2026-123294 1 Jetbrains 1 Hub 2026-11-07 9.6 Critical
In JetBrains Hub before 2026.2.52556 privilege escalation was possible by changing email authentication details during the verification flow
CVE-2026-123293 1 Jetbrains 1 Intellij Idea 2026-11-07 7.8 High
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 code execution was possible in untrusted projects via the Terraform tool path setting
CVE-2026-123278 1 Jetbrains 1 Intellij Idea 2026-11-07 6.7 Medium
In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via the unauthenticated JDBC worker RMI endpoint
CVE-2026-123276 1 Jetbrains 1 Clion 2026-11-07 7.8 High
In JetBrains CLion before 2026.3, 2026.2.4.1 code execution was possible in Safe Mode via a crafted GDB server debug profile
CVE-2026-118147 1 Microsoft 5 Microsoft Visual Studio 2017 Version 15.9, Microsoft Visual Studio 2019 Version 16.11, Microsoft Visual Studio 2022 Version 17.14 and 2 more 2026-11-07 7.4 High
Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-107155 1 Sonicwall 1 Sonicos 2026-11-07 8.8 High
A permissive cross-domain policy vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially enable a remote unauthenticated attacker to perform unauthorized operations.
CVE-2023-4535 3 Fedoraproject, Opensc Project, Redhat 4 Fedora, Opensc, Enterprise Linux and 1 more 2026-11-07 4.5 Medium
An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to the computer and a specially crafted USB device or smart card. This flaw allows the attacker to manipulate APDU responses and potentially gain unauthorized access to sensitive data, compromising the system's security.